Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File:                     otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier:          bslH817Z0eZwAs2DO8VNxUhyM8hNYzt1J+qzhI/gzXk=
Subject key identifier:   0E:04:22:F8:97:C9:79:6C:46:AA:AF:E6:AE:F4:C6:5A:3F:29:C5:CA
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer:       /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial:       019F94367A9D4263346CA817DE9393AB33D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 13:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:25 +0000
Files and hashes:         1: 4V6AO3iCByKz-8xLXlPGJ7JN6-U.roa (hash: 2uPt+ClUXX7tGFKQBXaXil7RPudWsmAnzyUlsk5i8AU=)
                          2: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: +SBNqZC7UFScLu/LVru6JN3Ys3pxnifS3GFlhCgGzJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:7a:9d:42:63:34:6c:a8:17:de:93:93:ab:33:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
        Validity
            Not Before: Jul 24 13:00:25 2026 GMT
            Not After : Jul 25 13:00:25 2026 GMT
        Subject: CN=0e0422f897c9796c46aaafe6aef4c65a3f29c5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:70:72:7d:eb:03:d8:b1:ff:4a:ca:c0:c0:64:
                    54:20:ab:5f:c4:81:b5:08:fb:33:a8:18:86:ee:c7:
                    08:ae:00:76:c8:04:ab:bc:73:08:da:f1:c6:38:d9:
                    48:0d:4a:65:e8:d3:42:15:94:89:5b:4f:47:ca:7b:
                    96:13:d0:72:ef:f7:b8:33:60:d0:72:37:07:40:82:
                    90:29:07:5b:cc:af:c8:a9:13:15:0a:ea:44:07:70:
                    52:0c:5f:cf:df:c7:07:25:45:4b:3d:e6:0f:50:43:
                    ae:be:92:ae:b9:72:c1:21:30:68:1d:17:47:77:2a:
                    06:43:68:3c:9c:b7:85:41:a5:ba:d7:fd:c8:35:39:
                    fc:4a:9f:59:1f:c0:f1:72:0f:8b:9f:0e:08:12:82:
                    8f:1a:23:5e:23:b6:a1:a4:88:1f:ea:2a:d6:41:c5:
                    45:1e:12:a4:1f:e6:3a:c7:74:8d:6f:6a:d4:5a:63:
                    2d:3d:c2:fd:5d:87:df:f1:2d:11:48:46:3d:79:31:
                    74:f6:79:1e:2b:eb:a8:f6:e8:27:4c:d4:ce:42:23:
                    be:76:7d:13:2b:83:c8:74:1e:ad:c0:be:d8:13:28:
                    4e:ac:b2:f5:c7:bc:5d:bb:59:22:43:4b:3e:cc:e3:
                    0d:fd:04:70:81:be:97:f7:8a:91:14:4e:ac:3e:d1:
                    6d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:04:22:F8:97:C9:79:6C:46:AA:AF:E6:AE:F4:C6:5A:3F:29:C5:CA
            X509v3 Authority Key Identifier:
                keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:94:f4:c3:0b:2e:7f:c6:a3:bc:ae:b1:7f:8f:a9:31:12:ff:
         ac:57:b4:d5:71:e3:bb:2d:6e:07:eb:68:3d:c2:5c:a5:d1:89:
         7a:4b:f4:b8:fd:ab:86:ac:21:38:ef:f4:8a:34:41:82:c0:8e:
         92:11:72:d5:cc:14:43:78:a9:ef:82:7f:70:e3:1a:f8:6a:60:
         fb:30:f4:27:2c:f6:71:61:f7:de:f3:1c:ff:04:64:29:f9:ca:
         19:e5:6a:c2:d4:3d:98:8a:b4:ff:8b:7b:84:71:96:cf:4d:f6:
         cd:89:6e:39:8e:8a:8a:75:6d:9d:20:16:83:41:d1:f4:0a:b1:
         b2:9f:84:3e:21:87:55:5e:a1:13:ec:1a:d8:bc:a4:0c:91:fe:
         25:5c:a0:04:8d:37:a8:e6:be:76:15:6c:bf:f0:2f:f6:c7:26:
         fa:84:97:8a:e8:31:b9:93:7d:3d:20:11:19:c7:77:5f:31:dc:
         52:ef:ec:5a:e2:81:ae:65:f8:87:7e:4d:40:b1:de:4b:d8:a0:
         07:8b:1c:0f:3d:bd:41:60:ec:68:97:d4:f2:9a:30:86:46:50:
         b8:ba:c6:57:71:9a:b0:f6:24:a4:aa:03:00:ca:8d:b0:ce:78:
         9a:ba:bc:4c:7e:78:36:20:e1:93:46:a5:d9:22:48:1d:5f:fc:
         2e:9f:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:52 2026 by rpki-client