Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File:                     OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier:          iHqzVw9Svfc7pxka7y64TxSftw8XuJTHCb6VlN0L1pQ=
Subject key identifier:   10:7D:16:F9:2C:26:B2:5F:F2:80:AC:3F:28:94:06:AA:A6:9A:19:16
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer:       /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial:       019CA86ABEC2BE131739A4E7AB66D85E66EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number:          032D
Signing time:             Sun 01 Mar 2026 08:01:33 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:33 +0000
Manifest next update:     Mon 02 Mar 2026 08:01:33 +0000
Files and hashes:         1: 9gXM3yfKHBM3QnslkthNSxhDRqc.asa (hash: k3sTrvbBG8RnZfnyvtzcpTGj5BacMFrWy8nQf2dydoU=)
                          2: Er__-mawdWtfJYo27OSwzFEKh4I.roa (hash: 3+hqNrIKDCMKOTErNC2JHDYWjmcm2NO8EQA4bB+7LrY=)
                          3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: P/VAkx48xYzTVjO3gWHu9fR7mCsZ2ftemRes0gCib/M=)
                          4: WVTec6WdlinW2NDLGRvaP7XGcrE.roa (hash: AVgu0/9AF/Q2loFPcgeDLiO4K7I+K+GfkMpa0wfObDM=)
                          5: cwK1oTMqHeWuufTdF2FowfL1ogw.asa (hash: pm/Dfj8iYXq7lxGmzXb0fegEvMVKmOFBxrnejfUXAtQ=)
                          6: kM7kkRJAnyhiR2AyP4z2W0PrTko.roa (hash: edUHC8QdgxZgr0+NMK6wBUM4b3MOnD79gO72E96zVk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:6a:be:c2:be:13:17:39:a4:e7:ab:66:d8:5e:66:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
        Validity
            Not Before: Mar  1 08:01:33 2026 GMT
            Not After : Mar  2 08:01:33 2026 GMT
        Subject: CN=107d16f92c26b25ff280ac3f289406aaa69a1916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:13:0a:8c:a9:04:e4:c8:51:43:95:35:24:ee:
                    42:16:82:a8:6d:25:6e:38:ae:49:8c:57:1c:a8:03:
                    7a:26:6f:f4:bc:80:19:c6:13:63:5e:4c:2f:65:8d:
                    47:0d:52:9a:ec:52:1d:7c:0b:24:40:25:a3:53:45:
                    7a:7a:0a:54:a5:f9:88:22:f9:ff:76:96:7b:b0:7d:
                    f8:dc:e5:3e:1c:80:68:eb:59:c1:0f:8b:d6:65:d2:
                    54:ab:34:63:07:99:0b:c6:b5:69:b5:ba:bb:de:97:
                    fc:4e:40:74:9a:4d:72:ed:da:b8:41:f1:6d:26:d0:
                    d4:cf:3b:05:e7:7e:8b:4d:0f:d2:3f:b1:73:6f:72:
                    fb:0e:82:1e:95:c8:f2:d8:fd:23:c1:44:8c:39:c6:
                    fd:ba:07:36:68:33:e3:cb:3d:b8:b9:d3:41:55:75:
                    68:7f:3a:67:62:9b:f3:36:50:df:f4:14:ab:ca:98:
                    1d:39:cd:3d:d7:e3:0d:09:57:44:ed:c9:69:07:09:
                    20:f2:f8:f6:d4:08:bd:0c:8c:ee:4b:a1:0c:77:bf:
                    e4:f1:4a:7a:3d:09:76:db:f3:a6:f3:21:26:98:17:
                    cb:3a:a6:ca:f1:4e:fd:55:bd:e8:0d:46:0f:a2:5b:
                    d9:13:46:7b:b5:4d:b1:50:8c:ce:f2:f7:94:82:23:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7D:16:F9:2C:26:B2:5F:F2:80:AC:3F:28:94:06:AA:A6:9A:19:16
            X509v3 Authority Key Identifier:
                keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bc:5a:fe:7f:bc:3a:33:77:4b:01:70:85:3e:d9:fd:a0:9d:
         f4:51:72:3a:79:05:f5:97:00:f9:e9:3d:0a:52:99:7f:17:75:
         71:d0:d2:a8:a0:3f:c2:df:ca:06:4b:d8:86:1a:14:e5:50:48:
         af:d7:05:c0:6e:f7:62:14:9a:44:b8:d5:5f:0c:2d:9b:fe:fc:
         7f:5a:f9:58:12:85:8e:4c:36:43:29:15:ef:5b:a9:d8:28:fd:
         07:f3:70:bc:e6:7b:e0:6d:8d:90:d4:bd:9c:e7:48:39:b8:2d:
         91:a4:b4:25:8e:ca:a4:77:20:45:db:c4:64:24:c9:53:36:a7:
         55:e7:2a:5c:ec:2a:cf:f2:5d:f1:fc:11:aa:14:dc:fc:dd:54:
         f8:2c:0f:48:98:e5:98:3f:57:20:9e:55:3c:4b:ab:3a:ee:9d:
         8b:f7:a2:ac:ba:a7:9a:ad:7e:0a:82:97:5b:bb:67:57:c8:02:
         01:ab:84:6a:cf:c9:82:47:87:1f:f4:d1:d3:5e:2e:91:fd:31:
         81:86:50:2c:29:db:6b:19:14:63:a8:2b:e4:2c:06:8b:26:f6:
         40:d4:fd:9b:d6:ec:95:e9:6c:04:0a:8c:2c:47:d5:44:34:48:
         9e:b1:ad:0b:c5:51:99:f0:42:7c:7c:98:ff:60:94:87:61:03:
         a6:32:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:48 2026 by rpki-client