Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File:                     oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier:          IdkxmJFKVI9JUOBaovVL70+eKqNbp+bUUyDZUeCvoKA=
Subject key identifier:   4B:65:C1:2C:8E:C6:F5:97:9A:8A:43:E7:55:15:38:FC:CB:03:60:0D
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer:       /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial:       019E1EDA4814CCE3A07198ED17C3BA73F00A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number:          13A9
Signing time:             Wed 13 May 2026 01:01:22 +0000
Manifest this update:     Wed 13 May 2026 01:01:22 +0000
Manifest next update:     Thu 14 May 2026 01:01:22 +0000
Files and hashes:         1: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: Z3ezoGzyiU0e+XOwWBiiDbEhqQ+ff2bIfZRcFQ6KPR0=)
                          2: wKG5f7dn1-pgRZqivJIzmXImgvk.roa (hash: 9MbV7Vdo6+ToMH+TbPulkfdTZLPlSBCEwYkmIQl3ggs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:48:14:cc:e3:a0:71:98:ed:17:c3:ba:73:f0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
        Validity
            Not Before: May 13 01:01:22 2026 GMT
            Not After : May 14 01:01:22 2026 GMT
        Subject: CN=4b65c12c8ec6f5979a8a43e7551538fccb03600d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:49:44:fe:aa:45:40:5c:67:82:b8:4c:00:
                    10:8d:5c:e4:37:17:1e:b8:5a:af:da:68:08:89:e1:
                    c4:55:8f:2f:7c:c7:98:bf:17:b5:3b:45:53:7f:14:
                    08:8a:2e:e2:1e:70:54:96:d8:ac:01:6d:db:01:20:
                    6e:17:40:29:aa:26:32:ce:10:39:c2:bb:91:d4:71:
                    84:31:69:36:c8:68:8f:8b:35:8b:b8:b8:57:69:17:
                    4b:a0:53:be:82:d9:fc:82:4d:67:b9:63:83:d3:9d:
                    e1:fb:65:9a:67:a1:75:4e:94:f3:fb:31:a8:3b:0d:
                    14:af:61:68:12:11:ae:d8:7a:93:3a:9c:aa:f3:79:
                    25:28:9f:82:3f:f9:20:2e:de:b9:13:7b:da:82:9f:
                    b8:7a:30:25:c9:21:6f:af:5e:25:04:d2:e5:5f:18:
                    d7:95:01:01:09:ff:61:3a:3c:6f:99:b5:4c:52:75:
                    7a:b7:a3:90:82:93:dc:20:97:7f:a3:9d:ad:37:ab:
                    34:c0:df:bb:16:22:7e:74:ef:3d:04:e8:b1:a9:1e:
                    eb:90:f7:6e:57:83:81:95:c5:4e:42:1b:49:90:4f:
                    b5:32:d4:be:15:d2:c3:41:38:95:5f:2c:9a:62:0f:
                    bc:7b:dc:55:b7:21:c3:9f:64:bc:74:10:15:f1:bf:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:65:C1:2C:8E:C6:F5:97:9A:8A:43:E7:55:15:38:FC:CB:03:60:0D
            X509v3 Authority Key Identifier:
                keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:86:ce:a6:38:06:7f:68:da:b7:03:cc:fb:46:d9:6a:4e:
         9f:ec:52:63:11:56:04:69:be:86:a3:6c:e1:14:33:40:c4:b9:
         b0:e4:41:6f:74:94:d0:79:27:d3:7b:37:fd:31:b8:bc:de:a6:
         83:28:fe:ce:71:82:c5:87:39:f1:1e:a4:68:09:97:b9:32:82:
         87:32:31:dd:df:0c:6c:45:e9:b0:17:e6:60:79:c0:82:f1:c3:
         64:f2:cd:1e:aa:0c:09:16:a2:b3:52:43:3b:2d:43:e4:3f:da:
         60:ca:e2:fa:ea:58:80:c9:1b:7f:8b:d3:0c:2a:be:0c:dd:0c:
         3c:3b:0c:c3:25:cd:24:4f:6d:db:a7:5d:b7:b7:d1:02:4b:28:
         a4:4a:76:55:71:37:45:f5:22:06:05:7b:44:c2:db:a7:9f:fd:
         b8:0b:cb:5e:1b:0c:34:04:a4:87:03:f7:a2:22:2d:a2:db:2d:
         1f:65:dd:02:29:d0:d6:79:61:a5:2a:1f:cd:62:ad:aa:e7:85:
         9b:86:f5:ac:a9:d4:47:a2:fe:ed:0b:fa:a1:b5:a2:0f:83:6c:
         0b:29:d6:e2:f0:c4:97:7e:e1:31:44:d2:42:c0:92:1d:e6:63:
         b7:f7:ee:dc:c3:d7:44:60:f7:76:20:87:29:43:3a:2b:41:e6:
         21:68:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:11 2026 by rpki-client