Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File:                     oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier:          AyVwNfnXHhy/oR1ZhWZrHHUiCehI47i8EhmBW9FUDRg=
Subject key identifier:   ED:E8:7F:6C:CC:2E:28:3D:91:54:93:83:13:06:91:20:A7:5A:92:4F
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer:       /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial:       01A1065C6BEAA4CF0A3C3F3340E69FE3BDA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number:          152A
Signing time:             Sun 04 Oct 2026 10:01:22 +0000
Manifest this update:     Sun 04 Oct 2026 10:01:22 +0000
Manifest next update:     Mon 05 Oct 2026 10:01:22 +0000
Files and hashes:         1: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: LN9x/Ec4Ij4GMIn9dpVDBuXNIcAmEZpaPl2fagyaP7k=)
                          2: wKG5f7dn1-pgRZqivJIzmXImgvk.roa (hash: 9MbV7Vdo6+ToMH+TbPulkfdTZLPlSBCEwYkmIQl3ggs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 10:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:5c:6b:ea:a4:cf:0a:3c:3f:33:40:e6:9f:e3:bd:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
        Validity
            Not Before: Oct  4 10:01:22 2026 GMT
            Not After : Oct  5 10:01:22 2026 GMT
        Subject: CN=ede87f6ccc2e283d9154938313069120a75a924f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:dd:9a:31:ea:70:5d:61:c0:c8:0a:04:8d:
                    63:d0:b4:37:52:bd:31:2b:64:2c:c3:8d:9d:ef:3c:
                    87:87:e0:b9:00:de:3d:d1:cc:9a:15:ae:c7:a2:b4:
                    97:ec:7f:49:57:d4:8c:f0:15:6a:d6:9d:c8:9f:b9:
                    c1:04:2b:f4:93:a3:b7:8b:21:9c:b7:93:db:a1:09:
                    74:f3:45:0c:7a:cb:3f:97:ff:a4:ea:f7:c4:03:d3:
                    a7:19:b7:77:46:ab:c0:54:94:53:59:f3:c4:1f:10:
                    7b:67:ec:c3:fb:7f:c5:44:62:55:4a:11:e0:61:bb:
                    8c:fa:99:b4:29:57:32:76:77:ae:48:96:19:07:e4:
                    cd:92:9d:07:48:eb:2a:46:73:71:16:81:90:bb:62:
                    50:af:f6:43:8e:f9:82:b8:ad:e6:31:d7:90:90:ec:
                    f8:ec:2e:f3:c2:d8:1b:e5:b1:42:1a:1a:09:a7:d9:
                    cf:fc:68:e5:23:22:a4:15:fc:a2:92:9d:7f:72:e0:
                    da:90:46:f0:28:85:49:07:d4:51:b7:db:d2:ac:2b:
                    bd:27:3b:c2:0a:cd:13:59:e0:7a:9c:a6:84:86:75:
                    7d:74:f4:38:48:c9:38:9b:ab:12:20:d7:2d:c1:f7:
                    4a:f0:6e:cd:5a:8d:5a:d9:0b:cc:11:e0:30:78:df:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:7F:6C:CC:2E:28:3D:91:54:93:83:13:06:91:20:A7:5A:92:4F
            X509v3 Authority Key Identifier:
                keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6c:8f:b4:31:6a:aa:14:1c:15:af:ba:4a:31:4e:6b:35:5e:
         ba:78:fb:8a:88:ba:83:44:87:c1:c9:a4:5b:ad:7c:f5:3c:b0:
         a7:5d:dd:12:36:5f:d9:08:f2:18:bc:82:54:7d:1d:98:27:fd:
         2e:d3:da:c1:3d:ae:c3:32:f4:a0:10:5b:df:71:af:0c:a5:d1:
         74:0c:21:2a:52:4c:17:25:8d:9d:35:97:86:47:28:b5:28:d6:
         08:c2:13:25:08:c4:a0:08:bc:6f:be:ec:28:d2:4c:4c:a2:e9:
         68:2f:f2:fc:44:e7:b7:bf:0a:e3:0f:b3:9d:9f:69:0f:92:a7:
         c8:55:59:b0:ea:48:b5:38:6d:6e:9a:f0:f4:a7:bf:99:3f:cb:
         52:83:0b:2f:84:0e:25:49:b1:2e:2f:c1:af:7b:45:e9:05:a9:
         a3:dc:9b:28:89:f9:62:9d:b5:49:bf:25:72:0e:31:bb:d6:0b:
         e6:54:11:85:60:66:a4:d9:5d:5d:c2:a7:39:25:9f:57:26:9b:
         30:1f:80:e2:ed:19:e9:b8:a8:f7:8d:64:48:d6:9a:48:81:30:
         04:cd:a5:f7:38:6e:56:2b:ac:41:9f:6d:bb:59:08:74:eb:f2:
         0c:57:8f:5f:02:38:0a:0b:70:9b:11:d7:ea:c3:3d:be:ce:48:
         06:93:b5:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGXGvqpM8KPD8zQOaf472jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzc4OTFkZDRmM2RmODM3NzJkN2NmZTcxODM4NDNjYmZm
NDRkNTQwHhcNMjYxMDA0MTAwMTIyWhcNMjYxMDA1MTAwMTIyWjAzMTEwLwYDVQQD
EyhlZGU4N2Y2Y2NjMmUyODNkOTE1NDkzODMxMzA2OTEyMGE3NWE5MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI7dmjHqcF1hwMgKBI1j0LQ3Ur0x
K2Qsw42d7zyHh+C5AN490cyaFa7HorSX7H9JV9SM8BVq1p3In7nBBCv0k6O3iyGc
t5PboQl080UMess/l/+k6vfEA9OnGbd3RqvAVJRTWfPEHxB7Z+zD+3/FRGJVShHg
YbuM+pm0KVcydneuSJYZB+TNkp0HSOsqRnNxFoGQu2JQr/ZDjvmCuK3mMdeQkOz4
7C7zwtgb5bFCGhoJp9nP/GjlIyKkFfyikp1/cuDakEbwKIVJB9RRt9vSrCu9JzvC
Cs0TWeB6nKaEhnV9dPQ4SMk4m6sSINctwfdK8G7NWo1a2QvMEeAweN+VQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3of2zMLig9kVSTgxMGkSCnWpJPMB8GA1UdIwQY
MBaAFKE3iR3U89+Ddy18/nGDhDy/9E1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMt
OGRkYTZjNmNhODFkLzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMtOGRkYTZjNmNhODFk
LzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGyPtDFq
qhQcFa+6SjFOazVeunj7ioi6g0SHwcmkW6189Tywp13dEjZf2QjyGLyCVH0dmCf9
LtPawT2uwzL0oBBb33GvDKXRdAwhKlJMFyWNnTWXhkcotSjWCMITJQjEoAi8b77s
KNJMTKLpaC/y/ETnt78K4w+znZ9pD5KnyFVZsOpItThtbprw9Ke/mT/LUoMLL4QO
JUmxLi/Br3tF6QWpo9ybKIn5Yp21Sb8lcg4xu9YL5lQRhWBmpNldXcKnOSWfVyab
MB+A4u0Z6bio941kSNaaSIEwBM2l9zhuViusQZ9tu1kIdOvyDFePXwI4CgtwmxHX
6sM9vs5IBpO1eA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:18:20 2026 by rpki-client