Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
File:                     Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json)
Hash identifier:          JQQKlIysI0ibcmY4nZpvg/hq/J+r+2edUhe2KmX7M7Y=
Subject key identifier:   78:ED:ED:57:0B:0E:1D:CF:67:EE:BF:4C:45:95:F8:6F:82:10:57:BD
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Certificate issuer:       /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial:       019CB091FA2C68736D59DB0FBF7547C4AA12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
Manifest number:          0210
Signing time:             Mon 02 Mar 2026 22:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 22:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 22:01:22 +0000
Files and hashes:         1: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: aMda09EV0b6yYL8S9NcEXyNnibtwY+6jy8X/8Ky0F0I=)
                          2: WEfg623at549gjZw64RcO_APHMQ.roa (hash: FO7uHOTKAm/yntYjpVC9E+eNIvpI6nRmgjdhZ1LH7Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:91:fa:2c:68:73:6d:59:db:0f:bf:75:47:c4:aa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
        Validity
            Not Before: Mar  2 22:01:22 2026 GMT
            Not After : Mar  3 22:01:22 2026 GMT
        Subject: CN=78eded570b0e1dcf67eebf4c4595f86f821057bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:90:72:f5:a7:fe:15:d7:bd:d9:f2:c7:fe:
                    0b:36:c8:c8:98:86:0a:59:77:4e:fa:b1:b6:58:8d:
                    0f:a2:fd:77:49:bf:e2:53:90:b8:ef:61:ac:81:9f:
                    56:1b:01:82:a3:43:cd:d0:7f:5c:52:b7:10:e0:13:
                    52:17:94:dc:81:f2:93:cc:28:81:00:f1:66:d7:2f:
                    2d:1a:e7:69:11:c3:e6:2d:f0:3c:96:e7:49:67:9c:
                    84:86:63:9e:11:cc:9b:5b:d9:e9:86:cd:c7:09:62:
                    a5:4c:7b:7e:44:60:44:84:69:41:00:11:ae:78:0e:
                    05:55:17:82:76:d4:c0:8b:6f:e1:a7:61:4e:ed:21:
                    ff:fd:e8:69:05:d1:bf:9f:2f:f4:d9:87:5e:14:bc:
                    a4:5d:2d:b0:7a:17:38:d9:21:e3:c9:52:69:ab:b9:
                    40:e3:52:b4:81:e2:c1:cd:42:77:89:19:da:3c:99:
                    41:70:16:6d:af:0b:d4:29:30:99:84:97:23:97:e2:
                    e0:b8:40:b4:20:98:36:8e:7b:d2:f5:e4:fa:71:c4:
                    ef:be:b4:35:6c:ef:e9:91:5f:18:74:c5:75:f8:87:
                    3f:45:ca:02:26:f0:68:75:ed:79:2f:bb:41:83:58:
                    b7:f5:bc:69:4d:86:2f:15:47:d6:32:87:7e:5e:82:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:ED:ED:57:0B:0E:1D:CF:67:EE:BF:4C:45:95:F8:6F:82:10:57:BD
            X509v3 Authority Key Identifier:
                keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:a5:ee:1f:aa:df:3b:92:dc:94:97:7e:1f:05:89:d1:9a:
         56:25:0a:be:62:e0:98:5c:1b:33:22:8e:6a:d6:6a:f9:88:ef:
         5e:e8:10:c8:35:a8:db:b5:34:04:b2:d7:17:90:6f:ca:08:bc:
         f6:69:33:fb:25:1f:55:2a:3f:45:c3:04:60:ec:82:51:cb:f0:
         8e:1b:b8:44:36:6e:06:44:90:6d:2d:9d:86:c7:6e:09:18:26:
         b5:0f:c2:e4:aa:75:e9:bd:a6:ad:35:f6:21:b1:82:32:c6:96:
         4b:69:fd:b3:fb:2e:a4:6c:9a:cf:20:f2:70:b2:5e:64:a3:7f:
         d3:32:29:55:79:49:5f:19:b5:78:b5:0d:f9:4d:9d:cc:ae:d9:
         60:43:35:6b:a1:b6:da:ef:8b:bb:ba:09:de:51:8b:7c:41:6d:
         9e:c1:ff:94:0c:cc:78:74:57:3a:81:6a:b3:c6:49:ca:8d:73:
         cf:e4:5d:83:65:3e:6c:e4:b9:9c:32:44:5f:e1:ca:1c:8a:94:
         cf:19:f0:2c:91:8a:b1:58:90:01:38:9b:ac:4f:9b:b0:63:4c:
         b4:43:33:fc:41:cc:4a:23:e5:07:4e:40:3d:11:d3:7a:41:26:
         84:12:29:34:2a:54:54:ef:5d:8b:cd:e0:30:f6:c2:9c:db:df:
         a1:1d:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:03:59 2026 by rpki-client