Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File:                     otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier:          JU1WSMvujkJwFX1XYg9OefNcrawGoohL28QMEj5SAkE=
Subject key identifier:   FC:B1:D4:A3:4E:7F:F2:03:0B:58:59:A8:4E:26:DC:D2:C1:97:CB:D9
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer:       /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial:       019FA93E6E7909EC7F8C1A6DF87E1CC92C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 15:01:08 +0000
Manifest this update:     Tue 28 Jul 2026 15:01:08 +0000
Manifest next update:     Wed 29 Jul 2026 15:01:08 +0000
Files and hashes:         1: APlmnKHZODCNSunvzWMmlebxZbo.roa (hash: QAoewBI2F8XDmieB1npAXSt/XAawfhTLWLPzLSSKEr8=)
                          2: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
                          3: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
                          4: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
                          5: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: 9ErKvLrwTFKs6sb/zg7bP5VO+pQ+7usFszrY5Ipz1MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:6e:79:09:ec:7f:8c:1a:6d:f8:7e:1c:c9:2c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
        Validity
            Not Before: Jul 28 15:01:08 2026 GMT
            Not After : Jul 29 15:01:08 2026 GMT
        Subject: CN=fcb1d4a34e7ff2030b5859a84e26dcd2c197cbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:31:78:23:8c:16:c3:b5:ea:b3:bc:72:c1:
                    6c:8d:c8:e8:e8:9b:78:7f:26:3b:7a:c9:12:29:e7:
                    62:93:1c:39:e0:19:a3:22:91:8d:89:ce:e5:df:1b:
                    71:71:03:30:52:b1:78:58:4d:52:4a:7b:f4:f0:c1:
                    81:d9:34:cb:bd:26:44:5c:f5:53:d4:78:53:96:66:
                    de:1d:1e:57:2b:c0:5d:10:4f:5c:16:a8:12:af:3f:
                    94:1b:80:62:2c:6a:ca:f4:a0:bc:cb:74:38:26:b2:
                    d8:a0:dd:98:8b:6f:6b:40:25:05:4c:ae:e1:be:0d:
                    9a:ec:30:9f:84:b6:62:40:1d:63:af:dc:f4:6a:29:
                    08:3b:12:5a:12:3f:47:12:16:ee:2e:da:b5:b9:5f:
                    2f:15:7e:4e:e2:3c:4c:9f:8a:6b:f0:7b:e0:7d:ea:
                    c3:fa:b5:9c:75:f7:68:57:9d:c9:bd:89:ed:39:b5:
                    73:b0:e0:00:33:d6:52:16:34:f1:74:89:60:1f:d7:
                    38:7b:eb:68:9a:e0:d2:11:d4:cf:96:aa:4f:22:db:
                    26:03:23:2f:a5:a3:5a:9b:fa:b8:9e:c2:4f:ed:c7:
                    4e:0c:eb:04:76:0b:bb:f0:ba:65:c7:4c:8b:05:0c:
                    0d:85:4b:1d:32:21:e6:67:75:55:d1:43:fd:f9:77:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B1:D4:A3:4E:7F:F2:03:0B:58:59:A8:4E:26:DC:D2:C1:97:CB:D9
            X509v3 Authority Key Identifier:
                keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1d:89:f1:d4:7e:aa:3e:34:6d:d2:86:d4:62:26:ee:fa:ad:
         01:69:40:94:55:51:11:0f:25:69:c4:81:fe:bb:3e:61:27:b2:
         46:34:ff:f1:2c:63:76:ba:56:cf:3f:23:68:b5:a6:3f:08:77:
         08:fd:7d:24:2b:df:a7:6f:52:44:e8:87:78:d4:62:84:c0:a3:
         61:24:4f:3f:a4:73:3d:0d:74:96:8a:1a:50:5c:70:ec:7f:a4:
         19:9f:25:34:80:8f:72:32:f8:e3:88:57:2b:de:e9:0e:97:aa:
         97:19:b5:36:fe:e7:0f:ab:e4:2a:ab:a3:34:71:19:5e:e5:be:
         c9:c5:b3:11:bf:97:6d:35:7b:4b:37:6c:7a:65:4f:c6:57:8a:
         fe:ae:d3:dd:40:83:fd:6d:e5:10:62:c9:ca:71:d2:07:5b:5c:
         3d:b4:7a:7f:b2:12:24:59:b4:16:b9:54:6d:7d:d7:77:2e:1c:
         37:51:47:62:b6:89:de:8f:7b:c9:56:20:23:0f:c5:a9:a4:05:
         45:9c:7a:db:9d:cd:58:b5:b9:d0:50:61:75:c1:4e:93:7e:6d:
         d1:fd:29:74:32:56:21:41:b0:0f:08:e8:3e:03:bf:6f:42:57:
         7a:98:58:d8:b2:44:7f:37:ae:c6:6b:12:8a:3b:71:e6:e3:ba:
         03:1c:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:57 2026 by rpki-client