Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File:                     orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier:          lefFjI9e1+7vV9SpyD97hhGjoPLfHGhJUk67G6qS7M8=
Subject key identifier:   C0:3B:B4:23:62:3C:96:A4:EE:BD:10:3C:79:41:7E:B5:73:CD:8D:7E
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer:       /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial:       019E1EDA10D8486DE95EC1513ADC83772746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number:          0270
Signing time:             Wed 13 May 2026 01:01:08 +0000
Manifest this update:     Wed 13 May 2026 01:01:08 +0000
Manifest next update:     Thu 14 May 2026 01:01:08 +0000
Files and hashes:         1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
                          2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
                          3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: mjqfBoOxdrnBQX4PViDCvRtEUElvg8O15attdegZL7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:10:d8:48:6d:e9:5e:c1:51:3a:dc:83:77:27:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
        Validity
            Not Before: May 13 01:01:08 2026 GMT
            Not After : May 14 01:01:08 2026 GMT
        Subject: CN=c03bb423623c96a4eebd103c79417eb573cd8d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:09:37:04:16:38:44:63:8f:95:c2:59:fa:
                    1a:b0:0b:54:11:ec:4f:f6:ff:7b:b6:d3:9b:eb:5a:
                    f9:fe:ac:09:5a:d7:f9:91:4c:3a:02:58:11:82:df:
                    bf:10:8d:da:58:47:23:2e:74:4d:12:b4:c8:e8:66:
                    61:59:cb:d4:0e:90:80:b8:c0:4a:63:05:a9:01:23:
                    6e:9f:74:e8:57:0f:6e:f4:9d:a4:ae:1e:7b:d8:03:
                    2e:a9:06:90:15:1b:bf:ba:f1:a2:99:e5:22:6f:7e:
                    fc:21:85:a4:ec:9d:b2:d3:26:00:20:c8:b5:71:69:
                    41:93:a5:bb:14:cd:26:35:fa:7c:4a:83:06:22:ee:
                    81:b2:1a:fe:f8:65:ca:a3:ec:33:38:03:0e:dd:4d:
                    22:02:4a:60:7f:45:04:cd:ee:3c:eb:6d:27:c4:90:
                    01:eb:1b:fc:44:1b:de:4f:e8:96:06:6b:42:b2:b0:
                    f3:dd:2d:ba:68:e2:91:92:ea:00:33:84:71:ed:46:
                    04:a5:74:fa:a1:14:44:9b:ae:08:34:d6:49:7d:28:
                    65:c3:66:b3:e3:fa:d5:de:b1:b0:ae:df:c2:ff:60:
                    ee:97:f0:31:01:90:df:97:dc:73:c5:da:99:1b:43:
                    76:4b:65:bc:bb:fc:49:b4:6c:98:85:6a:88:ab:c3:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3B:B4:23:62:3C:96:A4:EE:BD:10:3C:79:41:7E:B5:73:CD:8D:7E
            X509v3 Authority Key Identifier:
                keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b8:c3:21:05:98:63:80:8b:e6:92:be:65:bb:65:9f:df:af:
         08:cb:eb:e0:99:40:7f:63:67:e2:76:17:3a:1d:08:bb:43:be:
         f9:d4:37:d9:fd:23:5a:7a:5e:cd:dc:58:4f:5e:03:8f:dd:07:
         e5:5e:cf:f5:17:39:a5:d7:ce:9e:b8:54:5a:1c:bb:4e:f1:86:
         57:d6:b2:f8:67:03:c3:ee:7d:09:0c:32:f7:7c:49:5f:a5:d6:
         fc:ac:e8:82:d6:80:19:9b:3b:9d:ba:95:2a:7e:7b:4e:78:a3:
         68:16:49:5d:5b:1a:a9:1c:7e:8c:42:cc:a7:43:56:39:85:0d:
         0c:2d:4f:b7:a5:3f:39:45:c4:62:97:f0:30:af:95:f7:f4:b0:
         cb:d9:45:8f:cd:ed:04:73:34:c7:2e:5a:47:ba:3e:80:ad:b5:
         47:c7:77:ec:85:02:c5:7c:18:10:31:8a:30:e9:6e:51:14:8a:
         57:e1:6f:eb:f2:b2:91:98:ad:28:95:75:d8:98:26:11:a1:37:
         d9:e9:8d:09:26:3b:ba:c2:da:a6:7e:31:b4:97:87:f9:ea:9f:
         ee:fc:b0:0b:05:4a:09:b2:02:df:c3:09:6a:d7:c5:73:65:af:
         82:6e:28:e5:df:61:a7:4a:40:b1:08:84:23:3f:12:2d:3e:bd:
         c0:4c:b0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:20 2026 by rpki-client