Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File:                     RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier:          DxCcpp5uOk2fPz4FsSZY36EKnXivvTe3fNecUxbziuw=
Subject key identifier:   0C:97:28:54:64:5C:4B:2D:DC:85:B7:6F:5D:B8:A5:A7:18:E3:C9:51
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer:       /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial:       019D9A74D40E3BB8CDA63F7964AC320724B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number:          0BDF
Signing time:             Fri 17 Apr 2026 08:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:40 +0000
Files and hashes:         1: 8GdtZSFoX1vaGkCpGmBlFouEiVo.roa (hash: O6P4xNLVg+cJ7e2yv3WOenrZOTPYwO68uBRfw1gd8JE=)
                          2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: C53WvVoCrxduhekMs6+odsGrlazpMH2TPBqRT3+20tw=)
                          3: Ul4e9Mh9DtQbW0bFXtJWj8pCCUg.roa (hash: QgVe3zyOWZmLsqhPjT0zFXeKP6/Au91Grh/gUobRiJU=)
                          4: p--yuSN0LP1aF8MInaw0a0h4bcM.roa (hash: sDylj029lXRNRGXbiEohj568oZj6iTxdiqBb3mUem68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:d4:0e:3b:b8:cd:a6:3f:79:64:ac:32:07:24:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
        Validity
            Not Before: Apr 17 08:00:40 2026 GMT
            Not After : Apr 18 08:00:40 2026 GMT
        Subject: CN=0c972854645c4b2ddc85b76f5db8a5a718e3c951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:ec:f0:48:41:a0:5d:46:13:77:1b:a6:fa:
                    a9:e2:75:36:59:b5:30:5d:be:74:1e:34:74:45:7f:
                    9c:29:08:97:ad:7b:6d:d8:01:77:fb:c9:3c:dc:b8:
                    88:b7:0f:ca:3f:ae:03:c6:7c:b6:5f:bb:64:57:d0:
                    97:da:2c:3a:81:f3:8b:3e:b8:f9:48:90:28:bd:57:
                    c3:ea:3e:99:4c:00:d7:c6:cf:0a:57:72:53:e0:50:
                    5e:80:7b:1e:af:79:de:f0:36:4c:df:5b:08:e9:a5:
                    d4:09:4d:54:8b:cd:14:ce:4c:dc:50:b6:b5:b8:22:
                    0e:ac:8f:f5:6e:ed:e0:65:0e:39:82:82:97:da:01:
                    fd:33:1a:3f:45:7d:26:fe:65:ab:d1:5a:d7:ec:b8:
                    70:8c:cb:0b:f0:39:8d:1b:12:7b:cb:96:46:af:bd:
                    e2:43:9e:f7:f7:cb:91:96:ea:be:e1:17:d9:d7:c1:
                    f9:23:90:93:e1:8b:4a:cd:ca:06:11:3e:a7:ff:de:
                    e9:37:df:34:0c:ea:d1:ea:de:e9:cc:17:db:35:b4:
                    90:84:de:6e:1e:fb:5a:b1:fa:b5:6b:ee:c2:89:3f:
                    67:09:33:86:38:bc:62:a1:ba:18:b1:14:4c:3f:0b:
                    9c:88:43:22:42:14:56:db:b8:f4:e7:7a:cd:a2:0d:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:97:28:54:64:5C:4B:2D:DC:85:B7:6F:5D:B8:A5:A7:18:E3:C9:51
            X509v3 Authority Key Identifier:
                keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:13:28:a9:34:d6:b2:90:0e:05:b0:33:39:35:ce:4e:82:
         9c:a6:0c:33:0c:87:dc:ee:13:77:62:b0:09:d7:97:54:5c:8e:
         73:9f:e7:cc:d8:3f:45:2d:79:4a:1e:3e:2f:6b:1b:62:2d:c4:
         75:17:f4:6b:08:28:7b:14:ec:9d:5b:cd:2f:e6:a2:f4:0a:89:
         af:e0:a5:9c:1e:e1:2d:74:c4:ce:17:be:85:7f:d5:27:d8:65:
         2e:51:e1:56:4b:f2:32:86:df:ec:c3:8e:38:2a:c6:4c:70:ff:
         6d:dc:d6:39:d8:21:07:29:11:7b:b0:d2:46:df:e0:68:fd:b5:
         b7:0f:a7:bb:e3:25:a7:6f:d6:43:45:32:92:ad:17:8b:93:88:
         a9:10:c1:24:ec:bf:39:02:2a:d7:81:58:a9:5d:fb:0e:f1:3d:
         20:08:2b:9b:f1:6d:64:a0:4d:d7:73:b5:9b:bf:6e:17:3b:ac:
         65:c3:93:e4:77:69:20:6d:80:db:2c:a5:94:8d:7f:71:cf:1c:
         df:75:31:8f:49:d3:2b:02:0e:14:9e:3b:44:68:9a:a5:a4:0c:
         fd:eb:82:d9:24:f2:a5:a5:fe:6e:6b:da:ea:ca:0b:ad:db:a7:
         b9:8d:25:61:46:96:cf:0a:1b:2f:f6:dd:e9:4d:f7:93:6f:18:
         cf:fa:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:53 2026 by rpki-client