Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File:                     otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier:          fOIsBidufnQrT/9xIcGc4u6oggB1mOJ98vs+WHuM9Q8=
Subject key identifier:   73:C1:1D:36:1B:53:9A:D8:00:4E:A8:A2:1B:DB:34:FA:23:A5:B8:37
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer:       /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial:       01A0DA5F387DC6B392263433CB6B343D0590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number:          1A75
Signing time:             Fri 25 Sep 2026 21:01:08 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:08 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:08 +0000
Files and hashes:         1: APlmnKHZODCNSunvzWMmlebxZbo.roa (hash: QAoewBI2F8XDmieB1npAXSt/XAawfhTLWLPzLSSKEr8=)
                          2: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
                          3: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
                          4: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
                          5: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: xaLuMKDg3JXD+2AEyYpK6FuW/3PipipM66OkgwXrNuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:38:7d:c6:b3:92:26:34:33:cb:6b:34:3d:05:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
        Validity
            Not Before: Sep 25 21:01:08 2026 GMT
            Not After : Sep 26 21:01:08 2026 GMT
        Subject: CN=73c11d361b539ad8004ea8a21bdb34fa23a5b837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:df:bf:7f:61:33:17:56:e5:13:4d:bb:eb:
                    09:d5:91:45:0f:3f:ed:42:93:c9:d5:47:24:6d:1d:
                    25:4a:29:de:39:39:95:c4:fe:dd:b9:45:b4:56:35:
                    10:e4:9f:6e:08:c0:95:70:00:70:0f:fc:32:6e:39:
                    c8:f9:e2:75:21:90:4a:23:41:53:38:7e:9c:01:6b:
                    3a:8f:05:75:62:d2:e8:70:d8:5d:3d:e5:a6:4e:3a:
                    9d:b8:23:17:f3:54:28:94:a2:9f:d7:64:d3:42:1f:
                    8a:27:e8:31:25:8c:25:b3:03:2d:fa:3a:8e:60:2c:
                    d2:b2:ed:05:8a:f9:04:17:b5:77:98:dd:9a:30:59:
                    b4:4e:16:ed:f2:8d:db:0b:09:fa:2e:21:1e:11:e2:
                    d7:6b:d8:59:fc:74:26:c1:fc:8e:01:30:36:f6:ba:
                    a1:9d:7b:5e:ff:4b:47:fa:db:3c:ec:69:b3:8d:d8:
                    b3:2d:2a:00:4c:fa:ca:ca:cb:f5:5e:b0:48:d4:55:
                    43:9f:e7:9d:1d:33:60:19:6e:83:9d:28:80:18:53:
                    b2:75:e6:97:e5:46:6e:97:d2:17:f8:5c:e6:b6:95:
                    21:d4:d8:57:39:69:68:ac:f4:7e:34:a6:a5:a7:0b:
                    fa:54:28:6c:28:40:cd:ce:f8:5f:bb:ea:72:51:ae:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C1:1D:36:1B:53:9A:D8:00:4E:A8:A2:1B:DB:34:FA:23:A5:B8:37
            X509v3 Authority Key Identifier:
                keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:78:7a:cc:ba:d7:43:80:d7:52:2d:13:a3:4f:de:41:d1:80:
         27:c4:27:1a:b0:15:dc:21:5b:b7:75:8d:15:8d:48:1f:f1:36:
         a4:af:ea:8b:43:87:22:d8:2e:df:b7:48:ea:49:ac:82:36:86:
         d3:d5:90:06:39:91:6f:ce:3b:b8:d6:2c:da:c6:3c:ad:bd:e8:
         fe:b4:05:16:f6:f2:2d:a0:d5:c1:ac:78:37:38:4e:da:0a:8b:
         40:8d:09:c1:31:b2:74:20:20:9a:5d:a9:3a:14:ee:58:b4:25:
         d2:d0:37:cb:bb:26:a4:f5:6c:07:c9:08:bf:d9:b9:07:1a:ad:
         df:f2:72:4c:c4:fd:53:2a:44:85:53:68:1b:e9:8d:7a:c6:d1:
         77:72:af:b3:2c:27:eb:6b:a5:e3:86:6e:78:19:6e:05:46:62:
         a1:37:9e:54:fc:e0:2d:a1:72:7d:a8:d3:9d:e3:f9:c9:3e:af:
         d2:ef:ad:a3:6f:d3:6b:e2:e5:9f:b1:68:14:0a:52:98:84:12:
         e7:c2:f6:fd:54:cc:d8:9a:4a:a6:61:41:fe:9f:13:62:7e:98:
         71:95:92:3a:75:25:29:93:32:e0:c0:1d:f2:c7:08:8e:45:1e:
         10:66:f9:fc:d0:2a:06:60:31:1b:12:97:b0:c7:64:83:51:91:
         d5:89:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:48:58 2026 by rpki-client