Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
File:                     OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json)
Hash identifier:          eBuvCM1TKav2v2UwNab5GbfAuT9a19YZZwH06gGxmNc=
Subject key identifier:   4F:0E:C6:98:E8:BE:AB:2D:69:47:E7:35:A4:A3:E8:CE:FC:26:6F:11
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Certificate issuer:       /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial:       019FACACE4B3EA9A3B47CB3C2676A19CBFC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
Manifest number:          14EB
Signing time:             Wed 29 Jul 2026 07:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:39 +0000
Files and hashes:         1: 8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa (hash: brAMlNDL72wfdOjb6ddjdyt7eJo3B0Foc3PWILSQa/8=)
                          2: 9n4VcJdW8qnQyuWz0vME2QO1fbA.roa (hash: S37EYsMTrmOyNa0qB2TT/fhsEUbmtLIrd9epgXzmCws=)
                          3: GZDzHGbDx7dfkoatOEujE-QeXX0.roa (hash: rp5gMVM6d0QMtfUx8hE8lYmJBJMynSH2EW1XEZUY1fk=)
                          4: NzRF1KMW-RjrnCQ45Ns__CGotH0.roa (hash: vgtU60XykZYUOdD/K3o47xgLUs91d2y5R24TZ2aLcb4=)
                          5: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: iV5FBTrsj/p+TSAmpAqW+qzuTSaOtMwyuFmUfwFhyZY=)
                          6: hHhTehEBjNf1KtA383HryRHP5GU.roa (hash: 553Jp1J+2Jv+MXIIihnE80X01/4/KUBqAe/MNZh5Kwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:e4:b3:ea:9a:3b:47:cb:3c:26:76:a1:9c:bf:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
        Validity
            Not Before: Jul 29 07:00:39 2026 GMT
            Not After : Jul 30 07:00:39 2026 GMT
        Subject: CN=4f0ec698e8beab2d6947e735a4a3e8cefc266f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:60:95:91:c1:42:ff:dc:cf:3a:8d:77:12:
                    0a:8e:91:21:30:ce:cf:4d:67:49:b3:6c:7c:76:69:
                    3b:a1:f1:d6:2b:bb:ca:06:54:95:f8:c2:2d:3a:ea:
                    d9:ef:40:86:f4:0f:ec:35:78:6c:90:8b:c8:68:d8:
                    21:69:6d:05:f4:a1:3a:0a:83:f0:41:60:b6:61:4f:
                    e7:91:79:d8:cb:fb:58:e6:40:c0:71:52:82:42:31:
                    fb:e2:bc:ae:88:98:bb:d5:48:97:37:05:67:76:de:
                    9b:22:ef:c1:e4:52:cf:6c:bb:25:af:66:bb:da:dc:
                    de:be:67:a1:5b:89:9e:86:94:da:50:3b:e4:5c:f2:
                    5c:99:ce:de:cc:a5:9d:d7:e7:7e:a8:4c:76:bb:46:
                    19:ff:7d:3b:c5:2c:83:ec:9a:b1:61:be:3b:03:c0:
                    64:65:6e:49:86:3c:54:db:9e:c9:fc:29:ef:a9:4d:
                    22:bf:ce:1e:4a:f6:55:b4:91:9f:9f:38:80:01:53:
                    44:bf:f7:dd:b8:06:4d:df:3d:32:17:4a:a6:db:98:
                    31:43:0d:e8:44:70:78:4a:bc:f4:6d:cb:6a:96:a8:
                    2d:4a:55:ae:ff:3a:19:0c:59:5f:fb:e9:c8:0f:22:
                    8f:ab:22:82:4e:45:35:f7:c0:44:2c:76:d2:f8:57:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:C6:98:E8:BE:AB:2D:69:47:E7:35:A4:A3:E8:CE:FC:26:6F:11
            X509v3 Authority Key Identifier:
                keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:47:4c:8f:52:90:c5:ad:f5:df:c4:83:fc:00:93:8a:d3:4e:
         93:d1:9c:15:74:02:d2:fc:07:da:08:d6:3b:39:6e:a4:b2:60:
         05:7e:fa:25:46:af:9c:d8:db:a9:eb:e1:70:d0:df:ab:c1:f5:
         5d:90:c5:2e:17:a8:b7:df:80:99:04:6a:7c:f9:45:95:1b:53:
         27:33:ef:b3:60:87:90:c1:46:73:dd:d2:49:e4:eb:fa:3e:a3:
         84:ed:56:e7:6d:a1:d6:44:b0:53:3d:0a:4f:37:f3:74:ff:53:
         a3:0e:85:be:73:f1:a1:80:a4:16:68:5a:56:6d:fe:ab:53:a0:
         ef:67:a6:6d:0f:66:c8:fe:8d:ea:3c:62:ce:70:ca:eb:8a:f6:
         dd:41:57:7d:a7:67:61:a0:6c:02:90:34:0f:2b:23:d9:39:32:
         ae:43:6d:3b:a6:98:7e:bc:9d:80:d0:92:3a:cd:59:4c:09:63:
         e5:e8:c9:81:62:7c:57:8e:2c:06:20:9d:8b:b8:81:63:1e:88:
         31:93:94:96:b0:49:c5:b5:29:9c:24:5f:e2:c9:d3:83:3b:8c:
         0b:71:ac:c4:58:de:c1:d6:6a:5c:6a:8e:f9:f5:bd:ad:45:2a:
         15:48:98:49:d8:55:a2:70:4b:a9:13:25:34:6f:b9:5f:ba:89:
         56:94:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:44:00 2026 by rpki-client