Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File:                     OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier:          OUtbSlGlWj2AhxRJjAVibaYpDSw5YQof+RjQ9NW7w4c=
Subject key identifier:   4C:17:86:C6:DA:D3:31:CF:3B:04:E7:BA:DF:84:96:9E:DB:D0:9D:85
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer:       /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial:       019EC3A555F772E60BF555B32625018824E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number:          18F0
Signing time:             Sun 14 Jun 2026 01:00:52 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:52 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:52 +0000
Files and hashes:         1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: c+WZ3gDcut/epHxwHx6OkMpslOP6Q6mLYpb6CiQUxGI=)
                          2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:55:f7:72:e6:0b:f5:55:b3:26:25:01:88:24:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
        Validity
            Not Before: Jun 14 01:00:52 2026 GMT
            Not After : Jun 15 01:00:52 2026 GMT
        Subject: CN=4c1786c6dad331cf3b04e7badf84969edbd09d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:35:1e:04:30:73:88:22:d1:b3:9e:d6:1b:
                    b0:15:a9:b5:d7:3b:19:96:fe:b3:7c:25:5a:6e:0c:
                    e1:cf:fd:d7:7f:c5:05:dd:bb:ec:4a:1a:12:31:39:
                    55:43:99:c2:10:19:5c:3c:a5:37:bd:69:14:ea:10:
                    7c:29:bf:f2:d5:c1:53:54:bd:20:eb:06:e4:6b:c1:
                    90:07:34:ec:05:00:d8:d7:3b:48:7c:71:ed:c7:c4:
                    d3:0a:2f:2b:a7:45:f2:4a:97:fb:33:f9:20:46:36:
                    eb:51:68:66:40:28:09:3d:3d:12:9d:1e:2d:14:45:
                    da:89:53:47:ba:29:52:ef:e8:c3:11:b4:d9:7c:60:
                    3a:f1:d1:c0:e0:11:57:9d:ba:59:4c:7b:86:91:7a:
                    91:ba:92:0b:8f:b3:01:cd:6a:08:89:3f:d4:9f:6b:
                    d9:2c:12:31:29:e3:a9:d8:5e:55:c3:99:c6:8b:0b:
                    c2:3a:cc:8e:dd:36:55:4e:4e:0a:a6:82:f2:59:b1:
                    62:05:30:ba:5c:87:65:dc:62:1c:07:b0:8e:3f:85:
                    73:13:f2:f6:b4:ab:7d:e8:14:64:3e:db:6f:01:21:
                    0d:50:86:bd:2c:12:12:53:11:9d:5c:ab:d8:e9:88:
                    e9:fc:ab:90:3f:13:48:98:8b:50:82:62:1b:7d:bc:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:17:86:C6:DA:D3:31:CF:3B:04:E7:BA:DF:84:96:9E:DB:D0:9D:85
            X509v3 Authority Key Identifier:
                keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:25:38:14:ea:ff:e3:12:11:49:54:c9:b8:11:e8:8e:b5:
         df:06:6a:80:7b:48:5c:1a:dd:89:ad:47:b2:5d:e2:50:b7:a4:
         78:bf:b6:a5:12:00:bf:e6:da:a3:36:e3:98:b5:a6:f6:cf:2a:
         fa:a7:ec:1f:bd:de:1a:a0:4c:65:ce:4c:11:8f:f8:d1:ab:20:
         3f:8d:88:b7:52:64:86:bd:bd:09:47:f6:e3:f6:7c:d5:91:7d:
         68:36:57:b9:36:fb:d5:85:99:cd:63:a9:65:d8:70:49:16:b7:
         9b:bd:4c:a8:4d:bd:68:40:e0:09:47:e7:4f:1a:d8:e2:2c:98:
         f2:d2:f1:47:8b:0a:3e:9a:8d:2b:4e:4c:4b:e8:c3:17:6f:fd:
         5b:15:47:51:97:36:61:4e:8d:ce:33:70:72:0c:cb:22:86:92:
         71:40:8b:2c:46:a7:1c:61:2c:95:de:71:4f:46:f5:9d:9b:d5:
         67:fc:7f:9b:a2:6e:18:e6:14:70:d7:4d:dd:bf:0e:cd:9a:91:
         8c:15:fd:aa:b8:fc:cc:2c:21:0e:09:ab:4a:d9:db:cc:37:24:
         12:69:e0:f4:6e:b9:62:84:ce:2e:f8:bc:f0:c9:be:18:bf:4b:
         24:79:cf:ff:19:36:36:a4:e4:e2:1d:1c:f0:cd:12:69:c6:29:
         03:bf:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:29 2026 by rpki-client