Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
File:                     OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json)
Hash identifier:          Uvuzslt0BNpajByE+eQX2BGG+AgjWrBjjqStuxtB7dU=
Subject key identifier:   58:10:CE:57:A9:6A:EE:58:96:4D:B4:5F:4A:0E:32:97:19:59:71:78
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Certificate issuer:       /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial:       019F9391E48B412DA4C23977628C2F04EBAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
Manifest number:          14DE
Signing time:             Fri 24 Jul 2026 10:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:39 +0000
Files and hashes:         1: 8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa (hash: brAMlNDL72wfdOjb6ddjdyt7eJo3B0Foc3PWILSQa/8=)
                          2: 9n4VcJdW8qnQyuWz0vME2QO1fbA.roa (hash: S37EYsMTrmOyNa0qB2TT/fhsEUbmtLIrd9epgXzmCws=)
                          3: GZDzHGbDx7dfkoatOEujE-QeXX0.roa (hash: rp5gMVM6d0QMtfUx8hE8lYmJBJMynSH2EW1XEZUY1fk=)
                          4: NzRF1KMW-RjrnCQ45Ns__CGotH0.roa (hash: vgtU60XykZYUOdD/K3o47xgLUs91d2y5R24TZ2aLcb4=)
                          5: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: YOjgEuHIigfKHAECbHqkm+VMgckZpXwAORlyid2ozxE=)
                          6: hHhTehEBjNf1KtA383HryRHP5GU.roa (hash: 553Jp1J+2Jv+MXIIihnE80X01/4/KUBqAe/MNZh5Kwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:e4:8b:41:2d:a4:c2:39:77:62:8c:2f:04:eb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
        Validity
            Not Before: Jul 24 10:00:39 2026 GMT
            Not After : Jul 25 10:00:39 2026 GMT
        Subject: CN=5810ce57a96aee58964db45f4a0e329719597178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:4f:e4:4b:45:de:76:d2:35:ef:3d:7e:cb:
                    bb:fc:c9:46:4c:db:48:cf:ad:42:f5:c6:bb:71:4f:
                    72:40:df:ab:ac:c3:09:1d:5b:e8:31:2a:2b:a7:ed:
                    87:30:77:c1:3a:49:b9:54:a2:9e:ce:22:48:82:36:
                    87:d8:a3:41:48:bd:43:5b:d9:df:1a:c4:2c:ef:a2:
                    3d:16:af:6a:a0:68:31:f6:6c:af:4a:f4:1d:1f:be:
                    d1:a4:eb:b0:c8:18:f4:f5:b8:69:65:d6:fe:5e:cf:
                    75:c5:0c:0d:f5:b7:31:3d:d3:1a:60:0d:c3:0f:d3:
                    f3:d6:9b:7a:55:6f:69:5b:c2:de:b9:8f:56:5d:a0:
                    a4:0c:f5:4f:56:6c:7d:b1:42:65:15:ac:2a:c7:6a:
                    c5:3b:44:10:0e:90:0c:ac:05:9c:d3:a1:9f:5f:0e:
                    f2:a1:a5:e5:6a:0e:cb:e9:58:63:8c:1f:0d:52:80:
                    25:04:b4:18:f5:e1:9f:87:a7:ce:45:50:70:8e:9c:
                    a9:93:12:84:64:44:36:fb:35:cc:a1:78:81:e3:61:
                    05:0e:1e:39:f6:90:42:ea:6e:8f:c0:51:42:f6:e2:
                    e6:a6:97:cf:9a:d0:a0:36:24:ca:87:23:b3:c7:e4:
                    f6:4b:83:7b:6f:61:bd:de:8b:70:38:52:b8:fc:ad:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:CE:57:A9:6A:EE:58:96:4D:B4:5F:4A:0E:32:97:19:59:71:78
            X509v3 Authority Key Identifier:
                keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:e0:ee:94:80:44:a8:9c:7b:21:4f:85:d0:d9:a3:af:19:
         ec:d2:df:40:28:4c:2c:ef:e2:3f:4f:0d:ec:86:cb:c4:21:bb:
         b6:58:d8:d6:b3:7a:40:ef:80:3b:89:9d:f1:3d:97:16:54:f1:
         bb:6d:31:27:04:dd:15:ac:a4:58:d3:56:5b:9a:08:05:f1:22:
         4e:f4:12:0d:7e:d9:64:af:3b:5b:a5:b9:10:c6:f1:d7:62:86:
         04:17:af:e7:cc:32:4a:80:8a:77:00:0b:85:08:47:27:b5:f5:
         0b:f2:72:7b:df:b4:5c:b7:c7:aa:ee:4b:5d:2c:c6:35:0a:1a:
         6a:fd:11:e0:86:8d:b3:ae:c9:e5:2d:06:d0:54:f5:4b:61:0b:
         17:5a:c7:60:7f:8d:5d:23:a6:df:d0:75:db:f0:d6:8c:00:eb:
         a3:ed:c7:04:44:81:f2:90:f2:58:f3:b0:50:4a:11:64:5d:40:
         b3:9b:73:4c:ca:f4:f7:81:0f:33:1c:a7:f4:f5:9e:09:69:43:
         dc:68:81:7e:c1:f7:ec:66:c9:dc:75:52:07:4f:b6:3c:04:4c:
         55:e1:a0:90:82:05:f7:e5:15:3a:47:29:ee:ba:2d:73:6e:f5:
         3e:99:f2:43:2a:3d:0f:eb:99:80:fc:7d:71:97:88:07:36:d9:
         f8:48:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:08 2026 by rpki-client