Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File:                     OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier:          cbs+NrGLZRrPhhw+G8Cqo3urnOsToRDjrkCH9EQQKlM=
Subject key identifier:   7E:AA:53:5C:EB:36:6E:9B:F8:C8:BD:1F:F3:B8:1A:9C:2A:CD:19:0D
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer:       /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial:       019EC2C90D96CC3325C9B8FFC0C3D26F9841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 21:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:16 +0000
Files and hashes:         1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: X/8cnvxkUJBX/4++NUrRvSZ6FJ/lSvmeHR5Bb7824yY=)
                          2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:0d:96:cc:33:25:c9:b8:ff:c0:c3:d2:6f:98:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
        Validity
            Not Before: Jun 13 21:00:16 2026 GMT
            Not After : Jun 14 21:00:16 2026 GMT
        Subject: CN=7eaa535ceb366e9bf8c8bd1ff3b81a9c2acd190d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:12:0c:3a:a1:1f:b7:1e:43:c4:1d:e5:61:
                    86:88:57:b3:83:aa:5e:31:e1:3d:c3:8b:ef:66:4c:
                    de:82:22:c2:07:52:30:37:ba:1e:29:bc:61:e6:28:
                    96:aa:ad:7a:e4:34:52:f1:00:19:b5:6a:7b:9c:5e:
                    17:96:1a:ed:90:47:a4:09:7f:4e:96:a8:f9:67:65:
                    56:79:e7:6d:d4:69:db:4d:72:b3:4d:ee:50:9d:56:
                    be:d1:44:42:2c:bb:48:ed:66:da:d9:42:22:63:bf:
                    a6:96:48:0d:81:da:a7:23:76:c1:77:fc:3b:15:79:
                    15:b1:04:0d:35:5b:85:85:65:f4:b1:54:7b:c3:af:
                    a6:94:c1:42:59:d5:94:cc:57:1d:f6:c3:d6:4d:1a:
                    db:72:7b:14:c2:99:0e:64:e2:d9:9c:1a:27:9a:91:
                    fe:85:b8:74:6a:d4:9b:e4:00:ed:cb:c1:df:3e:1c:
                    69:b2:9e:a1:01:74:f9:85:9b:55:f9:6b:1a:20:c3:
                    8a:74:50:4d:c5:49:93:46:29:95:ae:6b:0c:e1:06:
                    70:ba:8c:3f:71:95:4f:f5:31:56:a4:8e:ef:61:85:
                    bb:91:80:04:63:f4:c4:7f:00:84:1d:96:f0:f1:b2:
                    cd:f7:34:25:c8:cf:c6:52:41:97:a5:b4:c3:ad:06:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AA:53:5C:EB:36:6E:9B:F8:C8:BD:1F:F3:B8:1A:9C:2A:CD:19:0D
            X509v3 Authority Key Identifier:
                keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c6:62:16:0c:e9:92:93:c3:0b:81:5e:17:8a:f7:77:7d:d4:
         b3:91:6d:5b:3c:6e:09:d0:a5:ec:d3:75:39:4f:7c:3f:80:f0:
         2e:a5:42:58:5e:c9:68:f7:50:ee:49:ae:9d:cf:21:88:d3:92:
         3f:96:9b:ac:6a:e4:1e:91:4e:04:36:42:fc:eb:d4:02:0a:ae:
         de:e2:b3:7f:23:41:d7:51:11:da:90:d1:6d:8a:59:24:37:cc:
         f2:d2:52:74:3a:f5:c2:64:44:cd:f6:55:ce:56:25:97:ac:0b:
         05:58:a5:ff:13:dd:69:84:12:01:55:34:34:15:b1:ea:df:c2:
         0e:31:83:8e:bb:b9:33:68:5e:bb:04:1b:0d:c8:26:96:27:4f:
         84:4e:65:ad:85:02:7a:9f:f5:76:97:9f:33:9c:02:21:e1:c7:
         5d:b3:b2:f8:03:11:9b:27:d9:6e:e5:05:0a:35:16:38:2a:b1:
         bd:38:c5:45:73:0f:8c:91:f1:ac:93:17:19:ca:f0:8a:e8:c3:
         31:25:5b:db:0b:32:09:14:67:47:51:c6:18:fd:00:15:0c:75:
         4d:fa:f8:97:93:7c:25:b4:a4:b5:70:16:d5:cf:34:0d:6b:96:
         77:d5:3a:d7:5c:c9:52:ba:45:b8:15:ac:64:9c:a9:da:ea:8f:
         fb:85:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:43 2026 by rpki-client