Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File:                     otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier:          nKIolzJeX5SyUJ9d5s9nX00mrtTDBUNhKjHC9oHqZ94=
Subject key identifier:   11:99:15:FD:36:2B:FE:BE:EA:00:B2:C8:9D:A2:CB:A9:8E:EB:60:3B
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer:       /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial:       019EC224DC7F128BA98434183E80B8CF0E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number:          07B9
Signing time:             Sat 13 Jun 2026 18:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:56 +0000
Files and hashes:         1: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (hash: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic=)
                          2: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (hash: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk=)
                          3: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (hash: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog=)
                          4: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: o6eOcwHbt3X4FbACsrpGhL63L9rU3ThDeCcSr2fsLSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:dc:7f:12:8b:a9:84:34:18:3e:80:b8:cf:0e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
        Validity
            Not Before: Jun 13 18:00:56 2026 GMT
            Not After : Jun 14 18:00:56 2026 GMT
        Subject: CN=119915fd362bfebeea00b2c89da2cba98eeb603b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:98:06:ab:62:b9:5a:36:97:ad:76:66:89:
                    c6:30:0b:04:f1:c5:e3:5c:e2:1b:06:a6:db:b2:d8:
                    60:36:c3:95:94:d4:00:03:03:80:dc:0b:4d:c3:1f:
                    6c:89:13:26:fe:46:9d:1b:5a:a6:48:b5:cb:4c:91:
                    ae:48:58:c3:14:23:b3:3d:26:d2:8f:f3:c4:32:09:
                    81:b7:f5:71:39:46:b5:58:75:56:86:df:60:c4:2d:
                    65:c0:c6:88:d5:cd:50:7f:1e:ba:38:9c:96:57:e2:
                    db:e6:f5:d6:27:87:71:54:11:d9:71:24:ab:8c:76:
                    1e:06:56:01:9c:c9:e3:92:b1:86:81:6e:eb:fd:d9:
                    4f:95:f9:18:ac:a4:ef:94:70:b9:67:62:54:6d:a3:
                    4d:b9:b9:5b:04:be:8b:0b:49:d5:ad:24:c7:2a:d1:
                    b6:da:54:66:5d:d6:7c:39:12:b4:f2:b8:5b:82:e1:
                    b3:cf:48:6f:3d:c7:9f:a9:5a:86:f0:95:a4:41:d2:
                    28:fc:f3:c4:bc:cf:58:0c:92:04:84:b8:3f:c6:49:
                    a7:83:11:46:f2:e2:00:d3:4a:7a:35:ea:79:00:0e:
                    8a:72:99:00:cd:dd:7d:f1:a8:f7:12:32:c5:07:d4:
                    e1:0e:8f:d9:14:05:4d:26:ed:af:90:56:48:5f:cc:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:15:FD:36:2B:FE:BE:EA:00:B2:C8:9D:A2:CB:A9:8E:EB:60:3B
            X509v3 Authority Key Identifier:
                keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:83:ee:b3:06:b3:7a:21:ff:6d:2d:9e:17:93:ef:fc:48:75:
         4b:90:9f:37:f5:8d:0f:fb:95:cc:1a:fb:5e:14:d8:30:5b:c3:
         47:0c:94:de:51:87:a4:ea:26:5b:d5:e8:f0:02:11:61:5c:50:
         79:29:26:f3:ae:f1:4c:ce:c2:93:41:92:aa:7c:7d:45:2c:27:
         ce:ab:25:d1:a7:27:ac:72:0d:40:21:09:36:4e:68:b1:94:f4:
         19:5e:8f:47:50:90:7e:88:5b:e4:97:65:f4:57:49:a4:d4:4e:
         54:8b:b3:5f:a4:d5:90:44:0b:f1:3f:7b:02:bb:ac:52:95:5d:
         db:a1:ab:ae:fb:2e:a1:0e:e5:58:eb:16:44:5d:22:e2:56:fc:
         64:b1:05:55:7d:b5:f5:af:f3:51:4a:e4:3c:9e:5f:a5:ae:2c:
         8a:e3:71:1a:84:75:24:90:4c:f5:e5:45:79:86:09:47:c1:e3:
         39:cb:e3:c4:d1:29:b4:d5:5d:d5:48:b0:9a:17:3d:a9:c4:63:
         22:1f:20:34:e9:7b:fd:47:10:2a:5b:d5:cb:1d:26:45:3a:e3:
         9d:01:ea:3e:ea:b5:87:f4:e8:90:5d:21:25:e7:9c:f9:42:45:
         5c:74:8b:d7:28:2e:e8:dc:e8:fe:be:41:5f:54:db:d3:16:35:
         bc:d2:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:22 2026 by rpki-client