Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          EDYQ4Zd/24za02uypvLSF9tb1scnDcNtFVvFcwIlOIM=
Subject key identifier:   65:D2:9F:08:4A:C7:0D:FD:31:BF:E9:4F:9A:69:B0:7E:6F:F4:25:BA
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       019E2A70AC48999DC5FBBC9731AF8CC3F58E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          1452
Signing time:             Fri 15 May 2026 07:01:27 +0000
Manifest this update:     Fri 15 May 2026 07:01:27 +0000
Manifest next update:     Sat 16 May 2026 07:01:27 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: qyPR1F3sabfavN4+xlk5GIGFXc5HzZdYRt40Nz2w9KQ=)
                          2: _BiThTGjxk4mTLq-x93nIMvlUFM.roa (hash: eb4KvoDqDMfsY+rM/WfNgq/w+lmr8scY27yz0mI6HFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:ac:48:99:9d:c5:fb:bc:97:31:af:8c:c3:f5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: May 15 07:01:27 2026 GMT
            Not After : May 16 07:01:27 2026 GMT
        Subject: CN=65d29f084ac70dfd31bfe94f9a69b07e6ff425ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:77:61:81:06:ae:87:08:c3:2e:80:8a:5d:
                    43:cf:f1:2f:39:e1:53:2b:99:06:a6:b5:3d:b9:a5:
                    db:2c:e7:63:fb:f9:0d:d7:7a:82:ce:7f:1e:a3:78:
                    1d:f5:25:90:97:a5:68:83:7c:d1:06:0e:b6:21:8b:
                    32:3a:1c:a1:c4:db:20:65:0c:22:f6:4d:93:f6:74:
                    36:96:e3:95:f5:c6:5b:20:89:74:a9:1c:73:0c:7f:
                    cf:ab:d7:b5:bf:29:62:e1:d4:86:28:c4:e8:84:ef:
                    cf:44:d8:d5:f0:c0:01:7a:1e:69:51:15:7f:c5:45:
                    e5:c6:20:f2:5e:57:e1:7e:06:03:4d:79:45:1b:d0:
                    a6:f5:f1:8a:df:2d:7a:05:16:ec:32:79:44:6b:0a:
                    cc:ee:86:1f:81:c7:10:7f:8c:7a:34:ca:49:ea:37:
                    5c:d9:65:57:99:c8:5b:f0:bd:b5:e0:5e:04:37:08:
                    0c:e7:fa:81:af:fe:d1:14:04:3d:02:04:5f:a6:0d:
                    a2:48:d3:58:e4:59:da:e4:3d:37:62:3d:ab:1d:ef:
                    6f:57:d4:85:7f:bd:50:5c:24:71:96:fd:fc:61:b4:
                    1e:ba:1f:4e:7a:b1:08:ae:01:21:25:48:23:41:66:
                    3e:60:64:92:82:52:b3:54:8a:a4:81:aa:f1:c5:bf:
                    2f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D2:9F:08:4A:C7:0D:FD:31:BF:E9:4F:9A:69:B0:7E:6F:F4:25:BA
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3e:96:4f:23:8a:f1:a3:68:35:3a:0f:1c:c6:2f:32:72:89:
         6b:35:83:98:c1:36:6d:06:bb:99:73:e8:4f:cc:9c:7b:6c:61:
         95:40:5a:ef:02:19:05:31:41:b1:cf:2b:21:c6:7c:66:87:cd:
         b5:02:7c:7f:cb:fd:24:c1:5c:7b:67:58:e5:ab:93:e5:54:9d:
         bc:12:dc:88:17:60:5d:1b:f5:9d:ba:39:47:e9:b7:d9:de:9b:
         c2:c7:6e:0d:88:85:7e:e1:c8:1a:94:f4:a2:9e:1d:84:f0:f9:
         07:32:04:db:4a:5d:fc:bd:e6:50:07:01:5d:30:c9:7b:36:9a:
         20:42:af:d9:3f:c7:f8:6b:90:03:39:2b:04:e9:c4:bb:de:82:
         96:d9:30:a4:cb:01:1a:0c:53:4f:dc:d7:63:ba:69:3f:44:79:
         4f:95:73:e0:1c:87:9f:bc:f6:37:d6:7b:b7:92:8d:40:6c:8c:
         4f:ca:69:41:49:0f:5f:b5:d6:6a:1d:42:e2:a6:46:73:aa:2c:
         75:78:f7:b0:fe:23:fc:94:fd:a3:d6:bf:05:9e:3f:97:f1:36:
         f0:ea:79:a7:7b:b3:c0:a8:da:5d:71:dc:ba:36:14:0a:15:0a:
         4a:70:b7:90:bc:e9:90:dc:e1:4f:76:68:e9:83:e3:02:38:a1:
         db:f5:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:38:53 2026 by rpki-client