Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File:                     Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier:          xJBqwN/EKo6YfShMlQZBoMqdc8aVqRuvn4qHzoZpW0U=
Subject key identifier:   42:DC:80:B2:EC:77:DF:EF:0E:1B:A2:7B:BF:4C:B4:52:86:44:FC:F6
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer:       /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial:       01A164FD1B19E751A07DB3DEEAF79DB8A219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number:          0B3B
Signing time:             Thu 22 Oct 2026 19:01:11 +0000
Manifest this update:     Thu 22 Oct 2026 19:01:11 +0000
Manifest next update:     Fri 23 Oct 2026 19:01:11 +0000
Files and hashes:         1: 1-OTLSt9bxerjVQrXim1tii-2o9E.roa (hash: pXJ9LGfvy4+1EbvSdA31KaVxZBu7t1Z+nzZrQNY4cjI=)
                          2: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (hash: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=)
                          3: Axb5MTof7fk-anNZXzHyNvLvYvg.roa (hash: HOYWdRZLCpSn9qcwi8QakMqzLqB9ckVUi9jVW/8+P2w=)
                          4: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
                          5: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: rtIHVVEGfNJDVe8TcXazYFGQfAB7uMsz7g3e6a4D6AQ=)
                          6: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:64:fd:1b:19:e7:51:a0:7d:b3:de:ea:f7:9d:b8:a2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
        Validity
            Not Before: Oct 22 19:01:11 2026 GMT
            Not After : Oct 23 19:01:11 2026 GMT
        Subject: CN=42dc80b2ec77dfef0e1ba27bbf4cb4528644fcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:56:8f:42:39:cc:75:3c:91:52:46:79:ac:
                    3f:22:10:fe:65:70:38:52:d5:e5:e8:ef:1e:1e:eb:
                    0f:48:e2:79:a8:82:7e:7b:b2:51:af:5a:48:c2:1c:
                    e1:55:68:3d:3c:6f:ff:2b:0f:ca:bd:2e:e7:3a:b5:
                    7e:76:ce:5d:af:a1:15:8d:b8:4b:a3:96:cb:0d:e6:
                    eb:10:e8:70:73:3c:ba:9c:68:92:5c:ec:08:bc:7c:
                    16:36:53:06:b0:89:5d:9d:27:f2:00:47:be:8f:d2:
                    b7:95:b4:1f:12:2b:0c:13:d7:6a:a6:54:fb:39:a2:
                    b1:e0:8a:08:8d:13:9a:ab:bf:72:b2:59:78:96:06:
                    3e:60:66:56:d7:3f:d1:f8:37:1a:64:e2:2d:e5:a9:
                    39:a9:f6:7c:1c:f0:f8:bc:2d:85:e8:f8:3e:ac:9c:
                    2b:2f:df:6c:25:2d:ac:7b:74:6a:9f:b1:b8:73:81:
                    fc:7a:69:d6:3f:30:8e:bf:8e:6c:99:d3:46:43:b8:
                    d7:bb:f9:f0:dc:f2:51:d5:ab:b9:c0:5c:60:c3:f8:
                    5e:8d:46:f9:1b:1a:0f:47:a4:bd:51:5e:80:79:3a:
                    73:98:16:87:dd:89:b3:43:85:e8:32:c0:bd:f5:a2:
                    71:46:1c:c6:06:03:8f:87:a2:e3:8d:e1:5d:8e:79:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DC:80:B2:EC:77:DF:EF:0E:1B:A2:7B:BF:4C:B4:52:86:44:FC:F6
            X509v3 Authority Key Identifier:
                keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:aa:a6:e2:96:1f:bd:8c:a2:2a:d0:a0:a9:a4:9a:ee:33:22:
         7c:b1:17:2f:7b:25:07:75:d3:ce:0a:79:10:71:2f:d5:43:ca:
         85:d4:24:d0:2c:4c:08:12:be:24:14:cc:1f:87:24:0f:30:04:
         0a:3c:1e:b3:15:19:93:4d:31:53:46:89:ba:7c:5c:22:c1:95:
         a8:6a:01:85:a6:26:9e:c0:a1:b4:29:51:ca:d6:ae:15:3d:70:
         0b:3b:27:8a:8c:98:7b:c3:70:84:17:5b:de:de:77:79:c2:76:
         3d:ff:4a:e1:6a:e0:ad:e5:6c:c8:ae:c0:0b:9d:c8:8f:35:5d:
         fa:0a:52:82:93:a4:04:56:9a:a4:0b:74:56:83:54:ec:65:33:
         a8:8b:cc:db:9a:d5:00:b6:3d:3e:04:8e:b8:ec:6c:d9:82:e1:
         fe:43:5e:8a:53:65:6d:b3:ab:cf:0d:93:70:82:51:96:3f:46:
         5a:c8:75:9f:33:8b:2c:9d:70:ec:56:47:32:bd:30:bb:46:ee:
         bb:ff:75:04:2d:ae:dd:09:ef:28:62:35:98:95:45:92:73:0b:
         12:46:69:c3:d0:f3:19:d4:5d:e8:ba:c1:62:26:2a:3d:5b:7d:
         bf:f0:f0:52:11:68:61:85:3f:8a:d1:4f:a8:f2:47:e9:79:a7:
         de:2d:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:03:05 2026 by rpki-client