Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File:                     0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier:          jnFwu5pfzSVEIb976eEtVhqXyhcx13lsqgraeI36yyk=
Subject key identifier:   D8:7D:4B:1B:7A:9D:86:D2:E6:4D:8E:E9:85:B4:0E:32:50:98:15:F0
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer:       /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial:       019E303B7CF98305117DE464A8E1BDB083F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number:          0780
Signing time:             Sat 16 May 2026 10:01:05 +0000
Manifest this update:     Sat 16 May 2026 10:01:05 +0000
Manifest next update:     Sun 17 May 2026 10:01:05 +0000
Files and hashes:         1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: wMIeArtNU2j5/bwA1o4Cqid7fqeTJKlk47oaXkntDqM=)
                          2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:7c:f9:83:05:11:7d:e4:64:a8:e1:bd:b0:83:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
        Validity
            Not Before: May 16 10:01:05 2026 GMT
            Not After : May 17 10:01:05 2026 GMT
        Subject: CN=d87d4b1b7a9d86d2e64d8ee985b40e32509815f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c1:e4:30:ad:23:fe:92:9d:b9:4d:80:09:26:
                    a8:c9:35:e8:db:1d:44:04:83:33:b0:da:10:07:20:
                    50:5e:33:cc:bb:29:39:d0:9f:d1:d5:2d:0e:84:82:
                    cc:37:7a:85:44:ad:ee:1c:c2:30:2e:dd:4d:6a:23:
                    6e:d1:74:6f:2d:14:0c:3a:b9:a1:5b:6c:47:fc:54:
                    45:68:20:c4:57:ea:28:ea:60:e4:36:e0:ee:59:98:
                    c0:ab:48:b5:8a:42:e1:00:7a:e0:d6:92:50:48:65:
                    eb:a4:81:5d:f1:cc:83:b2:8c:cb:39:c9:bb:89:7e:
                    c2:ec:95:ed:0e:8b:03:3b:e6:d3:37:00:74:cc:e6:
                    0e:82:40:d5:97:e2:ad:f7:1c:48:d8:d9:63:28:72:
                    46:d3:ba:40:68:df:03:a6:ab:6d:07:fa:f0:55:9d:
                    44:17:1e:3b:2f:ad:5f:93:fc:5f:53:bf:05:fe:90:
                    cb:a5:e0:ff:82:ce:42:8f:4d:38:8d:0c:10:a3:1a:
                    1b:0c:99:4a:a9:d8:44:c2:b7:92:c8:44:ee:f4:2f:
                    cd:af:2c:17:88:c8:ef:0b:f6:49:c1:22:b3:da:66:
                    f2:da:9b:d5:4b:1b:0a:40:79:a8:a1:77:d3:b3:7b:
                    86:f3:28:62:56:4a:db:be:a1:6f:85:3c:ae:5e:ac:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7D:4B:1B:7A:9D:86:D2:E6:4D:8E:E9:85:B4:0E:32:50:98:15:F0
            X509v3 Authority Key Identifier:
                keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:82:f4:5a:e4:c7:04:ce:53:fe:42:07:aa:20:1d:ca:f0:b9:
         e6:3b:fe:f3:e2:ad:5e:08:f3:c6:f7:7a:ab:f7:d0:c4:0d:b2:
         ff:0d:ad:1e:89:a1:24:c4:c8:ff:f2:ef:41:27:12:4a:8f:e1:
         79:d2:ef:a6:8a:f8:07:a5:70:67:59:f8:c2:88:7a:9f:5d:26:
         0f:58:1c:b4:d5:33:5d:af:ae:df:09:fc:cb:53:3d:23:03:06:
         5f:ed:57:8b:59:a3:64:87:67:4e:ed:be:6e:85:26:67:47:9b:
         89:fa:80:27:bb:b4:05:91:2c:2f:56:9c:25:bb:e3:e5:4a:64:
         12:e9:d6:10:da:01:74:5c:f9:c0:9a:4d:5f:ab:af:e5:f2:1a:
         b1:97:ed:e6:a1:65:ed:02:d3:a1:2a:0a:a4:2f:ba:0c:40:dd:
         e1:b4:12:45:59:ac:58:be:e9:cf:4c:0f:67:8a:07:83:e7:c6:
         35:8e:4a:0d:e1:0c:75:4f:cb:c6:50:75:01:90:76:02:07:df:
         42:cd:22:b1:6f:ff:00:ba:b9:ff:37:b6:15:82:89:27:e6:98:
         c4:ed:07:ea:31:7c:b8:86:aa:d6:c3:35:be:2c:88:30:17:80:
         52:75:57:c4:9d:c2:fc:a1:77:5d:a5:de:8d:4a:de:db:31:9b:
         5a:66:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:29 2026 by rpki-client