Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File:                     otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier:          LiPMUiBqJsraj05wuq4IzJP544brsP2EuWV19D1ZQpk=
Subject key identifier:   F3:1E:E1:09:7E:7B:C8:76:74:1A:0D:AC:B6:17:C5:1C:D3:55:40:AE
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer:       /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial:       019CAB6AF135F362DE1BF2D03359D5504A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 22:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:38 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:38 +0000
Files and hashes:         1: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
                          2: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
                          3: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
                          4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: fGpLMNZPqupzmvRKVtEBe1zp93cRzeLD9Tp48ZSjQhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:f1:35:f3:62:de:1b:f2:d0:33:59:d5:50:4a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
        Validity
            Not Before: Mar  1 22:00:38 2026 GMT
            Not After : Mar  2 22:00:38 2026 GMT
        Subject: CN=f31ee1097e7bc876741a0dacb617c51cd35540ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:d7:ce:a4:d2:40:0b:47:d8:28:bc:d8:eb:
                    3a:18:11:af:31:21:7d:31:05:72:5a:31:a9:8b:24:
                    ed:6b:c6:c5:d5:94:83:9d:be:70:8b:ed:02:f1:39:
                    f0:dc:18:44:6e:f5:38:1d:1b:fc:45:1b:85:0c:4e:
                    78:83:ac:36:41:ee:81:fb:43:4c:4d:a9:75:60:e2:
                    93:34:4f:0f:00:ba:b8:7c:05:26:cf:bd:ef:d3:72:
                    a5:0a:d4:c0:51:e8:5b:3b:c1:11:b2:02:58:47:36:
                    1c:a9:4d:07:b1:23:f8:9d:75:66:54:41:c1:a5:d7:
                    33:cf:51:bd:80:a6:88:fb:b3:43:66:b5:54:b5:71:
                    16:3f:0b:1d:85:db:69:63:b5:81:e8:53:c8:e3:47:
                    65:e8:d0:0e:b2:8a:ce:70:c5:33:f9:be:30:01:7f:
                    49:5a:3c:82:3a:36:f4:f6:f1:67:59:6d:82:ee:44:
                    85:56:0c:6d:70:cd:51:4c:33:8b:60:5f:2f:f9:37:
                    ac:85:c2:3a:ba:a4:32:ed:d9:e1:f9:df:d1:31:a8:
                    aa:14:a8:de:36:69:27:98:c7:37:24:8f:66:da:2b:
                    bf:2c:91:cb:40:60:7c:a7:55:e3:8f:c1:d5:d5:22:
                    4c:40:f0:31:69:b0:09:ce:94:a0:14:27:d9:1c:cb:
                    f6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1E:E1:09:7E:7B:C8:76:74:1A:0D:AC:B6:17:C5:1C:D3:55:40:AE
            X509v3 Authority Key Identifier:
                keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:12:75:4c:6f:75:f2:ca:02:99:d2:3b:c4:a1:0c:a3:72:
         40:14:13:3a:94:f8:23:32:37:76:ee:cd:eb:02:63:32:30:e5:
         06:ea:8c:cc:5b:b2:c2:be:5c:b7:10:b8:91:8a:7d:63:ab:1e:
         30:68:41:e0:9c:46:a2:6e:6b:b0:62:16:57:0a:82:5c:91:e0:
         3b:16:45:a3:4f:73:58:92:1f:05:60:8a:2a:6f:2a:e2:c6:ee:
         92:09:ec:17:f4:91:9b:df:c9:86:78:a5:50:22:fa:5e:53:e2:
         06:cc:52:41:e7:7e:02:c4:cd:4c:ab:81:00:c1:c6:2a:e5:d4:
         ad:1c:62:56:39:6c:7f:00:0e:65:ed:07:83:a7:63:20:b5:35:
         d7:0b:ee:2f:cb:3f:be:8a:f4:1f:ad:25:69:36:1b:27:90:fa:
         4b:85:3f:c9:c6:97:f2:00:8b:79:21:a5:ba:a9:fa:51:1e:44:
         f9:c3:c1:85:91:00:45:cb:d6:73:d7:55:19:60:9e:0b:9a:a9:
         80:09:78:43:bd:90:1a:4c:87:08:87:b3:9c:82:c9:ad:1e:2d:
         63:50:43:e6:80:3a:03:07:63:85:76:ad:e0:1f:a0:50:80:62:
         e2:d1:a8:00:86:ef:d0:22:a0:12:81:80:5b:d6:94:d7:b2:57:
         9d:46:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:56 2026 by rpki-client