Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
File:                     OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json)
Hash identifier:          N/xTdL+OrQCCzDQHmgxuG+IWGPYmajkug3LSFScBujk=
Subject key identifier:   4A:C8:84:15:C5:6E:8F:86:83:EF:29:FB:68:F0:DF:36:FA:85:77:92
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Certificate issuer:       /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial:       019E2A70579BD1B735DE35B4D48CCDBCA861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
Manifest number:          1423
Signing time:             Fri 15 May 2026 07:01:05 +0000
Manifest this update:     Fri 15 May 2026 07:01:05 +0000
Manifest next update:     Sat 16 May 2026 07:01:05 +0000
Files and hashes:         1: 8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa (hash: brAMlNDL72wfdOjb6ddjdyt7eJo3B0Foc3PWILSQa/8=)
                          2: 9n4VcJdW8qnQyuWz0vME2QO1fbA.roa (hash: S37EYsMTrmOyNa0qB2TT/fhsEUbmtLIrd9epgXzmCws=)
                          3: GZDzHGbDx7dfkoatOEujE-QeXX0.roa (hash: rp5gMVM6d0QMtfUx8hE8lYmJBJMynSH2EW1XEZUY1fk=)
                          4: NzRF1KMW-RjrnCQ45Ns__CGotH0.roa (hash: vgtU60XykZYUOdD/K3o47xgLUs91d2y5R24TZ2aLcb4=)
                          5: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: D5lUXWssRX7t/g47Xj0XTgsP7ZkiporXiVIfIACqq5o=)
                          6: hHhTehEBjNf1KtA383HryRHP5GU.roa (hash: 553Jp1J+2Jv+MXIIihnE80X01/4/KUBqAe/MNZh5Kwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:57:9b:d1:b7:35:de:35:b4:d4:8c:cd:bc:a8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
        Validity
            Not Before: May 15 07:01:05 2026 GMT
            Not After : May 16 07:01:05 2026 GMT
        Subject: CN=4ac88415c56e8f8683ef29fb68f0df36fa857792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5f:51:a3:83:ee:6f:d1:48:73:1c:65:cb:ab:
                    22:2a:7f:c2:37:12:1c:16:94:00:d5:91:53:b2:70:
                    d7:07:f4:01:d2:8e:e3:63:f2:e5:8b:82:70:ed:f0:
                    25:4f:43:1b:1d:59:c1:4b:2d:3b:7d:6d:41:dc:e0:
                    1e:e2:98:92:d0:60:10:53:19:92:4e:ff:3e:d8:c7:
                    09:d1:40:52:08:b3:d0:1a:f4:e6:7e:34:a2:52:0a:
                    02:88:6f:c2:a1:27:71:7e:b7:2b:5b:03:63:95:eb:
                    0d:75:09:f3:d7:ff:57:93:87:c9:4d:8c:98:3d:7e:
                    88:4b:e4:08:8b:05:99:9e:8f:68:d1:4d:a5:fc:75:
                    cb:de:4b:71:ef:bb:c4:a9:e0:a1:b4:58:93:11:76:
                    49:c0:ee:f6:4f:84:24:b8:df:62:6a:47:ed:6a:02:
                    e3:f1:a9:1a:8b:d0:7f:75:6b:00:2f:49:8f:78:11:
                    a6:90:2c:71:c2:a3:57:41:d5:f1:3d:31:e2:e3:0b:
                    fd:99:8c:17:5d:d2:7e:b9:ae:d8:1e:ec:f6:74:a1:
                    33:3d:ae:9f:2a:c6:6d:6d:11:2d:70:b5:ce:88:84:
                    52:6a:1a:90:7b:16:0f:fd:e7:22:56:8d:54:3c:ad:
                    fc:84:87:45:eb:f3:b4:89:ae:be:80:df:ac:16:6f:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:84:15:C5:6E:8F:86:83:EF:29:FB:68:F0:DF:36:FA:85:77:92
            X509v3 Authority Key Identifier:
                keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:32:ac:34:f4:aa:64:21:89:f6:55:ce:8f:ce:88:6b:65:23:
         49:6c:e6:23:7c:7d:b1:b0:90:b7:53:2c:6e:3d:fd:fc:98:c1:
         4b:4f:d5:c0:54:cf:60:bc:62:81:27:84:16:5a:2d:7e:65:f1:
         47:35:79:7e:2e:70:1c:7e:3c:74:46:d1:95:81:bd:af:b8:c8:
         17:db:a4:65:fb:04:3a:27:e2:cf:89:98:8e:ea:1c:b2:5b:5b:
         ad:e3:be:0f:00:54:2b:fe:d0:3b:69:33:f7:1a:5b:08:75:2b:
         6f:b7:28:3d:90:a9:9f:a5:5b:c2:7f:1f:76:95:1a:cf:29:9c:
         74:75:29:d7:54:e0:03:b7:50:99:9b:6f:de:56:80:63:b0:bc:
         97:1b:8d:56:b5:c3:0d:cc:6a:e5:d2:11:72:24:ec:52:ea:f3:
         75:d7:41:db:71:52:08:7f:b3:7e:24:3a:81:e8:2f:03:d7:84:
         85:58:0e:73:85:ca:05:77:65:40:f1:62:b4:75:14:52:79:ad:
         d6:80:d2:bf:cd:81:ec:6a:85:ec:f0:75:30:cd:1d:a7:57:69:
         12:8c:13:19:31:9c:02:d7:6e:fa:1b:16:3e:a6:a3:88:86:36:
         12:69:53:54:5a:5e:8e:0c:d6:1a:34:9d:78:c5:86:ed:db:40:
         c7:9e:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:32:15 2026 by rpki-client