Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File:                     oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier:          ZjrmUg61cHnfvJPKbVpZZ0oHCqndqfBZuSIyv6P45BQ=
Subject key identifier:   13:8A:3B:3C:A3:20:93:4D:3D:15:E7:88:29:DC:A9:2C:9C:68:6B:3C
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer:       /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial:       019F18D636AE2EC601D9F2F5FF895C15B7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number:          178E
Signing time:             Tue 30 Jun 2026 14:01:59 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:59 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:59 +0000
Files and hashes:         1: GJBycD0z-Vwt49rxYIkUFvJmg34.roa (hash: ntE/dfk2CI0GAxVSBHDhu+/dJpNEVggZuAuaXY3BXZQ=)
                          2: jVpJP6BkkS37GOi50LHsrQuqbCY.roa (hash: U3tlxtXg3FRS8xNHFRy4ADqG3hKBCU+Zah1l7VaUwVk=)
                          3: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: M+AV6XMrh00snB6d54m0QPWUmFUlPP5HRRIFIBzJHQo=)
                          4: ytyVm3S7Nek5fptdKjR4lszyxVE.roa (hash: fg0+8WvdZTPMhDV0ypT87n2uD/xPs/qDgjBlkh4kxkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:36:ae:2e:c6:01:d9:f2:f5:ff:89:5c:15:b7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
        Validity
            Not Before: Jun 30 14:01:59 2026 GMT
            Not After : Jul  1 14:01:59 2026 GMT
        Subject: CN=138a3b3ca320934d3d15e78829dca92c9c686b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:96:94:82:18:d3:bc:ac:0a:61:08:5e:81:
                    fd:3c:da:a4:b0:51:84:99:0d:59:cb:9d:1d:34:76:
                    0c:da:23:28:55:62:4a:56:3b:86:1f:fb:9e:3c:2d:
                    2a:53:54:5b:f8:41:1c:02:ee:26:72:6f:d0:e9:61:
                    60:61:5a:f1:07:07:8e:f4:0f:d1:55:da:b1:61:cf:
                    47:c7:e9:39:1a:50:f8:32:40:db:c8:22:d4:b6:46:
                    2c:ac:a7:9c:24:4d:e2:b1:ef:9d:24:ac:5a:c6:9a:
                    e0:2a:eb:30:be:ca:1d:55:39:c6:a2:ee:b8:08:92:
                    dd:1f:3b:16:76:ba:d1:56:56:6e:df:78:1c:28:51:
                    6d:00:27:ef:16:5d:f6:4d:28:e4:a5:e6:2e:78:da:
                    ed:32:7b:5d:47:df:e9:51:cc:6f:7a:ec:58:31:73:
                    d2:9a:2e:c2:6a:d5:f0:ef:25:f9:a6:be:ee:71:37:
                    0c:f7:96:c1:57:b7:f7:b7:23:d9:ff:52:84:69:d7:
                    a5:95:c2:b1:0f:39:d9:67:70:34:bd:06:81:43:47:
                    9a:d6:20:89:c0:34:6c:a3:6e:76:24:52:2c:c1:86:
                    fb:37:0c:5a:11:8d:12:28:4f:db:e7:30:ea:91:68:
                    36:db:f1:61:30:20:5b:14:b5:2e:11:ca:82:ad:e9:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8A:3B:3C:A3:20:93:4D:3D:15:E7:88:29:DC:A9:2C:9C:68:6B:3C
            X509v3 Authority Key Identifier:
                keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1f:32:3e:af:40:0b:09:44:63:a4:a9:d6:29:6b:58:8a:c2:
         2a:54:9f:ab:c9:d4:e8:6e:ed:5b:33:fe:31:6b:e1:f6:84:3d:
         8c:38:54:da:dc:47:b4:05:23:12:d8:33:7f:4c:9f:f4:43:0d:
         7a:01:14:14:5f:17:4b:d3:ab:b6:73:82:38:be:56:2a:49:f8:
         ed:9c:20:2f:69:e5:84:d9:29:29:57:d4:fb:e6:9f:30:77:c9:
         13:95:69:28:8c:96:19:06:17:54:fe:2d:c0:73:f2:9f:3c:2e:
         71:9f:48:75:eb:03:c3:47:a4:62:8b:dc:37:09:0c:75:ba:f4:
         e9:90:73:88:4e:c3:8b:7a:fc:00:98:87:69:ca:c3:22:eb:ab:
         99:41:b3:69:db:40:ed:97:f9:99:c1:b4:bd:fc:1d:84:fc:e3:
         df:3d:d9:db:65:ed:ad:09:fd:ac:e7:83:a2:0a:91:6d:12:93:
         06:dc:fc:b4:67:37:2e:d6:2a:f7:5a:dd:ee:0b:9d:fa:ca:60:
         86:82:b3:a4:7c:83:5e:82:5a:04:2d:bf:18:ac:b1:90:7e:0e:
         9d:49:80:65:1a:88:a7:5f:6a:74:de:e4:96:1d:3f:7d:2d:a2:
         07:48:cc:14:67:f7:42:1d:de:3b:3a:79:e1:b7:41:53:d6:82:
         f9:36:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:20:56 2026 by rpki-client