Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File:                     OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier:          2iVW2Z0Oq5PwuVd0iqaNoZdVDkuxePD9dvLY2vOpV7g=
Subject key identifier:   13:76:9E:2D:28:D8:2C:E3:84:2D:A3:05:ED:B0:EE:7C:79:D7:4D:DA
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer:       /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial:       019F91DA3F1E696BDA62CAC049DCC612898E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number:          0B81
Signing time:             Fri 24 Jul 2026 02:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:26 +0000
Files and hashes:         1: HJsFBPXpRz5LLN-HWWaUWkvpuFg.roa (hash: A71A79ld0mpXJShPBVAxO/RGVR9i2ChYv5yAgG0mvoI=)
                          2: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: I5TLnOxH23ZJC+mARr333dmZcKrJ1N3lQxBrUkoxzh4=)
                          3: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (hash: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM=)
                          4: eajsCfDVR3mS2bokl79SZG65uO0.roa (hash: C+6jNZ7CvadCwwwjGLPlq4B5cByCVplF5IFoLR8czpM=)
                          5: igrteN5vqIxxznlHOmqBmnoDCxM.roa (hash: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI=)
                          6: x4b1kVJxAoo0cTXBS0d05Vjhxp0.roa (hash: Dr3HVuYGSpmgMr+JUBhbJNssYU4/n5sJRGF2b2MSqMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:3f:1e:69:6b:da:62:ca:c0:49:dc:c6:12:89:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
        Validity
            Not Before: Jul 24 02:00:26 2026 GMT
            Not After : Jul 25 02:00:26 2026 GMT
        Subject: CN=13769e2d28d82ce3842da305edb0ee7c79d74dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:19:10:c3:8f:83:84:61:a5:92:23:2a:d8:
                    57:2a:6c:74:08:8f:7a:97:ee:df:62:5d:7f:70:ea:
                    63:ee:ef:8b:c6:04:6a:b3:71:04:54:da:66:22:d6:
                    e6:bc:34:95:18:05:87:b0:08:97:97:89:37:a4:64:
                    04:c2:c6:0b:5e:c7:a6:b0:2d:e9:ec:98:86:fd:d8:
                    5a:a4:53:e5:00:8e:86:90:fb:04:3c:dc:5c:59:92:
                    9b:ac:9a:a7:ba:09:02:23:96:2a:80:ea:9a:6e:b6:
                    38:d5:af:1a:81:f8:9b:b6:86:a2:0c:59:a0:ea:e7:
                    f9:78:79:e8:f0:d4:99:72:eb:3f:79:88:b0:53:79:
                    7f:d8:ef:95:3e:6a:65:81:ed:ef:89:9a:68:79:f2:
                    30:86:6b:08:15:cc:23:09:2b:01:98:41:2e:80:10:
                    d7:85:77:e7:db:33:27:b8:13:f4:4f:d6:82:39:81:
                    26:6c:0b:cc:b6:2e:5e:aa:2b:19:bc:fd:ec:8b:d7:
                    b8:1e:b8:30:db:06:02:6c:c7:ff:0b:a5:4e:b3:c2:
                    e4:3a:6f:49:2b:da:12:50:23:e9:a4:b5:9b:23:bc:
                    f4:d2:77:16:67:81:83:9e:c9:6f:1a:b0:ab:f6:e5:
                    f6:38:3e:eb:2d:a1:7e:38:a4:ad:92:2d:d3:57:80:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:76:9E:2D:28:D8:2C:E3:84:2D:A3:05:ED:B0:EE:7C:79:D7:4D:DA
            X509v3 Authority Key Identifier:
                keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:51:4f:b3:44:e9:8f:3a:a1:a7:b7:be:be:7f:6d:84:52:12:
         15:90:f0:b0:87:bd:2a:e7:11:5e:cf:da:ba:7e:d4:34:97:12:
         e8:bf:db:71:b1:73:2b:69:69:79:d0:8b:93:64:1a:f7:f6:10:
         3a:96:21:26:95:47:4c:5b:e5:eb:37:4b:ba:82:d8:94:6f:8c:
         2a:5e:1d:91:1b:7a:66:d5:bd:ea:e9:66:66:ea:2a:ef:d2:a0:
         d4:7d:82:69:ad:c6:23:db:8f:7c:82:70:ec:2e:20:ca:c2:4f:
         33:db:49:1c:5f:7c:58:3a:11:45:93:1d:e3:af:6d:c8:d7:28:
         51:ec:ab:86:9a:84:d5:cf:22:08:5e:cd:c1:37:32:9a:cb:7c:
         ad:00:eb:30:dd:fa:bc:9f:7f:7f:64:80:d7:0c:3b:52:35:c7:
         23:f3:73:6d:35:c5:f6:31:11:ec:97:cc:46:77:98:7f:51:4c:
         4a:be:5f:41:78:4e:55:df:a6:88:95:85:64:24:3c:30:e1:fb:
         bf:8e:f2:45:8b:8d:d6:0d:c4:01:80:e9:01:12:9b:63:63:c0:
         d9:0c:71:09:9d:66:76:fe:5b:2b:59:06:da:67:46:85:46:54:
         e0:c5:ad:6a:54:da:dc:47:24:c9:7d:0c:c3:86:4e:43:34:1d:
         de:4f:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:26 2026 by rpki-client