Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File:                     OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier:          3PbXWCIzkqZUpZffX6ITFxp94zvhLCog9BykrvaKK/k=
Subject key identifier:   B2:2A:6C:D0:B0:5A:2A:DB:9C:80:6B:6E:1A:CF:A3:08:D8:A9:A7:33
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer:       /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial:       019CAA5929F1975372079B92F0C2433F6995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number:          032E
Signing time:             Sun 01 Mar 2026 17:01:35 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:35 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:35 +0000
Files and hashes:         1: 9gXM3yfKHBM3QnslkthNSxhDRqc.asa (hash: k3sTrvbBG8RnZfnyvtzcpTGj5BacMFrWy8nQf2dydoU=)
                          2: Er__-mawdWtfJYo27OSwzFEKh4I.roa (hash: 3+hqNrIKDCMKOTErNC2JHDYWjmcm2NO8EQA4bB+7LrY=)
                          3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: b2hp3R/oZDXwwAtRyqKHSUjWIB/64o+P4SiGOYyG0g4=)
                          4: WVTec6WdlinW2NDLGRvaP7XGcrE.roa (hash: AVgu0/9AF/Q2loFPcgeDLiO4K7I+K+GfkMpa0wfObDM=)
                          5: cwK1oTMqHeWuufTdF2FowfL1ogw.asa (hash: pm/Dfj8iYXq7lxGmzXb0fegEvMVKmOFBxrnejfUXAtQ=)
                          6: kM7kkRJAnyhiR2AyP4z2W0PrTko.roa (hash: edUHC8QdgxZgr0+NMK6wBUM4b3MOnD79gO72E96zVk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:29:f1:97:53:72:07:9b:92:f0:c2:43:3f:69:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
        Validity
            Not Before: Mar  1 17:01:35 2026 GMT
            Not After : Mar  2 17:01:35 2026 GMT
        Subject: CN=b22a6cd0b05a2adb9c806b6e1acfa308d8a9a733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:04:96:c4:cf:07:0d:8a:ce:37:e9:99:c6:
                    44:ef:a9:21:ab:3f:16:7f:c3:e0:11:ae:6b:41:85:
                    79:01:14:af:00:b1:85:3a:a1:60:a0:f6:07:6c:c3:
                    ad:1c:92:91:34:43:04:02:06:0d:c6:6b:cd:f0:da:
                    49:6b:8f:16:b1:63:90:bb:ef:3a:c6:02:28:bf:73:
                    9c:c1:46:24:dd:0d:46:67:d2:41:69:63:b1:73:82:
                    c3:0a:c0:9b:af:1f:ad:c2:e5:a1:d3:c8:6f:73:c8:
                    7d:c7:d6:5c:d2:77:4f:da:90:79:8d:79:53:8e:07:
                    2f:7e:b6:1d:f9:78:c5:ae:7b:4f:d9:4b:ef:2b:b8:
                    67:4e:0b:65:a8:db:06:57:22:f7:77:b0:81:b7:a3:
                    c7:6b:c8:4b:2a:e4:2e:f1:f2:ca:6a:2f:6c:d0:f5:
                    33:a0:77:4f:a2:a9:8c:92:84:b8:c1:0f:fc:67:67:
                    5c:eb:33:cd:45:e1:59:73:5e:bc:7b:e4:40:44:da:
                    3f:80:db:0f:c5:3e:a7:37:87:01:5a:ca:86:2e:ca:
                    76:1a:2f:ed:86:50:60:9f:11:6e:ef:ca:24:8f:86:
                    d2:16:86:67:4a:d4:8a:a6:b5:6e:84:7a:75:60:80:
                    ae:8e:11:0b:db:e0:66:16:dd:e8:67:db:f0:3b:e6:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2A:6C:D0:B0:5A:2A:DB:9C:80:6B:6E:1A:CF:A3:08:D8:A9:A7:33
            X509v3 Authority Key Identifier:
                keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:55:3b:23:65:ea:c1:4b:54:1d:c8:a6:6a:04:9e:42:44:7f:
         47:19:86:4a:92:68:31:d1:a6:4f:87:78:fe:e2:78:f9:5c:24:
         78:a6:53:e0:b6:50:3a:71:e3:c4:4b:62:75:76:0d:5d:1d:c2:
         6f:59:ee:a3:38:13:3b:55:87:e5:bd:db:38:04:fb:a5:61:88:
         80:72:d2:74:8d:eb:d2:cc:62:3d:e9:f4:22:b4:3a:b6:68:b7:
         39:31:dd:c3:ef:ec:51:69:1e:7e:0e:1a:cc:29:9a:a6:f1:e0:
         d7:1a:ed:df:1d:48:51:37:f5:15:78:29:33:85:71:d0:b0:29:
         7e:2e:45:03:c7:c2:30:48:5d:1d:db:2b:11:ef:85:94:d0:06:
         1c:75:53:7f:55:bb:0e:0a:a0:3c:01:ea:9b:0b:26:fd:fb:57:
         9c:f6:1f:b3:2c:e1:7e:8a:e9:e5:2a:f6:1f:2b:a7:ea:b6:93:
         17:7a:4b:64:7c:af:79:bc:ea:78:72:7b:55:a6:79:c4:82:40:
         e6:3f:a7:3a:d5:11:9c:4f:5d:f9:33:87:a4:24:dd:34:e1:5a:
         35:de:2b:33:e7:89:43:38:b8:45:82:3d:3f:47:76:e3:8f:a1:
         58:f1:58:06:83:86:ae:b0:e4:ff:bd:d5:92:48:d6:1d:5a:45:
         46:70:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:00 2026 by rpki-client