Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File:                     1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier:          Rsqzg6dVwkb5C9zADGFVw4o3MaccXyo/eHgihE2dRFo=
Subject key identifier:   C0:1E:B3:37:0C:4A:8D:B4:DC:CD:BF:21:25:5A:03:72:16:54:A1:E0
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer:       /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial:       019EBF5B137DF1D97307B0FA99ABDEB4BF21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number:          1029
Signing time:             Sat 13 Jun 2026 05:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:17 +0000
Files and hashes:         1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: GkCjYCnwFoYWHlfsEZgXn1JgEydMinGHwxzLnH3HWIw=)
                          2: ovrf878QfyGREV5ySXZAKG2wEj0.roa (hash: 8FVx6K1N+lYlmVzhGRofLmSyeuuSSiLMjYmgLA57T9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:13:7d:f1:d9:73:07:b0:fa:99:ab:de:b4:bf:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
        Validity
            Not Before: Jun 13 05:01:17 2026 GMT
            Not After : Jun 14 05:01:17 2026 GMT
        Subject: CN=c01eb3370c4a8db4dccdbf21255a03721654a1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:db:87:8b:ca:d5:32:8d:4a:30:e1:69:9d:fd:
                    ab:fb:dd:3e:df:6d:36:5d:f2:cd:5c:f2:c3:3e:f7:
                    0b:be:51:9b:1f:e3:7d:ad:1f:64:33:b8:b3:88:3a:
                    9a:fa:d2:f9:05:0a:32:77:7a:bc:cc:6b:4a:f2:85:
                    04:8b:69:09:60:db:4c:d0:c7:32:36:6d:f1:49:7b:
                    b9:8b:ab:53:03:d4:2d:b2:74:e2:e0:4b:bc:31:eb:
                    a5:c2:a7:ea:30:c1:48:c9:56:ca:4c:f3:25:6c:4d:
                    e9:0e:b2:b9:8f:05:b6:a6:2c:e2:d5:2b:34:d8:69:
                    97:b1:76:c5:e9:b8:e1:e7:29:11:fd:00:e0:63:ec:
                    29:fd:f3:71:46:08:a0:97:41:d0:59:c5:8f:26:b5:
                    1a:67:2a:97:c9:74:28:c1:6b:e2:0a:b4:43:c3:81:
                    36:79:d4:43:19:3e:95:88:78:9e:b6:16:1b:d7:06:
                    8c:4a:bc:8d:2f:dd:5e:3b:ef:54:5e:0e:b4:b5:e4:
                    41:0f:78:a9:41:1e:dd:c4:cf:07:c3:49:4c:44:78:
                    10:78:65:07:a2:de:91:a6:07:b6:88:e8:ad:cb:e5:
                    0b:b6:eb:3c:10:35:5e:69:89:ec:98:be:49:25:4f:
                    df:0a:5f:a5:4e:48:46:32:69:1c:f0:be:3d:2d:18:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:B3:37:0C:4A:8D:B4:DC:CD:BF:21:25:5A:03:72:16:54:A1:E0
            X509v3 Authority Key Identifier:
                keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:31:80:fa:1b:ee:ff:1c:4f:5c:39:9b:fa:a9:59:0d:4f:
         22:96:9b:5f:45:d9:0e:81:db:f3:5d:3b:50:1d:da:85:86:00:
         4e:0a:fb:10:af:ae:f1:8b:70:fe:fc:2c:c6:d9:ec:d8:b9:d4:
         f0:1c:c5:88:b2:92:74:78:44:98:cf:6e:fe:2d:a8:87:68:10:
         81:23:28:e9:a9:d9:47:21:31:aa:26:29:db:97:e0:d9:ed:08:
         39:0b:2f:c4:93:56:a2:76:7c:0f:b1:d1:b5:e3:d9:61:b2:a0:
         4c:9d:12:71:fa:9d:ae:e9:ba:e4:41:62:11:5d:53:75:0a:3f:
         da:0e:77:1a:c1:69:81:99:27:ba:85:ce:84:af:49:ba:da:38:
         e7:9f:de:ee:fa:01:9b:d3:25:e1:78:f6:83:74:30:9c:22:74:
         91:ae:1b:ab:c2:27:a7:94:27:86:22:de:88:d1:b0:4d:06:93:
         25:fc:22:9e:1f:40:44:ba:29:29:f1:0c:d4:06:f0:1a:a9:c4:
         61:b9:89:20:53:1a:e7:46:73:f3:1a:7b:57:dc:53:2c:34:fb:
         d9:9f:8b:42:14:b9:51:49:f9:23:ce:60:99:bd:a4:2b:1f:bd:
         8e:40:75:ce:da:44:ea:8b:66:72:fe:95:7a:d3:3a:11:54:3d:
         78:0e:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:43 2026 by rpki-client