Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File:                     OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier:          NPGQI+wXaZEg0y7odITi9un9HpY62OtpruNaZkaiTTU=
Subject key identifier:   60:FF:00:B0:D1:E0:0A:C6:FA:75:F5:E2:B8:05:17:5B:E2:09:37:5F
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer:       /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial:       01A0024B1139CF1A464A5382C571F22BDA01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 22:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:09 +0000
Files and hashes:         1: 6vVSpTChTKj56P_S9G3QSGEzPpI.roa (hash: oBJVrXqcl3ZmvttgmWCt09AlKEv4UiFRHlZlA6agM0s=)
                          2: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: ieJMvacFtMob2YxijJCTKdNd7JC9ituUxwpohQQUYv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:11:39:cf:1a:46:4a:53:82:c5:71:f2:2b:da:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
        Validity
            Not Before: Aug 14 22:01:09 2026 GMT
            Not After : Aug 15 22:01:09 2026 GMT
        Subject: CN=60ff00b0d1e00ac6fa75f5e2b805175be209375f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:61:e3:76:77:b7:90:70:47:a4:77:bf:e8:
                    84:ff:d2:c7:60:32:d0:6f:c2:55:52:fb:95:d1:6a:
                    cf:0b:37:cb:7e:79:0c:fb:ff:9f:a6:6a:c4:c4:ed:
                    62:0c:d5:f0:af:7b:7c:83:6f:53:d9:c2:b4:47:8a:
                    ec:f4:e9:5a:d3:ed:eb:df:4b:42:26:ca:f8:50:2f:
                    aa:87:9c:21:6f:89:f2:c4:11:e0:1d:6b:d8:be:e2:
                    a3:68:69:c6:5e:6c:f6:e6:3c:8f:0d:f3:fc:0e:54:
                    7b:85:f7:c3:9b:f8:82:5f:ce:b6:a0:28:7f:ce:6a:
                    b8:f5:f4:3a:76:9f:2a:11:70:be:21:e1:b9:f5:96:
                    72:c0:cf:9c:f8:f1:f5:14:94:33:06:9d:b7:02:3b:
                    bc:b7:a8:62:2b:c2:0e:0b:ed:ab:dc:3b:37:1d:3c:
                    22:26:b8:c1:99:02:63:76:6e:79:4a:0b:c6:41:00:
                    b8:31:22:d7:c4:67:22:a9:8c:e1:4f:0f:f6:d8:dd:
                    d4:3b:1c:dc:b0:10:75:46:8c:8b:1a:68:33:57:e4:
                    03:0f:68:e6:9a:64:3f:67:68:aa:63:5a:1b:90:8a:
                    e9:40:0b:6a:1e:13:57:9d:6c:88:8e:7e:e6:80:9b:
                    4f:4c:4c:7b:f0:a7:ad:03:68:56:a9:73:ec:eb:86:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FF:00:B0:D1:E0:0A:C6:FA:75:F5:E2:B8:05:17:5B:E2:09:37:5F
            X509v3 Authority Key Identifier:
                keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:f8:ca:be:19:85:e2:4e:cd:91:e2:be:cd:63:70:b8:47:
         0d:41:ac:f5:4d:80:79:de:e3:e9:ee:8c:6f:20:10:c3:8b:3b:
         71:7d:a7:92:7a:54:a9:4c:c4:df:ff:08:0c:c1:7d:b0:cb:c9:
         b3:e0:5f:bb:ee:40:4d:f8:4a:61:00:09:70:e4:27:a3:f9:ae:
         4f:97:41:30:82:d1:a0:0a:73:3b:c0:29:82:ab:82:a8:e2:4a:
         3d:99:ba:28:1d:62:00:d6:24:73:fa:f2:7b:1d:18:0a:81:1c:
         d1:ee:3b:ea:46:46:c5:0f:fd:74:14:45:a7:41:94:25:b8:41:
         ed:ea:85:c3:46:3f:89:15:bb:6e:f8:fb:16:29:f9:23:79:bf:
         9b:3c:ca:83:3f:cc:1b:8c:53:5a:d5:c7:de:e7:da:b5:af:99:
         45:45:1e:c9:9c:06:d3:ba:6b:38:bc:51:f5:e5:3c:45:da:fd:
         19:70:7b:9b:71:ff:b9:c1:64:b2:db:22:60:02:c2:9e:13:1f:
         dc:4d:d9:44:9e:ff:c7:ba:37:c9:75:3c:71:79:de:3f:40:55:
         a0:16:54:50:43:cc:c4:1b:76:32:2e:dc:64:10:45:15:7e:70:
         77:a3:aa:b7:3a:9e:18:9c:14:8d:36:29:29:ee:ad:78:80:7f:
         1d:07:0d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:33:00 2026 by rpki-client