Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File:                     1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier:          Gu014Bz5LCgcLX9mbtPoWQk7lVu4lARjqbdYqfqAlSs=
Subject key identifier:   1E:C7:11:CD:E5:18:BA:3A:4F:50:37:3D:00:D5:7C:0C:D5:12:C6:13
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer:       /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial:       019EBD6C1D7E7FB28F5EA16EC44E8F840DCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number:          0F58
Signing time:             Fri 12 Jun 2026 20:00:39 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:39 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:39 +0000
Files and hashes:         1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: TgDnRto5L8Dms+acrj37QMltpPj/E/FtiW2Ydz1Gybc=)
                          2: TbY4MLo9QmUSVk5hp07D_lX76Hc.roa (hash: GGTbtNI+aaL18L5FZQerRlg9rpMiVGf3/pLxdG5oxu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:1d:7e:7f:b2:8f:5e:a1:6e:c4:4e:8f:84:0d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
        Validity
            Not Before: Jun 12 20:00:39 2026 GMT
            Not After : Jun 13 20:00:39 2026 GMT
        Subject: CN=1ec711cde518ba3a4f50373d00d57c0cd512c613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:18:1c:00:33:14:24:18:aa:4e:50:57:6e:
                    8c:ec:a2:53:d5:08:03:00:21:a6:f6:df:12:0e:c5:
                    42:7c:72:c3:1e:87:78:9d:9b:9e:6a:85:67:ac:96:
                    09:88:ff:75:31:7c:bb:0d:b9:3f:16:a5:52:6f:ac:
                    eb:e4:e4:67:35:10:54:88:5c:f8:4b:58:4b:05:3f:
                    c3:18:7a:f6:c7:63:5e:c1:18:20:ac:b7:1b:55:b4:
                    02:d1:63:32:d3:5a:11:20:78:74:03:0c:d2:fd:32:
                    44:75:59:72:61:37:01:ea:09:81:57:5e:49:06:7e:
                    db:c8:68:aa:5e:22:24:fa:9e:62:1c:93:80:7e:ae:
                    d4:a7:68:5b:cc:6a:a4:ec:0b:8d:40:39:e0:b4:97:
                    3d:8b:8e:52:8c:5e:72:5e:85:6b:cb:27:a8:26:05:
                    ef:81:fd:b0:c2:da:eb:b3:51:04:94:41:78:63:a7:
                    2c:4c:84:64:af:04:c7:28:06:3b:3d:4c:23:d6:94:
                    0e:24:91:88:24:75:ee:35:b8:16:eb:b1:77:4e:fb:
                    39:d6:65:84:36:d1:06:1a:e9:a1:0d:7a:d2:ed:f1:
                    5d:46:44:b4:a5:96:22:61:24:b9:a3:4d:07:7e:f4:
                    25:b6:2a:f9:56:08:74:92:73:51:96:ca:18:4c:3f:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C7:11:CD:E5:18:BA:3A:4F:50:37:3D:00:D5:7C:0C:D5:12:C6:13
            X509v3 Authority Key Identifier:
                keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:a7:7b:64:a5:14:e1:f7:80:b5:bc:7d:65:2a:7f:16:0c:
         88:e9:85:60:53:68:00:de:05:5d:46:a7:43:33:56:06:06:f6:
         74:f0:d4:8f:90:1f:2e:8e:ef:d4:8f:00:34:71:22:d2:12:f9:
         1f:db:f4:4e:f6:f6:6c:25:2b:aa:37:d2:20:04:d6:8d:65:3c:
         cb:d8:2e:d6:f4:0c:cb:ae:11:bb:d2:19:e0:a8:97:8a:46:e1:
         23:d9:f9:85:75:4a:3a:f6:5c:8e:78:06:32:c1:a5:41:ea:8a:
         b7:9d:78:a1:f4:4e:98:5a:2c:91:0b:ee:f1:11:83:3b:86:87:
         bb:8a:59:62:66:04:56:53:1d:7a:53:24:f1:0c:ce:d7:47:29:
         68:0b:86:63:00:54:25:29:f5:d0:39:5c:59:fc:fb:53:2a:d1:
         1b:73:7d:5e:cc:f5:e0:cc:6c:3c:6f:a6:99:fe:fb:4f:90:5d:
         aa:43:a4:e4:38:76:8c:36:ff:ae:94:e8:42:4e:5a:c0:34:b7:
         a0:a7:49:0a:b6:dd:9f:36:29:57:7b:c6:6a:9c:d2:1a:d3:1d:
         75:dc:d4:f8:19:77:23:69:24:d9:b9:0b:a7:56:4c:78:f0:a2:
         0b:36:c8:6f:8f:ef:50:54:11:46:78:8f:c6:43:d9:9d:2a:39:
         7f:b2:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:45:41 2026 by rpki-client