Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File:                     OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier:          ZX0MZ1n/rOOcwLMBhvm79vR3y/qkKboCWg4Z90SEsQY=
Subject key identifier:   E2:96:71:05:5D:84:0A:8F:D9:2F:7A:2A:F2:DE:F6:76:3B:81:4A:1E
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer:       /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial:       01A0D9BB8E1A3BA5388937ECDC2391C7AEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number:          055C
Signing time:             Fri 25 Sep 2026 18:02:22 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:22 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:22 +0000
Files and hashes:         1: 3UWcD1LMIzFnlu2Nzvr1pXyRxDA.asa (hash: c+GWfBySdUHjP1N0XQlOWJ+9CuL+3XmkhX0WfJTaLgQ=)
                          2: 7583rAn8JHQAFLDKZll5jTa6nAI.asa (hash: 5a2+tUeRJO0EYIQT28GL2rb5YGySJT3+niyV5yoL27Y=)
                          3: Er__-mawdWtfJYo27OSwzFEKh4I.roa (hash: 3+hqNrIKDCMKOTErNC2JHDYWjmcm2NO8EQA4bB+7LrY=)
                          4: G5P0rN_MZ73QVvQp9yafBswPv8g.asa (hash: r3hOx6KqoS3yDnzfWxZjdgh23pBk9NSVrFQi8cRcaDM=)
                          5: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: RJYlcpJFyR01dlhBe5dBjMEtDtsZL3CDpd12rGqrKqY=)
                          6: WVTec6WdlinW2NDLGRvaP7XGcrE.roa (hash: AVgu0/9AF/Q2loFPcgeDLiO4K7I+K+GfkMpa0wfObDM=)
                          7: kM7kkRJAnyhiR2AyP4z2W0PrTko.roa (hash: edUHC8QdgxZgr0+NMK6wBUM4b3MOnD79gO72E96zVk0=)
                          8: odsQiZOXYj_F9oNoMb6A0AGq048.asa (hash: 8OPemY1bZIMyIL57ZUkk5TFMu0/aBndhntpHmOiR06g=)
                          9: vfVAst8rcB_TCAmUKkdXRd4SWfw.roa (hash: kGKOlSX3d0jID8SNKR1LemW4+qLswKQk5EqhjFVffJI=)
                          10: yX3wAN1wIzQ2Y-D4_o6oQEwjSWQ.roa (hash: zg1nFXz2K6MLvC6tO47y2mLPnAjg1lqDj/t7V26NM2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:8e:1a:3b:a5:38:89:37:ec:dc:23:91:c7:ae:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
        Validity
            Not Before: Sep 25 18:02:22 2026 GMT
            Not After : Sep 26 18:02:22 2026 GMT
        Subject: CN=e29671055d840a8fd92f7a2af2def6763b814a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:df:ea:7a:98:f1:11:dc:1c:b5:4b:37:90:
                    f4:82:46:51:d0:16:53:9e:39:5a:49:e2:68:5c:7e:
                    19:c8:8c:80:15:7e:75:96:17:a6:b2:49:21:5a:bf:
                    d8:60:92:fb:95:4a:54:da:c5:ff:55:af:c6:24:25:
                    78:4b:35:71:31:49:45:8e:6e:f6:b8:7e:73:33:5d:
                    c9:06:f2:01:6c:4b:c6:9b:09:7c:c0:a4:ca:e6:80:
                    fd:60:ac:ea:cc:a5:d9:02:0d:af:2f:97:fc:d9:ce:
                    14:8c:51:0c:d9:44:94:3c:92:73:69:37:ca:e2:f6:
                    7e:43:73:5b:25:b4:55:aa:df:9a:9d:3c:62:90:92:
                    39:a6:f6:9a:86:b9:58:d3:10:48:f8:a3:b8:f6:b9:
                    07:da:e6:38:be:5e:32:37:b1:8b:0e:c6:82:95:5a:
                    b1:d5:e6:ce:69:01:e5:08:01:68:2f:b3:b7:59:8a:
                    3c:3e:bd:00:cb:e9:d1:d9:49:2d:98:dd:7e:00:18:
                    97:bc:20:36:90:21:98:ce:fa:05:43:b6:e9:12:ac:
                    ed:b5:f1:3f:42:29:91:4e:0b:2e:64:70:a3:57:13:
                    6f:91:5b:5c:6b:c1:d0:27:1c:83:0a:87:0a:7a:0b:
                    ea:ec:09:a3:96:8b:b2:b0:ab:89:71:e0:35:96:41:
                    6a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:96:71:05:5D:84:0A:8F:D9:2F:7A:2A:F2:DE:F6:76:3B:81:4A:1E
            X509v3 Authority Key Identifier:
                keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d1:77:2d:1f:b1:9d:75:91:16:d5:ca:6e:bd:0d:6b:b1:d6:
         f6:31:2f:d4:cd:2b:ac:33:fe:5c:f0:86:43:bc:89:cb:e6:92:
         ca:4c:96:b1:bc:e4:92:5e:b0:ba:93:be:3c:7f:5a:48:d9:58:
         8d:13:9e:6b:c8:77:12:b4:b8:fe:04:16:ec:be:c9:17:cf:a2:
         fb:e5:52:03:f6:d3:4d:45:67:64:47:24:b4:d3:2c:a3:a8:1d:
         4c:f9:e8:05:01:b8:7a:12:63:df:52:21:1c:c7:43:d0:3a:b4:
         f1:af:1f:0d:81:f1:a2:f5:36:5a:91:1b:16:cb:f1:e9:49:5a:
         28:77:78:20:b4:ba:21:99:a4:66:37:43:52:c1:61:a7:68:31:
         1b:cb:7e:9c:1f:16:a0:37:14:15:ac:b1:39:ce:9b:64:a6:ed:
         96:03:5b:95:27:fb:6c:07:b7:81:42:6d:ad:86:f9:5e:96:28:
         02:17:ad:da:85:5d:99:1d:b8:ea:5d:0c:8e:1a:8e:64:c9:32:
         e7:97:11:22:08:2e:c9:df:32:90:cb:3a:c7:5b:5b:37:c0:f3:
         e1:23:63:5c:1e:20:bc:b7:23:36:9c:08:93:f7:4c:9b:e6:90:
         0c:23:8e:e3:7f:48:46:2d:4a:24:bc:42:9f:c3:ee:bd:bc:f3:
         4e:18:b0:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu44aO6U4iTfs3CORx67hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGE1YmFhMDU4YzQwOTU2NWZmMmFjODc2YTIyZWU2Mzc3
YjUwM2IwHhcNMjYwOTI1MTgwMjIyWhcNMjYwOTI2MTgwMjIyWjAzMTEwLwYDVQQD
EyhlMjk2NzEwNTVkODQwYThmZDkyZjdhMmFmMmRlZjY3NjNiODE0YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gff6nqY8RHcHLVLN5D0gkZR0BZT
njlaSeJoXH4ZyIyAFX51lhemskkhWr/YYJL7lUpU2sX/Va/GJCV4SzVxMUlFjm72
uH5zM13JBvIBbEvGmwl8wKTK5oD9YKzqzKXZAg2vL5f82c4UjFEM2USUPJJzaTfK
4vZ+Q3NbJbRVqt+anTxikJI5pvaahrlY0xBI+KO49rkH2uY4vl4yN7GLDsaClVqx
1ebOaQHlCAFoL7O3WYo8Pr0Ay+nR2UktmN1+ABiXvCA2kCGYzvoFQ7bpEqzttfE/
QimRTgsuZHCjVxNvkVtca8HQJxyDCocKegvq7AmjlouysKuJceA1lkFqKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKWcQVdhAqP2S96KvLe9nY7gUoeMB8GA1UdIwQY
MBaAFDraW6oFjECVZf8qyHaiLuY3e1A7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0Yzkt
OWMxYjJhZDU1OWFiLzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0YzktOWMxYjJhZDU1OWFi
LzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtF3LR+x
nXWRFtXKbr0Na7HW9jEv1M0rrDP+XPCGQ7yJy+aSykyWsbzkkl6wupO+PH9aSNlY
jROea8h3ErS4/gQW7L7JF8+i++VSA/bTTUVnZEcktNMso6gdTPnoBQG4ehJj31Ih
HMdD0Dq08a8fDYHxovU2WpEbFsvx6UlaKHd4ILS6IZmkZjdDUsFhp2gxG8t+nB8W
oDcUFayxOc6bZKbtlgNblSf7bAe3gUJtrYb5XpYoAhet2oVdmR246l0MjhqOZMky
55cRIgguyd8ykMs6x1tbN8Dz4SNjXB4gvLcjNpwIk/dMm+aQDCOO439IRi1KJLxC
n8PuvbzzThiwAQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:36:40 2026 by rpki-client