Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File:                     OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier:          IPUzAD4edPBCLT4XyJZtbP6iMEc38This+iZgKqY5Uk=
Subject key identifier:   AC:5A:F3:E5:12:98:D9:B0:98:16:07:BA:48:6D:08:1B:0F:A2:2C:64
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer:       /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial:       019EBF5AAB85109C646BBAF093262880374A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number:          0B14
Signing time:             Sat 13 Jun 2026 05:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:50 +0000
Files and hashes:         1: HJsFBPXpRz5LLN-HWWaUWkvpuFg.roa (hash: A71A79ld0mpXJShPBVAxO/RGVR9i2ChYv5yAgG0mvoI=)
                          2: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: Efny91qZpBfTi+vj28QHHQPSqcDZvXjX7OLNbjU50AE=)
                          3: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (hash: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM=)
                          4: eajsCfDVR3mS2bokl79SZG65uO0.roa (hash: C+6jNZ7CvadCwwwjGLPlq4B5cByCVplF5IFoLR8czpM=)
                          5: igrteN5vqIxxznlHOmqBmnoDCxM.roa (hash: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI=)
                          6: x4b1kVJxAoo0cTXBS0d05Vjhxp0.roa (hash: Dr3HVuYGSpmgMr+JUBhbJNssYU4/n5sJRGF2b2MSqMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:ab:85:10:9c:64:6b:ba:f0:93:26:28:80:37:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
        Validity
            Not Before: Jun 13 05:00:50 2026 GMT
            Not After : Jun 14 05:00:50 2026 GMT
        Subject: CN=ac5af3e51298d9b0981607ba486d081b0fa22c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:9b:ad:16:ec:91:0b:e0:6e:24:eb:d3:6d:
                    cc:95:a3:1d:99:ae:61:39:3e:68:3e:4c:3f:18:34:
                    3d:c8:d0:d4:60:1e:3e:66:f6:0b:be:81:b9:d4:e8:
                    19:82:e1:a7:5b:ca:6b:70:d3:63:8a:c0:89:4e:75:
                    6c:cf:38:a0:e7:12:b2:1e:79:3e:4a:23:65:61:2f:
                    d5:ac:4d:f9:2d:41:aa:3d:ee:db:ab:76:d8:eb:9b:
                    b9:6e:25:23:26:8e:59:5a:18:42:0e:c0:44:c0:21:
                    0f:14:95:b5:94:a8:cc:a1:a4:c0:f3:ab:ed:c6:0d:
                    57:1f:69:b3:8c:1c:8f:40:79:c8:1e:92:12:bc:65:
                    23:e8:f2:c7:90:44:b8:0a:6a:b8:45:24:47:b4:9c:
                    70:97:1e:a3:84:a9:45:87:50:31:80:4d:12:10:b5:
                    75:32:e9:a1:23:f0:c1:4c:fa:89:ee:45:61:e5:dc:
                    0f:ae:2b:18:b4:6d:cb:ba:9a:a6:7c:bc:b4:34:94:
                    ad:07:e8:71:53:91:13:9e:18:63:e7:c6:2d:47:88:
                    d2:b2:de:a9:05:61:93:6c:38:c3:7f:bc:f7:f2:05:
                    a2:cc:98:9a:31:ca:39:cc:af:fd:b5:d3:89:7e:03:
                    e6:71:df:24:7d:1a:e5:21:55:fa:8a:b0:04:33:ac:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:F3:E5:12:98:D9:B0:98:16:07:BA:48:6D:08:1B:0F:A2:2C:64
            X509v3 Authority Key Identifier:
                keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:49:2f:df:cc:d1:0d:72:ed:de:b7:5e:c0:3b:d6:43:78:1e:
         55:d7:18:b0:3d:54:52:ac:94:75:5a:8d:c5:90:e2:4d:2d:c3:
         33:b6:3d:0f:50:ba:02:f2:4e:c0:9d:c7:ab:72:93:c0:40:8d:
         11:c5:47:da:38:c9:85:73:46:d6:c3:f1:cc:b7:9a:ea:51:c9:
         9b:a1:7a:0f:82:a1:7b:1a:00:ee:ec:bb:3f:8e:0f:f7:50:55:
         78:5a:f2:e5:b2:3d:38:c0:4d:32:74:bb:01:13:be:c1:80:5c:
         ef:cc:3a:6d:df:fd:aa:e4:f3:01:c9:22:52:d7:8f:ad:09:da:
         ae:38:59:52:ac:94:b1:0c:c8:42:d5:da:83:fb:5b:f8:fa:48:
         bf:c6:5c:36:8e:0b:fb:f8:ae:15:bb:60:69:0d:9c:fa:5d:3d:
         5a:e9:f9:79:1a:c7:7f:63:4b:dc:84:a0:33:91:10:c0:f4:fe:
         63:26:34:3e:37:cb:c7:5f:6c:ba:77:b8:11:bc:5d:87:fb:49:
         e3:47:b0:9f:c2:e3:30:a5:98:7f:31:3c:c6:da:10:2a:ff:f2:
         a1:0e:3e:a5:0b:57:f5:94:73:a0:dc:6e:f0:f3:52:68:99:b9:
         cc:b0:b9:40:9c:d6:5f:a3:2e:13:ca:44:6f:10:f3:cb:01:85:
         c1:49:3e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:37 2026 by rpki-client