Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File:                     Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier:          4hclNFJh9ursev9PrUKNlD9NMG9tFyhF2ixy53Np7aE=
Subject key identifier:   16:43:B1:7E:BA:FC:96:2B:BF:9D:EE:E9:CC:0F:FA:08:FD:7F:57:71
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer:       /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial:       019EE8C57322F2198EEB6F3E77E2C899B655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number:          169B
Signing time:             Sun 21 Jun 2026 06:01:54 +0000
Manifest this update:     Sun 21 Jun 2026 06:01:54 +0000
Manifest next update:     Mon 22 Jun 2026 06:01:54 +0000
Files and hashes:         1: JeRZIFRirZZdiLPxrOo3DGQulRw.roa (hash: PUBH0pFsT37aG7QBwgLHGxkyy3HPT9mon4gS+W1GrBo=)
                          2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: fTUw4ZgZPRL1Jbq7zCqVKcz5RbIgaI/TzIP76oYYP90=)
                          3: UppVVnVbhW896K6XSXwo0aax_7U.roa (hash: UNM/g9tgWKXVsv2rJCX3IpagNuPemJxP01hCnrm2WRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 06:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:c5:73:22:f2:19:8e:eb:6f:3e:77:e2:c8:99:b6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
        Validity
            Not Before: Jun 21 06:01:54 2026 GMT
            Not After : Jun 22 06:01:54 2026 GMT
        Subject: CN=1643b17ebafc962bbf9deee9cc0ffa08fd7f5771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e3:37:58:a6:1f:04:3d:8a:c7:d9:5b:3f:3e:
                    6a:4e:d7:10:a8:c2:c7:fc:98:0e:e9:db:c5:69:ff:
                    8d:10:51:41:b1:7f:03:0f:b0:a4:1f:40:0f:ca:ee:
                    ee:fd:e1:d8:04:69:b7:5a:40:c0:69:5f:4b:b0:7a:
                    0b:81:19:23:1e:9e:3f:fa:15:26:67:84:b1:22:b3:
                    e7:41:e7:3b:b7:a6:58:f9:ba:91:8e:ec:ba:49:d2:
                    15:65:9e:a8:7c:04:f7:d8:e6:c7:bc:b8:6a:d0:be:
                    c3:a2:36:51:21:7d:33:06:de:06:c9:7c:cb:0c:2c:
                    9c:65:e3:3b:a1:f2:03:1a:d5:b9:7f:ca:14:1d:dc:
                    6f:b1:71:8e:e5:52:17:b6:3f:00:c5:13:56:22:63:
                    06:0f:e9:26:64:31:bc:38:02:20:b4:20:6e:43:a9:
                    9b:61:b1:68:38:b1:8e:b7:e5:67:8e:bf:76:8b:e9:
                    1a:93:90:f4:a1:f3:c7:20:80:ff:4e:de:0a:2d:e1:
                    f3:c9:e2:93:bf:ca:41:bd:86:b9:b8:72:e6:83:a1:
                    8f:f3:8e:32:1c:db:40:69:f8:17:38:b8:69:b3:bb:
                    3e:0c:38:b6:d4:66:20:af:9a:41:32:c1:04:5e:13:
                    5e:c7:12:70:80:ba:a4:5f:eb:88:71:7a:c2:32:74:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:43:B1:7E:BA:FC:96:2B:BF:9D:EE:E9:CC:0F:FA:08:FD:7F:57:71
            X509v3 Authority Key Identifier:
                keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:cd:34:13:43:a2:d6:63:05:d8:d7:06:e3:67:0f:49:48:
         b2:db:38:4f:ec:3d:64:a2:95:88:0b:fc:89:7f:c0:69:20:40:
         05:c7:9b:cb:d0:ad:78:89:b7:cb:09:d1:91:de:06:40:2d:e5:
         26:25:79:e0:fe:de:1a:20:e8:ec:0f:c6:48:bd:7a:9e:4e:88:
         b0:ca:11:f9:c1:30:f2:ae:fc:ea:c3:b8:0e:e4:33:67:9b:a8:
         48:2e:e3:75:ae:d7:7c:23:1a:61:db:af:fe:bb:03:e4:70:9a:
         78:c4:07:b6:df:8e:a9:82:6e:7f:b6:2b:35:23:80:c8:0d:a5:
         ef:63:06:55:a3:c9:b5:6b:da:22:1c:6c:dc:cb:37:86:08:fb:
         c7:95:10:3d:ba:ab:0f:22:3b:05:72:cd:07:17:8e:43:fa:9a:
         68:12:97:09:6c:49:39:3b:6e:7c:8a:1e:ce:5f:cf:44:2f:33:
         61:e1:9a:f4:d4:c8:80:bf:93:8d:af:e0:41:f0:4d:19:86:cc:
         48:cf:c0:5f:aa:f4:ee:2c:8d:d5:bb:0b:de:78:2a:17:17:b3:
         30:30:06:77:ea:73:a9:33:9b:2a:e8:6b:64:e6:80:7c:54:41:
         75:73:07:a1:5f:30:f5:81:28:c3:65:7e:b3:de:9d:44:a3:47:
         d5:ca:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 13:20:25 2026 by rpki-client