Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File:                     otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier:          8thurIgid6gZ8gsrRrI+ifYL3x+YbM5guCAEzlb5JHk=
Subject key identifier:   30:44:48:C0:D3:E8:B0:A1:5B:B0:E1:1E:DE:81:8D:6F:D8:19:62:A4
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer:       /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial:       01A0DC4D9919F066790E3685F21AD22CD480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number:          1A76
Signing time:             Sat 26 Sep 2026 06:01:08 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:08 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:08 +0000
Files and hashes:         1: APlmnKHZODCNSunvzWMmlebxZbo.roa (hash: QAoewBI2F8XDmieB1npAXSt/XAawfhTLWLPzLSSKEr8=)
                          2: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
                          3: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
                          4: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
                          5: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: AOCJP47/0MxCE5Q5dPHAAocd/zES4mDcA/utBZNP9dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:99:19:f0:66:79:0e:36:85:f2:1a:d2:2c:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
        Validity
            Not Before: Sep 26 06:01:08 2026 GMT
            Not After : Sep 27 06:01:08 2026 GMT
        Subject: CN=304448c0d3e8b0a15bb0e11ede818d6fd81962a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:83:44:ad:57:20:2f:a3:0c:b8:2a:89:64:
                    1d:ee:77:bd:eb:dd:40:46:16:b4:17:ea:ef:b6:1d:
                    1a:ec:73:bb:40:7b:3e:98:cc:17:1d:13:5a:3f:00:
                    7c:a3:41:d1:be:c7:ab:10:86:a2:8b:b0:13:b3:7b:
                    60:a0:06:c5:1e:b3:f8:2f:bb:10:8d:5b:84:c3:3e:
                    0a:ab:45:7b:5d:d5:cf:11:bb:98:17:7e:7e:c8:56:
                    f6:e6:1d:43:4d:62:8d:3e:07:9c:ec:54:39:4f:03:
                    97:7b:28:cd:68:de:b3:bc:a7:86:36:02:2b:19:1e:
                    77:ad:fc:06:77:6e:9c:8b:66:49:e2:d1:32:b7:c4:
                    28:a5:48:34:a5:70:8d:45:c8:0e:99:34:d2:0d:47:
                    d3:c7:de:e0:3b:8c:34:c9:32:fe:3b:27:77:d8:94:
                    be:94:b0:46:0d:1b:93:4a:84:96:d6:3f:b0:2a:23:
                    83:0f:a8:89:87:78:91:0e:a8:d7:6e:ba:22:88:18:
                    73:33:8e:d6:60:48:80:95:eb:9c:a4:6d:a6:95:c7:
                    07:79:96:04:47:1a:4e:c4:cb:a3:7a:86:3b:ed:d5:
                    f1:a3:83:e8:9c:70:d1:14:84:ce:11:70:cd:f7:0a:
                    f3:c1:1f:8e:58:73:f6:02:dc:88:8c:62:76:d4:12:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:44:48:C0:D3:E8:B0:A1:5B:B0:E1:1E:DE:81:8D:6F:D8:19:62:A4
            X509v3 Authority Key Identifier:
                keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:41:5a:e0:7d:9c:6c:1c:cf:85:94:ba:ff:e9:44:43:9d:c0:
         13:1b:2e:7f:28:f1:63:56:70:48:5c:6c:f7:77:09:46:df:3d:
         56:39:a3:fe:53:79:be:77:70:95:7e:00:f7:01:a0:63:78:5c:
         4d:ec:fd:55:a0:89:92:26:b9:00:c7:94:14:8d:1d:05:88:b5:
         26:6d:a7:ab:47:82:b8:7c:e9:69:a0:48:d8:43:60:c2:97:48:
         22:f5:55:2c:fc:db:fc:f1:b5:f0:43:11:24:f5:72:75:8f:df:
         49:c8:01:1b:3b:bd:27:f3:19:c7:c9:81:18:9e:d2:e8:77:d5:
         eb:81:08:74:05:d7:d6:77:2f:2a:9a:1f:dc:8f:3c:46:c0:57:
         4d:3c:bd:71:08:f9:36:16:7c:88:07:2e:45:11:eb:8a:b2:f1:
         c0:bb:99:3f:ef:4e:4d:3b:5c:fe:38:47:67:dd:1e:4f:e8:d0:
         78:94:d5:89:6b:c9:28:82:87:80:b9:75:11:b8:3b:8a:71:3e:
         44:09:c7:80:9b:b4:7d:24:85:49:f2:03:cc:d8:58:c2:54:92:
         56:d1:67:0b:f8:af:4a:e2:8b:0f:7e:4b:4a:e8:5a:48:b5:51:
         d1:5a:96:a4:3a:fb:73:48:c4:29:17:e6:37:b3:9c:cb:2d:2f:
         2d:a2:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:32:27 2026 by rpki-client