Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File:                     otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier:          qJDg71+nMyBhSKZSmqIqOYTRyzgRUAE0FxKORtwt8yY=
Subject key identifier:   C8:88:87:0B:86:A9:CF:8E:30:B2:29:26:3F:63:86:54:90:D2:07:25
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer:       /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial:       019EC06D6FA8F19F314560B07C5A0135212D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 10:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:57 +0000
Files and hashes:         1: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
                          2: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
                          3: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
                          4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: kwV+Hsb789/4ytr5DSQUdyu54OEeTJGU3HxzrxBSKmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:6f:a8:f1:9f:31:45:60:b0:7c:5a:01:35:21:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
        Validity
            Not Before: Jun 13 10:00:57 2026 GMT
            Not After : Jun 14 10:00:57 2026 GMT
        Subject: CN=c888870b86a9cf8e30b229263f63865490d20725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ca:e6:a7:82:90:4f:92:60:4c:05:08:48:6c:
                    4e:77:9f:a9:57:81:df:56:39:77:de:9f:14:34:41:
                    93:79:e3:82:3a:e7:44:93:76:db:41:09:2b:5c:11:
                    4a:fa:6e:ce:64:31:f2:27:fe:b1:45:57:2d:9a:f5:
                    61:2f:88:bc:18:ff:5d:43:31:82:e0:84:db:32:c5:
                    59:07:29:a7:37:b1:f4:4f:5e:3b:c1:dd:76:d8:e2:
                    aa:10:8e:a5:02:20:5e:fb:05:78:7e:7b:5a:0f:77:
                    c6:cb:39:50:1b:87:43:7c:29:58:b0:e0:47:df:dd:
                    f0:c0:ea:36:97:fa:48:88:b1:22:5d:b9:9b:7e:24:
                    be:b9:c7:6f:60:51:8d:6d:a4:92:9c:cd:33:17:89:
                    52:2b:88:22:69:60:c5:d1:f9:8b:ea:5f:22:36:73:
                    46:7a:b2:6f:67:fd:5a:32:eb:72:a3:f3:b9:da:68:
                    37:9c:bc:cd:82:25:32:c2:2e:1f:ed:3b:36:d7:ea:
                    a0:73:2f:cc:27:8a:f3:ce:0c:4a:f0:e1:f9:92:a4:
                    23:20:42:d0:62:c8:13:31:e2:a6:41:e0:d8:04:62:
                    ce:f1:b5:85:16:80:4b:ca:99:ee:80:bb:04:60:91:
                    73:ef:ee:a1:64:78:9f:f9:d8:89:28:d2:45:11:43:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:88:87:0B:86:A9:CF:8E:30:B2:29:26:3F:63:86:54:90:D2:07:25
            X509v3 Authority Key Identifier:
                keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c2:92:21:e5:9e:af:1a:22:36:f0:34:ab:46:5f:fe:65:a1:
         d1:50:03:c8:6d:0f:e1:af:c7:92:7c:e3:2c:46:e0:cc:57:8e:
         4f:99:3d:2c:38:56:54:9a:ff:23:8c:cb:b1:f4:7e:de:53:f7:
         2f:86:40:3d:78:ba:2a:a8:f4:41:e3:09:40:86:3b:f3:05:8e:
         30:fe:8b:02:30:86:41:6f:99:42:d9:2b:77:f1:3a:6d:47:09:
         d6:4a:bf:40:83:71:24:2f:d0:a6:88:55:42:08:fb:bd:2e:37:
         3c:f4:64:e0:c5:9c:49:df:a0:05:0c:d5:ff:1e:14:a7:9d:af:
         fb:cb:57:b3:cc:a3:76:d2:38:b8:32:ee:07:5f:3b:93:32:a6:
         2b:6c:1f:57:a4:36:3f:27:25:be:63:fe:33:35:e1:bc:ea:f1:
         de:57:ef:51:86:89:82:f3:d9:bf:ef:79:52:78:dc:07:c0:e5:
         84:71:1e:1e:79:78:3f:1a:ee:ca:2c:7a:e1:bc:d2:71:06:40:
         d4:d8:f5:dc:36:f2:56:74:4b:ab:ac:f5:f9:5e:3e:53:05:59:
         28:78:68:77:e3:df:75:48:c0:00:03:67:30:15:11:0d:10:02:
         f8:96:25:09:90:77:a2:bd:2e:c3:2c:c1:28:7b:58:99:a9:36:
         aa:30:f4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:45 2026 by rpki-client