Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File:                     otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier:          4EgDk4ygiT73z/svP/RvQK5HSFGn9ymStJhvTIi+qHI=
Subject key identifier:   0F:58:2F:10:B2:20:53:B5:D4:CB:5C:32:D8:AB:0E:3D:76:E6:1A:66
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer:       /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial:       019E216DF512DC4E033F3A1D33E34B13DD95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 13:01:54 +0000
Manifest this update:     Wed 13 May 2026 13:01:54 +0000
Manifest next update:     Thu 14 May 2026 13:01:54 +0000
Files and hashes:         1: 4V6AO3iCByKz-8xLXlPGJ7JN6-U.roa (hash: 2uPt+ClUXX7tGFKQBXaXil7RPudWsmAnzyUlsk5i8AU=)
                          2: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: t4t556vlW7eWpdAxWU1OyPsP36pNcIPrgvNOo35PsGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:f5:12:dc:4e:03:3f:3a:1d:33:e3:4b:13:dd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
        Validity
            Not Before: May 13 13:01:54 2026 GMT
            Not After : May 14 13:01:54 2026 GMT
        Subject: CN=0f582f10b22053b5d4cb5c32d8ab0e3d76e61a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:81:2f:ea:99:a1:67:1a:66:c0:8f:f7:8f:
                    af:85:fc:95:70:bd:5e:5f:bb:ec:a3:a8:d6:ee:91:
                    61:b5:97:68:db:ec:1a:cd:52:68:71:17:c5:11:6a:
                    46:c0:90:34:57:41:07:e5:46:73:68:b0:8d:51:dd:
                    01:bc:99:9b:7c:de:ac:00:49:70:3a:7a:c2:8d:b8:
                    5a:49:e5:e4:36:86:ba:f2:16:31:59:93:ec:9d:31:
                    84:15:35:80:6d:5a:5e:0c:73:fd:56:83:87:43:64:
                    61:16:c9:98:04:ff:df:d9:ba:b3:ed:03:ec:6b:81:
                    a2:64:ec:2c:59:2b:85:ff:f1:eb:a6:c6:57:10:92:
                    06:55:e3:44:8b:91:0e:21:93:8a:c7:9e:5b:44:f5:
                    77:f8:97:52:aa:c6:cf:9e:83:d1:e7:bf:15:e9:b7:
                    51:ca:30:53:8b:b9:a8:24:e6:e4:97:4e:2c:ae:eb:
                    42:74:d8:13:03:4d:42:6d:5b:a2:ac:2f:6a:ad:01:
                    37:dd:05:dc:bf:d5:65:c9:f2:c0:90:2f:db:b1:03:
                    ee:98:15:4b:95:ed:52:ef:64:d7:10:72:68:59:72:
                    00:31:cb:f6:cb:06:8e:a2:e8:ef:d2:1c:f8:6d:00:
                    dd:fc:82:50:10:0d:a8:ba:66:74:ed:5b:68:22:17:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:2F:10:B2:20:53:B5:D4:CB:5C:32:D8:AB:0E:3D:76:E6:1A:66
            X509v3 Authority Key Identifier:
                keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:dc:05:a1:fe:e4:d5:aa:47:a1:6c:75:fd:b7:9d:9b:50:62:
         42:dd:c4:83:f8:44:35:97:93:30:55:e5:38:e4:55:5b:1b:40:
         58:f5:35:4d:f0:b7:f3:a0:de:b8:e5:77:b4:14:0b:18:84:7e:
         28:da:1f:a6:b7:a1:7f:f0:32:e2:d4:3a:c1:3d:7d:f7:16:db:
         c8:a1:6b:22:a8:36:9f:a8:c9:a7:9c:13:27:3e:f8:e5:87:89:
         bf:f3:11:77:90:6f:d6:1a:f8:e0:93:e2:31:ad:26:7f:de:74:
         95:d4:48:a3:ba:aa:e3:2f:a7:40:d0:8c:60:86:64:cf:b1:77:
         80:ed:95:60:11:66:60:e2:56:d8:bd:7a:d6:d6:12:f2:e8:d3:
         25:df:b4:87:7f:18:bb:87:00:24:27:6a:ce:32:d5:10:54:71:
         18:1a:2c:50:d7:52:a1:a5:7c:c3:b6:2b:28:71:54:36:56:65:
         88:85:74:ee:05:96:e4:ec:93:80:2c:bd:41:71:b7:03:17:0e:
         8d:a3:d0:1f:99:d1:77:5a:80:93:f1:ba:c9:79:e3:4b:f9:42:
         6b:c6:17:1d:fb:27:8a:21:34:f3:da:f1:58:ec:92:10:a0:af:
         c0:13:f9:1d:c7:88:5d:3a:ee:6e:e4:a6:ab:e5:b5:53:f0:0c:
         2a:15:25:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbfUS3E4DPzodM+NLE92VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDM3ZmMzMWVmZDM3MDNiZjJjNGMzZTg4YmMzYzFjZmI0
Nzk5MTkwHhcNMjYwNTEzMTMwMTU0WhcNMjYwNTE0MTMwMTU0WjAzMTEwLwYDVQQD
EygwZjU4MmYxMGIyMjA1M2I1ZDRjYjVjMzJkOGFiMGUzZDc2ZTYxYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMaBL+qZoWcaZsCP94+vhfyVcL1e
X7vso6jW7pFhtZdo2+wazVJocRfFEWpGwJA0V0EH5UZzaLCNUd0BvJmbfN6sAElw
OnrCjbhaSeXkNoa68hYxWZPsnTGEFTWAbVpeDHP9VoOHQ2RhFsmYBP/f2bqz7QPs
a4GiZOwsWSuF//HrpsZXEJIGVeNEi5EOIZOKx55bRPV3+JdSqsbPnoPR578V6bdR
yjBTi7moJObkl04srutCdNgTA01CbVuirC9qrQE33QXcv9VlyfLAkC/bsQPumBVL
le1S72TXEHJoWXIAMcv2ywaOoujv0hz4bQDd/IJQEA2oumZ07VtoIheTaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9YLxCyIFO11MtcMtirDj125hpmMB8GA1UdIwQY
MBaAFKLTf8Me/TcDvyxMPoi8PBz7R5kZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNjMyZjUtODllNy00ZDIyLThiYzEt
MzMzOTkwODAyNzBmLzEvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zNjMyZjUtODllNy00ZDIyLThiYzEtMzMzOTkwODAyNzBm
LzEvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdwFof7k
1apHoWx1/bedm1BiQt3Eg/hENZeTMFXlOORVWxtAWPU1TfC386DeuOV3tBQLGIR+
KNofprehf/Ay4tQ6wT199xbbyKFrIqg2n6jJp5wTJz745YeJv/MRd5Bv1hr44JPi
Ma0mf950ldRIo7qq4y+nQNCMYIZkz7F3gO2VYBFmYOJW2L161tYS8ujTJd+0h38Y
u4cAJCdqzjLVEFRxGBosUNdSoaV8w7YrKHFUNlZliIV07gWW5OyTgCy9QXG3AxcO
jaPQH5nRd1qAk/G6yXnjS/lCa8YXHfsniiE089rxWOySEKCvwBP5HceIXTrubuSm
q+W1U/AMKhUlSg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:11:00 2026 by rpki-client