Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft
File:                     OIl8_L-BVlqAjUtnuY31WABYANo.mft (raw, json)
Hash identifier:          +0e4rE6t3C5t1KHI/PRotxkGVaTzrByD9i6GP4jZTP4=
Subject key identifier:   30:FE:1E:02:03:09:08:01:89:FA:79:3C:A7:F5:A9:5D:8F:96:E1:E7
Authority key identifier: 38:89:7C:FC:BF:81:56:5A:80:8D:4B:67:B9:8D:F5:58:00:58:00:DA
Certificate issuer:       /CN=38897cfcbf81565a808d4b67b98df558005800da
Certificate serial:       019F89B345F56C25607482CA7DF3EF637870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft
Manifest number:          3C
Signing time:             Wed 22 Jul 2026 12:00:55 +0000
Manifest this update:     Wed 22 Jul 2026 12:00:55 +0000
Manifest next update:     Thu 23 Jul 2026 12:00:55 +0000
Files and hashes:         1: MCVWRVzWWh23JR1k0ZFtIhb-O8o.roa (hash: Uz7dL2QD3U+BgQc3xRHL1sRHyDeIXjwPHJszDd2zBx4=)
                          2: OIl8_L-BVlqAjUtnuY31WABYANo.crl (hash: ZKVKN/XKRi/TOUbiUfRSvB8Nh+7vBOrhuU2NjCVIUkE=)
                          3: RzKXrfbd8Fwl-pMomxY2m5uB7m8.roa (hash: BqUy1h7hW/576C9Ws0RScRjw81x2XBVd04je2t9NNwk=)
                          4: vHnmsylX39m_JK07hnZ_hCD5Z34.roa (hash: Ke1X2Ykv5zFzvGKC+a00sWweDT8NAWBxkD6o6vcXF/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:89:b3:45:f5:6c:25:60:74:82:ca:7d:f3:ef:63:78:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38897cfcbf81565a808d4b67b98df558005800da
        Validity
            Not Before: Jul 22 12:00:55 2026 GMT
            Not After : Jul 23 12:00:55 2026 GMT
        Subject: CN=30fe1e020309080189fa793ca7f5a95d8f96e1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:e8:c9:55:09:ea:ab:54:27:f1:1c:2b:a5:
                    f7:85:e4:94:52:c9:12:bd:ab:8c:7b:1b:b8:5d:2e:
                    12:c0:85:d6:a5:43:cf:5c:8f:45:15:67:fa:6f:41:
                    d0:6d:8e:27:94:de:3a:4e:76:47:a5:2f:b3:6a:45:
                    11:d3:20:a6:83:35:0e:eb:f1:88:32:fa:df:56:77:
                    0f:c6:9b:0c:97:b8:91:68:98:6b:55:7c:0d:42:7d:
                    88:5c:73:01:5a:c7:b9:0d:0a:c1:f2:17:b9:b6:71:
                    65:9e:52:fc:ec:8e:c7:cc:f0:e3:7e:d6:07:69:07:
                    ec:be:fc:b7:9d:7b:7b:a5:21:69:9f:9f:dd:37:20:
                    c4:de:41:ea:31:0e:c6:82:e2:d1:8c:aa:e6:cd:09:
                    e2:39:cf:bd:c3:87:0d:96:6d:ab:4a:87:c0:7f:96:
                    2e:6c:b4:c7:c3:82:68:00:55:a2:a6:31:03:91:3f:
                    ac:37:d1:90:41:02:f2:8a:1d:f9:4c:c8:41:6e:1a:
                    1a:5b:b7:4b:b9:d7:21:bb:fe:0a:7a:f0:d8:4e:f2:
                    85:66:50:79:b7:9a:de:c6:ca:2c:6a:6a:90:7f:de:
                    a0:42:3c:05:4e:45:06:b4:7f:e8:ea:e5:8c:26:76:
                    b8:e9:b9:dc:01:05:1f:88:ea:2b:1b:ff:da:45:67:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FE:1E:02:03:09:08:01:89:FA:79:3C:A7:F5:A9:5D:8F:96:E1:E7
            X509v3 Authority Key Identifier:
                keyid:38:89:7C:FC:BF:81:56:5A:80:8D:4B:67:B9:8D:F5:58:00:58:00:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ff:13:5e:57:8a:1f:de:4f:11:a6:29:5b:87:e5:8a:33:8c:
         bb:63:e3:a1:9f:42:26:0b:5c:c2:dc:7f:e1:7f:0a:fc:df:11:
         d4:11:11:9a:d1:a1:07:aa:bb:18:95:c8:36:29:cd:9d:09:e8:
         b2:7f:eb:e0:0c:19:ca:f6:e5:82:d8:05:22:c8:12:e4:12:bc:
         11:13:dc:01:f2:b6:19:d7:24:7d:98:68:74:8c:bc:8b:09:eb:
         f1:25:19:57:08:b4:6e:48:49:d5:48:62:e1:72:83:a4:c4:dc:
         36:d1:94:e1:7c:f9:5f:80:1a:04:11:7a:ac:03:4d:d4:94:28:
         28:4c:a3:57:99:a7:96:54:ad:d4:db:6f:14:72:37:aa:a5:e9:
         52:37:d6:82:88:70:1e:aa:d6:b1:0b:bc:8e:d8:f5:c0:a0:d1:
         dc:4b:73:39:f3:e2:0c:da:5c:87:26:2a:09:50:aa:60:5e:8a:
         a9:ae:53:9b:4a:58:23:33:f5:bd:42:df:a5:89:17:b9:54:11:
         ba:11:e0:d7:89:86:cc:18:c9:02:14:b3:55:62:05:b3:66:48:
         91:c1:23:44:d6:bc:60:85:b7:d5:84:15:5b:bc:25:c0:6f:6d:
         0a:26:fd:13:80:30:a7:43:19:73:fd:4c:d0:f2:01:8c:69:ea:
         8c:51:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 14:55:48 2026 by rpki-client