Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File:                     oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier:          3PQ/5YoaQ2L+kxuDamVaVhS/4wJUzVWsvOD+5n6OMl8=
Subject key identifier:   F7:D5:BC:DA:80:A9:91:23:26:CF:2F:4D:97:AD:37:28:3B:86:89:1A
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer:       /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial:       019EC2FFF19E744F12F584C081ACD975E551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number:          13FE
Signing time:             Sat 13 Jun 2026 22:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:13 +0000
Files and hashes:         1: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: U/2Ybqmb3bHL/EXBe/SuPzyg+7xmAtfZr1fyIsAXcdE=)
                          2: wKG5f7dn1-pgRZqivJIzmXImgvk.roa (hash: 9MbV7Vdo6+ToMH+TbPulkfdTZLPlSBCEwYkmIQl3ggs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ff:f1:9e:74:4f:12:f5:84:c0:81:ac:d9:75:e5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
        Validity
            Not Before: Jun 13 22:00:13 2026 GMT
            Not After : Jun 14 22:00:13 2026 GMT
        Subject: CN=f7d5bcda80a9912326cf2f4d97ad37283b86891a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:08:b1:cb:d2:10:f3:f7:91:7a:ec:ed:32:
                    44:f8:e7:d4:f5:bd:bd:90:7a:38:7c:6e:5d:77:ad:
                    4b:72:8b:ba:62:cc:ba:e9:53:e4:b8:ee:60:8c:52:
                    20:92:9c:b9:45:75:2d:5a:f4:63:c4:1c:17:0e:36:
                    c4:7d:ef:cb:0a:8c:b0:57:f3:43:64:67:7d:c2:1c:
                    cb:50:34:9b:73:86:9b:47:d8:63:08:c5:61:54:a3:
                    9a:e1:d1:20:4a:cc:9e:27:fc:88:44:9f:b4:59:ca:
                    30:f3:a9:a2:61:8c:7b:b7:26:cc:99:ac:e6:c2:ef:
                    df:f4:92:94:49:57:9b:43:b2:fa:bf:8c:2b:0b:b4:
                    d0:5f:10:74:ff:96:3c:89:8e:66:e9:ee:7b:9a:96:
                    6c:7a:18:8f:22:3d:fd:95:22:de:4c:37:a0:85:55:
                    e8:08:b2:e5:63:71:91:15:d0:6e:da:e7:62:5a:35:
                    e8:fe:f7:64:ad:75:e5:31:7e:cc:b6:b7:b2:19:8e:
                    d7:b7:8c:b5:4d:04:17:a4:b3:6e:47:3c:a2:f2:79:
                    0d:9f:58:70:10:a8:21:9c:b6:2b:b1:7b:fe:35:c9:
                    e4:e1:11:3a:f7:d0:23:15:83:a4:a7:cc:e3:29:0b:
                    2c:00:fe:6c:5f:9d:34:87:e2:ca:64:a7:bf:f0:26:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D5:BC:DA:80:A9:91:23:26:CF:2F:4D:97:AD:37:28:3B:86:89:1A
            X509v3 Authority Key Identifier:
                keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:76:8a:3f:dc:c5:eb:87:7a:49:ba:17:b6:36:62:37:32:13:
         1c:fc:c2:9f:d9:fb:0b:60:9f:c7:90:c1:82:91:ad:09:6b:3a:
         ba:48:2a:d1:76:20:90:6a:15:ba:c8:c4:ed:a4:24:5d:aa:3f:
         22:11:4f:d0:a0:ff:01:c0:fa:54:c4:4d:08:fe:8c:d8:6f:73:
         54:13:c6:44:63:4b:52:55:6d:7c:72:2a:db:88:92:bd:09:61:
         19:80:31:60:d9:13:15:12:4c:52:c5:f2:e6:6e:ea:09:06:9b:
         b8:7b:e6:93:eb:a8:d9:6d:af:4d:c1:38:c8:16:ab:4a:5a:7c:
         46:ac:8b:fe:24:22:b3:18:f7:87:b4:17:90:69:17:52:c6:ed:
         ba:65:cc:0a:08:f3:bc:18:43:c5:38:6f:c5:38:cd:a8:61:37:
         17:3c:81:b6:16:21:69:df:c8:fe:f4:da:bc:1c:1e:dc:c7:ef:
         61:55:2d:fc:dd:c0:73:3f:1d:17:90:67:d8:ae:12:1e:a7:7b:
         64:12:89:c6:91:6b:d2:c0:c9:e0:c3:04:47:7e:e0:cc:f4:9e:
         8a:b4:45:7f:56:4c:76:98:28:7c:18:1d:9e:68:65:fc:df:21:
         ca:04:08:e8:24:8c:3f:22:21:7b:07:c3:d4:6b:6b:43:4c:58:
         b8:48:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:35 2026 by rpki-client