Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          QrGS1JIZFxsl4iH+m43gpJdYa729UNQBFKiXomiw4do=
Subject key identifier:   E2:D0:65:70:BB:E7:E4:04:DF:C0:CB:A9:93:91:35:83:DB:89:41:85
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       019F295B8456DB708137501AF917AC0072C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          14D6
Signing time:             Fri 03 Jul 2026 19:01:31 +0000
Manifest this update:     Fri 03 Jul 2026 19:01:31 +0000
Manifest next update:     Sat 04 Jul 2026 19:01:31 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: 8cIPxn0QFotuoidwx1Wd+1CQO6wc0AUoMp9eMuVHjv0=)
                          2: _BiThTGjxk4mTLq-x93nIMvlUFM.roa (hash: eb4KvoDqDMfsY+rM/WfNgq/w+lmr8scY27yz0mI6HFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:5b:84:56:db:70:81:37:50:1a:f9:17:ac:00:72:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: Jul  3 19:01:31 2026 GMT
            Not After : Jul  4 19:01:31 2026 GMT
        Subject: CN=e2d06570bbe7e404dfc0cba993913583db894185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:8f:35:50:41:f6:e0:fc:ab:b0:ce:51:7b:
                    a4:5e:78:74:44:29:43:ba:e0:5e:64:27:87:06:17:
                    82:b0:9c:9e:8b:a8:7c:30:50:a0:d4:c2:ba:2b:2a:
                    41:8b:17:84:84:b2:77:5e:d0:b8:62:5c:6f:33:d2:
                    f6:d8:a7:7c:5a:b3:ec:d0:3e:19:33:76:ba:c9:5b:
                    a8:0a:90:47:2e:e9:a8:7b:02:54:c1:c6:92:98:ac:
                    fb:9a:c3:56:5a:d9:87:5b:88:19:4e:fd:2b:ec:e4:
                    4c:ae:92:78:c5:4c:79:71:1f:a7:65:ec:32:96:f7:
                    17:e7:5b:21:64:7b:b0:fb:7e:3d:ae:07:71:21:8f:
                    1e:9b:1c:be:6c:0a:80:33:fc:9c:85:ce:63:06:24:
                    22:65:c2:2a:be:ab:ff:ba:70:26:f1:20:45:67:a6:
                    45:b4:3d:d4:8a:9d:97:f3:a0:fc:cb:d9:ad:29:e1:
                    07:bb:df:5b:ba:3b:9a:45:f8:2b:8d:03:d6:c7:bd:
                    ca:00:5d:e5:f9:31:a3:03:6a:ff:97:b4:ba:36:6e:
                    16:48:c0:bc:e3:0a:c2:da:05:fc:ae:e6:cd:c7:18:
                    84:5b:0b:6e:4d:64:c8:8e:6e:4a:54:1e:16:82:19:
                    80:d5:a5:c8:1f:27:bb:c1:f3:e6:72:45:5a:b7:51:
                    9a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D0:65:70:BB:E7:E4:04:DF:C0:CB:A9:93:91:35:83:DB:89:41:85
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c1:88:82:fc:f1:6a:c6:82:9d:d7:1c:7a:fd:4f:7a:c8:dc:
         72:e7:68:4f:cd:85:59:c6:30:65:a4:68:1e:3c:e5:c7:3a:3b:
         b2:d7:2f:b0:77:90:d4:79:ff:62:3d:48:82:07:2e:0b:be:b6:
         1a:e2:dc:78:9e:a6:8d:23:b1:97:3f:fc:2c:9a:77:ba:68:0e:
         8f:e9:fb:6e:fd:73:1d:5e:15:cf:67:9c:6c:4c:ae:1a:1f:12:
         5f:42:fd:70:bf:b3:3f:93:81:36:72:99:03:7f:36:b0:03:d1:
         18:69:cc:ab:68:c7:8c:1e:3f:5c:f2:85:e7:08:6a:af:f2:6f:
         67:f2:1d:cc:9e:ee:6a:76:6f:eb:87:1c:9a:43:77:21:90:0f:
         e4:7b:ad:70:ff:c6:b7:ae:33:db:05:3b:6c:10:53:a2:78:5e:
         f2:5f:fa:96:bf:08:6b:6c:86:9a:f0:ea:b6:50:db:b8:2e:0e:
         ad:89:dc:84:4f:7b:51:ce:b3:68:10:81:ed:d1:08:24:57:cd:
         f4:a4:35:0c:6c:3b:6b:ac:ec:9c:9a:8b:fc:85:54:18:68:b4:
         12:97:5e:00:f4:60:4d:13:12:32:f0:fd:dc:07:08:3b:12:90:
         98:4b:5c:c4:4a:28:ef:13:fc:f7:24:4c:71:3b:2e:8c:3a:63:
         9b:d2:d6:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8pW4RW23CBN1Aa+ResAHLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjNhZDQwZjk2ZWQ1ZTdmMzlkOGQ5ZTE5NmFiZjBmYTIz
ODFlOGMwHhcNMjYwNzAzMTkwMTMxWhcNMjYwNzA0MTkwMTMxWjAzMTEwLwYDVQQD
EyhlMmQwNjU3MGJiZTdlNDA0ZGZjMGNiYTk5MzkxMzU4M2RiODk0MTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOGPNVBB9uD8q7DOUXukXnh0RClD
uuBeZCeHBheCsJyei6h8MFCg1MK6KypBixeEhLJ3XtC4YlxvM9L22Kd8WrPs0D4Z
M3a6yVuoCpBHLumoewJUwcaSmKz7msNWWtmHW4gZTv0r7ORMrpJ4xUx5cR+nZewy
lvcX51shZHuw+349rgdxIY8emxy+bAqAM/ychc5jBiQiZcIqvqv/unAm8SBFZ6ZF
tD3Uip2X86D8y9mtKeEHu99bujuaRfgrjQPWx73KAF3l+TGjA2r/l7S6Nm4WSMC8
4wrC2gX8rubNxxiEWwtuTWTIjm5KVB4WghmA1aXIHye7wfPmckVat1Ga6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLQZXC75+QE38DLqZORNYPbiUGFMB8GA1UdIwQY
MBaAFBPzrUD5btXn852Nnhlqvw+iOB6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzJlN2UtZjBmMC00ZmUwLWE2MzQt
ZjRmYmUwY2I5NDQ0LzEvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzJlN2UtZjBmMC00ZmUwLWE2MzQtZjRmYmUwY2I5NDQ0
LzEvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMGIgvzx
asaCndccev1PesjccudoT82FWcYwZaRoHjzlxzo7stcvsHeQ1Hn/Yj1IggcuC762
GuLceJ6mjSOxlz/8LJp3umgOj+n7bv1zHV4Vz2ecbEyuGh8SX0L9cL+zP5OBNnKZ
A382sAPRGGnMq2jHjB4/XPKF5whqr/JvZ/IdzJ7uanZv64ccmkN3IZAP5HutcP/G
t64z2wU7bBBTonhe8l/6lr8Ia2yGmvDqtlDbuC4OrYnchE97Uc6zaBCB7dEIJFfN
9KQ1DGw7a6zsnJqL/IVUGGi0EpdeAPRgTRMSMvD93AcIOxKQmEtcxEoo7xP89yRM
cTsujDpjm9LWRQ==
-----END CERTIFICATE-----
Generated at Fri Jul 3 21:47:27 2026 by rpki-client