Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File:                     RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier:          oowYHbDytDuVGK/J0CxQyI3DOe+AP/eGl7VeK397aFU=
Subject key identifier:   99:D0:20:B2:36:3D:F5:C4:31:EA:40:A6:4E:AA:E3:15:E7:13:1A:84
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer:       /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial:       019D39E564D704E4163EFEDCA1442842AEAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number:          0BAD
Signing time:             Sun 29 Mar 2026 14:00:27 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:27 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:27 +0000
Files and hashes:         1: 8GdtZSFoX1vaGkCpGmBlFouEiVo.roa (hash: O6P4xNLVg+cJ7e2yv3WOenrZOTPYwO68uBRfw1gd8JE=)
                          2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: D8986jVM7SbT6CvpW35o/3ymRRL2FaaTSMgaPLSlewE=)
                          3: Ul4e9Mh9DtQbW0bFXtJWj8pCCUg.roa (hash: QgVe3zyOWZmLsqhPjT0zFXeKP6/Au91Grh/gUobRiJU=)
                          4: p--yuSN0LP1aF8MInaw0a0h4bcM.roa (hash: sDylj029lXRNRGXbiEohj568oZj6iTxdiqBb3mUem68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:64:d7:04:e4:16:3e:fe:dc:a1:44:28:42:ae:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
        Validity
            Not Before: Mar 29 14:00:27 2026 GMT
            Not After : Mar 30 14:00:27 2026 GMT
        Subject: CN=99d020b2363df5c431ea40a64eaae315e7131a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:33:9c:4e:87:fe:b5:c4:56:fc:74:2a:6f:
                    35:28:e0:85:11:90:29:7a:28:df:13:4d:2e:ee:97:
                    c3:d9:8c:94:d1:73:b6:11:55:a8:77:9b:4c:40:6b:
                    53:56:cf:09:b6:0c:34:5a:4b:36:3e:25:c0:6e:fb:
                    4f:d9:ae:4e:2c:10:cb:de:13:8d:18:6b:66:00:56:
                    af:f7:b1:4d:f3:43:b7:bc:b3:24:28:5b:96:a0:52:
                    c5:b5:27:cb:af:1c:a4:ea:1b:aa:80:6e:1b:42:7d:
                    6f:d7:40:6a:ad:50:06:7f:df:21:c1:d0:eb:a3:72:
                    73:8a:76:46:93:34:ee:78:f5:3b:f5:13:1b:c9:84:
                    10:1d:dc:ac:43:2d:a6:4d:1c:6a:70:46:89:5e:6c:
                    95:66:c6:0a:75:e9:5e:89:a7:72:1a:c5:7e:c0:1c:
                    dc:66:ab:9e:ba:45:72:79:66:17:25:a0:de:5a:a3:
                    f4:3d:8a:dd:ef:07:18:4c:7c:4c:0f:2a:a8:2c:1c:
                    04:65:e2:2c:20:12:5f:06:8f:7d:e2:b6:60:64:6b:
                    57:10:04:c0:4c:cf:8c:18:4a:d1:96:69:47:33:06:
                    9d:78:2a:c6:1c:87:a2:51:0a:e4:13:bb:48:da:a6:
                    69:57:08:4a:d9:ba:48:01:b1:b1:3f:c6:25:a6:10:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D0:20:B2:36:3D:F5:C4:31:EA:40:A6:4E:AA:E3:15:E7:13:1A:84
            X509v3 Authority Key Identifier:
                keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7a:fa:e7:0f:fa:ee:40:c8:06:05:80:12:2c:50:56:24:03:
         cc:c7:1c:61:47:1f:c1:16:8c:6d:8e:68:24:5e:2f:0b:da:a6:
         45:81:11:23:55:fb:ba:93:83:c2:3e:48:07:06:43:3e:74:f5:
         65:28:d1:05:cb:dd:99:6f:3f:9e:e5:07:21:42:47:fd:48:51:
         c2:66:f5:e2:f8:18:95:25:db:f5:8d:46:16:a9:3d:dd:eb:85:
         64:5b:8b:02:0b:25:38:68:7a:3a:f7:e8:12:ee:45:2d:13:a6:
         c6:ed:4d:ae:f4:83:42:03:79:66:d3:4a:89:3a:4d:dc:76:90:
         9b:a5:bc:a8:ea:65:d2:0d:0d:88:d3:25:c2:1f:d0:0a:43:a0:
         18:a4:01:f5:ed:c7:33:93:cb:02:e7:07:3b:f6:0a:48:47:4c:
         76:75:7f:2f:42:8a:a8:83:bf:3f:8f:b7:5e:88:22:42:f5:c6:
         a0:5e:d5:78:08:84:61:f7:11:77:1b:b4:1b:23:43:95:85:36:
         a7:61:64:69:40:6f:64:c2:7b:1c:b9:d5:a3:21:76:43:dc:69:
         7d:c3:d5:01:1c:5f:8b:22:58:d2:62:b6:a9:3a:0a:91:d8:93:
         c5:80:39:1c:cf:e2:a0:98:c3:c1:7f:80:a6:db:62:e1:11:f6:
         b8:3a:8f:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055WTXBOQWPv7coUQoQq6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI2ODE0MTc5NmNhOTVlNGM3MmY0YmZhNjk2YWNlYTUw
ODNhZjMwHhcNMjYwMzI5MTQwMDI3WhcNMjYwMzMwMTQwMDI3WjAzMTEwLwYDVQQD
Eyg5OWQwMjBiMjM2M2RmNWM0MzFlYTQwYTY0ZWFhZTMxNWU3MTMxYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKMznE6H/rXEVvx0Km81KOCFEZAp
eijfE00u7pfD2YyU0XO2EVWod5tMQGtTVs8Jtgw0Wks2PiXAbvtP2a5OLBDL3hON
GGtmAFav97FN80O3vLMkKFuWoFLFtSfLrxyk6huqgG4bQn1v10BqrVAGf98hwdDr
o3JzinZGkzTuePU79RMbyYQQHdysQy2mTRxqcEaJXmyVZsYKdeleiadyGsV+wBzc
ZqueukVyeWYXJaDeWqP0PYrd7wcYTHxMDyqoLBwEZeIsIBJfBo994rZgZGtXEATA
TM+MGErRlmlHMwadeCrGHIeiUQrkE7tI2qZpVwhK2bpIAbGxP8YlphC0JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnQILI2PfXEMepApk6q4xXnExqEMB8GA1UdIwQY
MBaAFEaLaBQXlsqV5McvS/ppas6lCDrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0Zjct
NDUyZDZkMzgyNmY3LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0ZjctNDUyZDZkMzgyNmY3
LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3r65w/6
7kDIBgWAEixQViQDzMccYUcfwRaMbY5oJF4vC9qmRYERI1X7upODwj5IBwZDPnT1
ZSjRBcvdmW8/nuUHIUJH/UhRwmb14vgYlSXb9Y1GFqk93euFZFuLAgslOGh6Ovfo
Eu5FLROmxu1NrvSDQgN5ZtNKiTpN3HaQm6W8qOpl0g0NiNMlwh/QCkOgGKQB9e3H
M5PLAucHO/YKSEdMdnV/L0KKqIO/P4+3XogiQvXGoF7VeAiEYfcRdxu0GyNDlYU2
p2FkaUBvZMJ7HLnVoyF2Q9xpfcPVARxfiyJY0mK2qToKkdiTxYA5HM/ioJjDwX+A
ptti4RH2uDqPEg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:32 2026 by rpki-client