Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File:                     2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier:          YE1HiGet65E3ueSUgty30+koimaMjC9Ixct87sCM4Jk=
Subject key identifier:   C0:DE:69:3D:26:C7:B2:FF:25:87:51:33:D0:FE:C5:5E:D6:A2:C7:21
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer:       /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial:       019E1FEC7F9D5BCD9BD041E933A8D6D8D857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number:          0277
Signing time:             Wed 13 May 2026 06:00:53 +0000
Manifest this update:     Wed 13 May 2026 06:00:53 +0000
Manifest next update:     Thu 14 May 2026 06:00:53 +0000
Files and hashes:         1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: 5A1VnPCPs8RL+/tM1voUK7UyRq4LvUyphw3EYkaiFoI=)
                          2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:7f:9d:5b:cd:9b:d0:41:e9:33:a8:d6:d8:d8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
        Validity
            Not Before: May 13 06:00:53 2026 GMT
            Not After : May 14 06:00:53 2026 GMT
        Subject: CN=c0de693d26c7b2ff25875133d0fec55ed6a2c721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:9a:9d:07:37:cb:fb:44:47:3d:62:4b:a2:
                    6c:fc:7e:de:a4:0b:50:71:6f:f8:47:06:d8:0e:f0:
                    f3:49:6d:45:ee:58:c7:bf:e9:e2:a0:c1:25:74:9f:
                    63:8d:ed:a0:a6:eb:a8:c7:98:b3:1d:2f:3d:da:14:
                    33:d6:ff:ec:02:9b:5d:20:d7:35:0e:7c:b8:11:f9:
                    34:73:dd:18:4b:78:40:50:5c:2c:c1:b8:f8:b7:bc:
                    29:e2:c3:d3:6c:a9:78:08:0b:88:cd:c1:8b:47:68:
                    b6:13:82:d8:c1:c5:b7:ae:78:a6:53:06:f0:20:ea:
                    ca:23:ee:a6:99:00:58:64:09:2a:a3:57:27:e8:8d:
                    ee:98:b9:64:c6:fc:5c:92:4d:bd:7d:96:00:3a:74:
                    fa:30:e3:03:50:23:dd:01:80:00:3c:68:5c:f1:e2:
                    a6:7d:04:b5:12:b1:fd:98:c7:68:78:5f:65:65:6d:
                    46:7d:40:14:ec:f4:f5:48:b1:74:df:35:28:ac:ee:
                    dc:72:ed:f8:80:c6:61:4d:68:02:b1:98:23:c8:98:
                    fe:54:37:7b:06:0a:00:36:3a:bd:9e:6a:d7:a3:79:
                    23:82:95:c0:8d:8f:b0:c8:2f:7e:75:3a:26:1a:3c:
                    fc:d3:60:4b:53:04:bd:0d:ee:c3:e4:20:76:3b:1f:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:69:3D:26:C7:B2:FF:25:87:51:33:D0:FE:C5:5E:D6:A2:C7:21
            X509v3 Authority Key Identifier:
                keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:69:af:f9:5e:02:0e:2d:1b:9d:bf:d5:ee:50:a1:92:2d:b3:
         28:ab:fc:16:2c:56:34:f8:e6:9a:09:20:99:ec:ea:d3:41:d4:
         b7:c4:5b:95:8c:dc:f8:cd:f7:25:37:23:57:fe:c8:51:20:75:
         0c:d9:00:3f:c7:5b:48:65:9c:a6:23:3d:4f:ce:c6:1f:04:0d:
         1e:9a:9c:07:d2:1e:70:9f:27:30:3d:c9:6a:fa:26:5f:f6:3e:
         0c:6e:60:92:97:57:2a:bc:2f:00:a7:1f:3d:b4:0a:49:62:88:
         43:bf:f5:cd:11:4d:32:de:03:f8:ed:d6:69:bd:04:b5:2e:c3:
         c8:4d:53:9e:ee:b2:3f:08:bf:07:1a:7f:b4:ef:5c:f5:60:b4:
         32:cd:73:5b:44:4d:14:14:bc:bf:ee:76:84:20:e4:87:e1:9e:
         63:fc:c9:2e:6e:fe:72:ca:3d:ab:fe:b5:e1:bd:55:60:c3:ff:
         4f:c1:24:98:d3:af:bf:32:08:3f:a3:6f:f2:a3:c5:40:ca:5e:
         b2:1b:71:7f:5c:63:6a:64:fd:04:73:b6:cc:f4:af:ef:42:27:
         c2:12:c6:44:7f:93:62:27:aa:02:4b:bb:08:a0:ae:f3:eb:a0:
         ef:28:27:07:db:e4:66:6a:f7:78:b0:4f:ed:3a:80:a3:54:07:
         32:b8:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:01:46 2026 by rpki-client