Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
File:                     Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json)
Hash identifier:          l56X0Kh3IGnf8Y+IZrhZ8SmyAennUHaE4MWbgbJJW5c=
Subject key identifier:   73:0E:43:96:B6:73:25:DC:1F:5E:63:A0:79:FF:52:BE:C1:8F:72:0D
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Certificate issuer:       /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial:       019D9A3EB61F725933A7EC23F5C93EC59F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
Manifest number:          0289
Signing time:             Fri 17 Apr 2026 07:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:34 +0000
Files and hashes:         1: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: h88Tu3+it7f6zRKDtMN0RtzmLyuntRcXl7EL5nEx6uc=)
                          2: WEfg623at549gjZw64RcO_APHMQ.roa (hash: FO7uHOTKAm/yntYjpVC9E+eNIvpI6nRmgjdhZ1LH7Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:b6:1f:72:59:33:a7:ec:23:f5:c9:3e:c5:9f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
        Validity
            Not Before: Apr 17 07:01:34 2026 GMT
            Not After : Apr 18 07:01:34 2026 GMT
        Subject: CN=730e4396b67325dc1f5e63a079ff52bec18f720d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:3e:13:a1:dc:0b:5d:38:9b:d5:13:ac:1c:
                    dd:94:7f:e9:bf:19:99:e7:79:b4:df:6d:c4:54:84:
                    44:5d:5e:59:b1:c3:d2:11:08:55:f4:a9:3e:7e:b5:
                    89:10:70:98:e9:84:40:27:ca:23:51:8b:70:fe:e9:
                    74:90:28:17:2d:42:cf:2b:e0:7e:c0:52:41:56:2c:
                    15:43:f1:de:95:c3:82:45:3e:9d:fa:69:e8:4c:53:
                    d5:00:41:c3:9c:52:05:65:85:d5:74:fc:15:19:dd:
                    08:a8:5c:4e:82:31:ec:33:e8:96:c4:27:e9:1d:4f:
                    91:86:6f:9b:d1:04:74:c0:e7:93:6b:03:25:4c:e4:
                    1c:31:17:e7:9b:f5:56:19:76:19:42:62:62:e3:4f:
                    3d:5b:d6:ef:2d:cf:56:b2:e6:65:8e:83:98:af:49:
                    b0:3e:16:d3:43:4a:7c:88:ef:ce:d8:f2:57:88:83:
                    10:d3:31:c3:09:ca:4e:1d:41:ce:c0:9d:de:36:d1:
                    d9:ef:bb:d5:52:cd:4b:7f:28:f6:fc:d7:ed:da:b9:
                    85:d9:25:4b:74:60:9e:d8:80:ae:29:85:c9:fe:e8:
                    eb:5d:ef:d5:43:78:1d:0f:8b:60:6c:b5:3a:35:30:
                    0f:83:42:6f:f1:c4:29:8d:ef:5f:77:b5:1c:77:94:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0E:43:96:B6:73:25:DC:1F:5E:63:A0:79:FF:52:BE:C1:8F:72:0D
            X509v3 Authority Key Identifier:
                keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:0c:c5:a6:58:05:76:7f:32:49:8f:a1:86:30:f3:9d:03:
         9c:2f:f6:8d:1e:9c:46:f1:10:d0:3b:03:c8:b9:d4:30:c8:82:
         54:15:63:32:22:04:51:d9:19:f9:60:79:03:a0:46:7d:2f:80:
         df:01:f6:4d:ba:2b:4a:36:5d:9d:b3:e2:91:31:73:41:37:35:
         a7:54:76:7b:4d:3e:8b:85:73:d4:49:8f:71:0c:c7:f4:d0:ec:
         ee:c2:2a:96:10:2a:99:bc:1a:13:e4:38:cb:1d:85:9a:fd:25:
         47:22:c1:e1:35:7e:77:3b:59:35:91:e7:86:a1:17:31:c7:18:
         b0:f1:66:80:15:b5:2a:7c:b4:dd:a0:70:e4:50:26:d6:06:68:
         87:47:d5:1d:e0:ba:03:c8:c2:d8:a7:b7:32:d1:91:7a:dc:0a:
         40:3c:9b:72:d1:59:75:bb:c8:bc:e2:1f:9d:80:37:2f:27:6a:
         66:a3:9f:b5:2a:84:76:aa:d1:18:2d:30:00:df:4d:2d:b9:3a:
         9c:1e:5b:74:bf:b5:43:8e:f4:4f:54:86:1b:e3:de:bf:86:6b:
         99:ad:d8:c3:54:90:24:d7:ef:29:26:8f:5c:37:d0:f2:8d:c0:
         ed:db:97:ad:38:c5:7a:86:61:b3:18:f2:15:e1:50:51:57:d3:
         c1:69:be:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:19 2026 by rpki-client