Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File:                     OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier:          3DzBM6p3PkfSOWcom0mgdEkf5WBWr5xLedQIBGvpEcw=
Subject key identifier:   52:42:1A:DC:2E:8E:74:8F:7B:C0:25:73:B1:5E:A1:F8:E2:02:1A:D7
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer:       /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial:       019D25F11AFFEE4F1938A0701959A720B9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number:          036E
Signing time:             Wed 25 Mar 2026 17:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:51 +0000
Files and hashes:         1: 9gXM3yfKHBM3QnslkthNSxhDRqc.asa (hash: k3sTrvbBG8RnZfnyvtzcpTGj5BacMFrWy8nQf2dydoU=)
                          2: Er__-mawdWtfJYo27OSwzFEKh4I.roa (hash: 3+hqNrIKDCMKOTErNC2JHDYWjmcm2NO8EQA4bB+7LrY=)
                          3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: 5jq0swWCh9IdZ1oTYfwhtqPvUkB40DuRuEp9WnFQXkY=)
                          4: WVTec6WdlinW2NDLGRvaP7XGcrE.roa (hash: AVgu0/9AF/Q2loFPcgeDLiO4K7I+K+GfkMpa0wfObDM=)
                          5: cwK1oTMqHeWuufTdF2FowfL1ogw.asa (hash: pm/Dfj8iYXq7lxGmzXb0fegEvMVKmOFBxrnejfUXAtQ=)
                          6: kM7kkRJAnyhiR2AyP4z2W0PrTko.roa (hash: edUHC8QdgxZgr0+NMK6wBUM4b3MOnD79gO72E96zVk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:1a:ff:ee:4f:19:38:a0:70:19:59:a7:20:b9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
        Validity
            Not Before: Mar 25 17:00:51 2026 GMT
            Not After : Mar 26 17:00:51 2026 GMT
        Subject: CN=52421adc2e8e748f7bc02573b15ea1f8e2021ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:3b:4b:1f:8b:8e:09:89:17:ee:84:40:de:
                    be:8f:2f:29:38:31:0e:aa:ae:21:02:38:45:92:70:
                    1d:16:46:02:98:4e:ba:b2:4a:9e:85:89:88:95:01:
                    7c:76:40:9e:5a:9e:0b:94:53:3e:6d:7c:52:d9:c9:
                    d3:e4:be:fd:58:02:dd:83:07:4d:a3:8d:a5:09:8b:
                    a7:fd:54:f0:4f:93:65:84:56:46:ee:ae:06:2a:3c:
                    dc:1f:3a:ad:3f:87:72:4b:0b:98:14:b0:86:66:16:
                    7d:89:80:7a:1f:93:10:0d:05:23:24:9d:36:04:b6:
                    3c:92:ad:0d:b4:02:84:b2:72:2e:fc:dd:0f:d6:96:
                    fb:f1:3e:c8:ae:f3:68:a7:85:94:5a:2f:66:fc:0d:
                    5a:15:8c:e5:66:e2:f4:91:d5:50:bd:73:6d:d9:ba:
                    6e:64:e1:0e:6b:f2:50:64:6e:a5:fc:df:f7:94:96:
                    6d:8e:e7:d5:3a:37:9d:7b:01:22:b0:f2:64:00:15:
                    68:f1:3f:8e:79:8d:20:26:2a:aa:23:ff:1a:5d:f7:
                    53:d1:f1:4f:14:ae:84:3a:45:96:fb:e0:2f:db:1b:
                    1b:a8:a6:63:90:cc:11:10:14:10:28:1e:ff:73:c5:
                    68:b2:c2:27:3b:95:9d:da:2d:94:08:e0:36:a5:19:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:42:1A:DC:2E:8E:74:8F:7B:C0:25:73:B1:5E:A1:F8:E2:02:1A:D7
            X509v3 Authority Key Identifier:
                keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e4:58:f9:c5:fc:63:41:e7:3f:2e:e5:fa:fb:ed:2c:77:4a:
         40:ee:91:9d:5c:e1:b7:98:8e:22:c0:d6:e0:52:92:54:01:42:
         75:52:cb:66:dd:2e:e4:fb:af:1e:b3:12:69:90:b8:8f:21:8e:
         b0:80:1c:10:43:5c:51:2b:7a:50:79:ed:a7:84:cd:03:74:d5:
         4e:6b:71:93:14:c9:a2:bf:87:e2:10:65:21:0e:dc:01:b3:13:
         4e:2d:b7:c3:88:37:b9:fa:c8:b9:7f:5c:2b:36:d9:62:1c:ee:
         19:ef:96:b9:ed:32:4b:16:45:c1:38:cb:4c:09:8e:72:d9:50:
         8c:e2:06:9f:69:71:93:76:ec:32:b9:c5:44:bd:59:77:38:1b:
         52:6e:4f:9d:f5:d5:30:e4:68:91:c0:55:c8:88:09:82:36:bf:
         98:ee:c7:d5:bd:ef:c4:45:30:66:90:a1:dd:7a:99:a5:5c:a7:
         0e:43:f0:f0:d0:43:8e:5e:af:92:52:43:d7:43:4c:1c:30:ba:
         cc:cf:03:d0:2f:33:1f:05:eb:19:cb:d5:76:b2:65:a2:3e:8c:
         f4:d0:17:63:78:e2:ca:99:32:63:dd:04:e3:74:5b:1d:a5:34:
         d1:d1:72:cb:9b:42:9e:46:ef:40:ee:ab:27:8f:46:44:05:73:
         9e:59:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:19 2026 by rpki-client