Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File:                     RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier:          1F1S4enHOmNpci70AOKV8D/QeUgW4GnCcj9mdklMeWw=
Subject key identifier:   7F:61:88:FD:4C:E8:8B:E0:8A:A2:39:58:A6:6B:F5:26:15:AC:F0:95
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer:       /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial:       019E2B4C267096E7D6E530139C104CCED3F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number:          0C2A
Signing time:             Fri 15 May 2026 11:01:11 +0000
Manifest this update:     Fri 15 May 2026 11:01:11 +0000
Manifest next update:     Sat 16 May 2026 11:01:11 +0000
Files and hashes:         1: 8GdtZSFoX1vaGkCpGmBlFouEiVo.roa (hash: O6P4xNLVg+cJ7e2yv3WOenrZOTPYwO68uBRfw1gd8JE=)
                          2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: OeFcoUXyFId1qA+/3jo+/5oLolpV99Y507e6D4AEUtw=)
                          3: Ul4e9Mh9DtQbW0bFXtJWj8pCCUg.roa (hash: QgVe3zyOWZmLsqhPjT0zFXeKP6/Au91Grh/gUobRiJU=)
                          4: p--yuSN0LP1aF8MInaw0a0h4bcM.roa (hash: sDylj029lXRNRGXbiEohj568oZj6iTxdiqBb3mUem68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:26:70:96:e7:d6:e5:30:13:9c:10:4c:ce:d3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
        Validity
            Not Before: May 15 11:01:11 2026 GMT
            Not After : May 16 11:01:11 2026 GMT
        Subject: CN=7f6188fd4ce88be08aa23958a66bf52615acf095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:a0:f5:5c:f0:dd:f8:49:bf:02:b3:0f:88:
                    76:cb:5a:3f:96:19:f4:37:d2:71:c0:4b:b6:0a:0e:
                    e7:4b:ed:9a:ec:a9:0c:6f:85:e4:6a:31:36:87:f5:
                    b8:0d:ce:4a:32:72:68:27:21:18:cc:31:39:9e:5b:
                    42:8d:28:1e:c0:27:96:32:30:3e:27:87:09:c8:20:
                    f5:79:fa:4a:58:7e:89:c9:5b:dc:2c:ff:00:3f:b5:
                    ce:c6:e6:47:77:3a:f6:97:6f:4f:c1:7b:b5:b7:67:
                    51:27:f6:d6:ba:ec:e4:19:39:c7:ae:63:3e:bf:ac:
                    f4:f0:e2:74:3f:50:b4:8e:0b:f6:29:7a:c8:42:2e:
                    3f:6b:8f:12:e5:a6:ce:c5:a1:93:5a:2c:5b:77:de:
                    f5:56:2e:ed:8f:ed:61:36:fd:5f:d1:b9:aa:69:91:
                    00:7d:23:9f:a8:5b:93:db:0e:a5:89:3d:7e:93:87:
                    24:a8:32:4d:f8:73:20:77:55:37:a3:9e:3e:cd:5a:
                    af:7c:ae:fe:b7:1d:9b:31:b5:fa:06:5b:20:13:40:
                    25:53:f4:e5:d3:24:ec:10:c6:e6:37:c8:c5:01:0f:
                    a2:9a:fc:93:7c:a9:f2:26:70:2b:a3:48:9f:a4:40:
                    6a:f9:83:60:2b:77:f9:99:15:6e:99:98:a4:13:60:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:61:88:FD:4C:E8:8B:E0:8A:A2:39:58:A6:6B:F5:26:15:AC:F0:95
            X509v3 Authority Key Identifier:
                keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:f4:b9:a1:f6:95:79:3a:e1:15:03:6e:6a:85:6e:87:62:
         e5:cb:e5:b6:11:c6:45:0a:3a:0b:7b:fe:1b:02:89:68:2b:c8:
         f1:d0:6b:ef:f3:d7:09:db:a0:3e:6d:a3:4c:e0:ed:62:9d:a7:
         de:2c:b5:75:5c:87:05:b1:a4:0b:c7:b5:24:f1:4b:c6:99:bc:
         47:2b:41:39:0e:58:5d:2b:14:5a:06:52:e7:c3:3a:47:03:a9:
         e8:5f:c5:c1:af:5f:81:3f:12:60:67:1c:b4:bf:61:99:24:fe:
         99:54:b0:60:7b:b0:6c:b6:e1:b6:5e:99:99:42:59:fa:5f:a1:
         aa:0e:fa:44:dc:c2:28:cb:62:b1:39:00:61:74:bf:7b:af:37:
         22:ec:0e:61:93:aa:f0:28:48:25:58:d1:2e:e4:cb:4b:02:7c:
         c8:4c:54:45:a8:82:af:e6:ee:35:2d:75:9a:3f:ab:e2:7e:4e:
         80:08:c6:d4:fa:73:a2:02:e8:c5:5e:bc:d0:1a:6e:56:9a:8c:
         b0:a3:d7:44:52:1b:e4:d2:46:10:5f:4d:da:70:47:b7:0a:16:
         7c:67:6f:0c:39:62:32:fb:0e:d9:3f:dc:f8:4b:87:b1:eb:4e:
         40:a4:6f:9c:0d:cc:b2:6e:1b:4c:20:69:94:ce:23:38:8b:1c:
         ea:ee:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:24:21 2026 by rpki-client