Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File:                     OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier:          Vy63667wCHDhmcIBWnvg7VELsQ9rQk8THq/fMd3VqzY=
Subject key identifier:   A9:35:DE:21:FF:09:D7:68:EA:FC:B7:46:B3:F7:7E:B8:F1:F5:59:7F
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer:       /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial:       019FAB9AC81E0C9A9ADD6E74CCBD236A4C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number:          0D2B
Signing time:             Wed 29 Jul 2026 02:01:15 +0000
Manifest this update:     Wed 29 Jul 2026 02:01:15 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:15 +0000
Files and hashes:         1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: epE3qfmZDniJKqQJmDJg7wmIu+Rw9qCOuO6KgLoPzdI=)
                          2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:c8:1e:0c:9a:9a:dd:6e:74:cc:bd:23:6a:4c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
        Validity
            Not Before: Jul 29 02:01:15 2026 GMT
            Not After : Jul 30 02:01:15 2026 GMT
        Subject: CN=a935de21ff09d768eafcb746b3f77eb8f1f5597f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:ea:7d:5f:e4:41:23:a4:3d:ac:16:9e:f9:
                    c6:e3:9e:1b:b4:90:b7:ae:e7:54:00:95:a5:31:45:
                    77:d6:64:1c:81:5e:40:11:d1:e3:b2:28:04:61:ac:
                    1d:a7:fe:1c:e8:b4:7c:47:2e:8a:15:9b:63:04:cb:
                    c8:5a:51:a2:06:52:15:17:04:73:f3:82:50:cd:d1:
                    dc:28:d6:f9:3c:50:9f:ce:33:82:50:45:aa:8d:49:
                    5f:db:32:f0:e7:29:65:2d:4b:98:ee:03:0b:03:ff:
                    34:40:ff:7a:44:f3:2f:54:ba:12:86:07:89:73:6c:
                    0b:37:a9:bb:a5:d7:c1:28:63:50:05:74:1d:03:a1:
                    28:26:63:be:d7:80:fa:93:c3:68:99:43:fc:4b:75:
                    ef:9f:93:2a:7a:55:f9:cf:96:6e:66:8a:84:cf:d7:
                    61:c9:06:77:bc:71:26:0d:3d:ae:2c:65:9e:f4:dd:
                    26:ca:56:78:95:af:a5:99:6d:f4:0b:3a:cb:71:d7:
                    b2:ba:7d:2d:fb:14:07:ac:ae:14:0e:6d:43:c4:f9:
                    d6:69:7f:41:57:55:40:54:b7:bf:2c:f9:e3:3d:42:
                    2c:5b:cb:b0:4e:e0:46:71:e4:6a:08:66:41:7b:93:
                    04:0e:fa:83:bc:43:17:78:b4:42:a9:45:89:aa:8c:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:35:DE:21:FF:09:D7:68:EA:FC:B7:46:B3:F7:7E:B8:F1:F5:59:7F
            X509v3 Authority Key Identifier:
                keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:88:53:87:8f:82:6c:2f:a2:01:3b:35:7c:fb:7c:56:73:
         20:fa:2b:f4:ea:ee:c6:b2:45:19:08:c0:dc:b6:96:35:82:07:
         d1:37:c8:c2:46:4b:4d:da:5c:04:11:84:f2:47:99:68:cc:75:
         cd:ba:fd:91:77:7f:d6:9c:6b:53:88:b7:fe:4a:a9:77:fb:69:
         bf:69:02:66:8f:20:3e:45:26:45:b6:83:e7:c9:09:4d:76:f0:
         0d:64:bb:64:dc:f5:96:fd:3a:4f:79:6a:51:25:6e:6a:76:3e:
         ba:f4:6f:48:53:32:f6:07:43:92:1b:e3:39:77:51:73:cc:e2:
         1d:61:97:02:22:52:59:4d:af:94:ed:00:b5:2a:b2:aa:4d:a0:
         e2:e2:51:94:69:76:88:f0:a5:1b:34:40:78:94:43:5f:f3:79:
         54:fe:a8:76:c0:a0:da:52:36:d7:b2:67:ae:14:97:3f:4d:15:
         23:1e:d6:09:76:d0:b7:52:1c:01:e1:ac:7a:a6:f1:c9:ce:63:
         8b:66:77:44:32:7c:56:fe:14:8e:d1:2f:66:35:dc:89:4c:9e:
         cd:83:d8:22:07:be:c3:42:85:7a:97:ed:62:4e:ec:0b:94:5e:
         10:ea:37:46:e8:71:39:93:7f:c0:f5:2b:92:f1:58:4e:35:e6:
         07:39:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:35:10 2026 by rpki-client