Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File:                     Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier:          9Ic9epH35n6wMnI+hBO2p7K1/132dkcsDBiV9aa3VXk=
Subject key identifier:   CF:B0:DF:90:9F:81:5B:F1:D0:CF:64:16:E5:05:69:76:29:98:47:8A
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer:       /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial:       019E89B683282BCBF636D72D94012B825F10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number:          09C0
Signing time:             Tue 02 Jun 2026 19:01:40 +0000
Manifest this update:     Tue 02 Jun 2026 19:01:40 +0000
Manifest next update:     Wed 03 Jun 2026 19:01:40 +0000
Files and hashes:         1: 1-OTLSt9bxerjVQrXim1tii-2o9E.roa (hash: pXJ9LGfvy4+1EbvSdA31KaVxZBu7t1Z+nzZrQNY4cjI=)
                          2: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (hash: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=)
                          3: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
                          4: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: 51HnEcsaWEFuIVcDNIfOjrAyXMAiz0vwzRhRLvrOSaE=)
                          5: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:89:b6:83:28:2b:cb:f6:36:d7:2d:94:01:2b:82:5f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
        Validity
            Not Before: Jun  2 19:01:40 2026 GMT
            Not After : Jun  3 19:01:40 2026 GMT
        Subject: CN=cfb0df909f815bf1d0cf6416e50569762998478a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:16:3b:93:6f:b1:b7:29:68:9a:38:6a:45:
                    81:b3:0d:e4:b5:90:e6:f2:a7:a9:58:2c:e0:eb:05:
                    31:32:83:58:5f:35:9f:53:49:50:c9:c7:54:6e:6b:
                    d0:1c:78:60:79:3d:5f:f0:c2:db:11:98:0d:d7:5d:
                    93:b4:16:b8:d0:7e:b8:3b:8a:a8:ec:1b:f6:bc:82:
                    bb:25:6a:3b:d5:de:54:4a:b1:21:4f:0a:75:94:f2:
                    b3:6a:5e:d2:ee:36:83:89:91:cd:01:e3:2f:3b:ce:
                    f2:52:1c:60:e2:ba:8b:fa:6a:e9:2d:d6:b1:a6:67:
                    3c:18:38:4d:d5:ef:a8:9d:c3:95:06:3f:96:5c:4d:
                    bb:cb:b4:b5:49:f9:16:47:97:62:a5:22:30:5e:5c:
                    79:30:79:a2:e9:19:e7:8d:38:fb:74:b7:1b:57:07:
                    22:09:bb:c7:03:9b:1b:5a:b1:0d:06:9e:a3:0f:51:
                    d7:e7:12:46:19:64:75:b5:6c:ad:fe:dd:8f:43:fa:
                    95:38:d6:1f:fb:35:00:2c:1b:8f:d9:91:9f:dc:60:
                    1c:6c:6b:6e:f8:d8:6b:af:5b:64:a3:8d:19:4f:4a:
                    69:92:28:94:47:6c:cc:a1:2e:5d:33:07:f9:b0:48:
                    2d:98:6b:aa:50:6b:6a:35:c3:75:da:da:32:82:aa:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B0:DF:90:9F:81:5B:F1:D0:CF:64:16:E5:05:69:76:29:98:47:8A
            X509v3 Authority Key Identifier:
                keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:e3:c1:fc:a1:6a:76:e0:b5:d0:3e:22:1a:0f:c2:a2:5b:
         65:e7:d0:00:ac:07:20:cb:e1:32:34:cb:9d:fc:95:30:e1:91:
         e8:7e:b3:2a:e7:6d:8f:04:af:60:3e:4f:a1:59:ed:68:4f:60:
         3f:9f:70:95:e4:c2:84:6a:d0:9d:09:e6:0d:f8:ab:89:22:60:
         d7:ab:bf:c6:be:b8:6c:49:19:12:89:45:21:3a:88:d7:a0:8d:
         75:b6:9b:28:b8:25:df:4b:5f:0d:f7:a0:93:c5:fa:8f:1d:0b:
         a1:2d:ac:a4:4d:92:54:8e:f8:3a:73:bf:85:07:d4:e3:86:c4:
         5d:1c:50:2e:3a:51:9e:7b:a0:41:20:e6:d9:95:67:28:f7:d3:
         a8:06:19:63:c5:dc:11:bf:16:a7:40:50:ef:4d:6d:22:16:ab:
         74:e9:f5:18:a1:2c:4c:ac:f3:af:2c:4c:b3:bc:f2:c3:e9:4c:
         89:14:3f:09:79:a7:b4:6b:de:7c:7c:98:d8:ab:99:5e:7a:f4:
         8a:cb:a4:dd:8f:42:54:4c:c8:e8:b2:67:43:43:82:53:97:52:
         f6:d8:b2:78:1e:35:58:49:85:50:54:a6:55:b8:a4:d0:08:3f:
         c7:de:62:01:bc:8f:3e:96:c9:8e:28:71:89:6a:22:86:51:81:
         2c:8e:fb:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6JtoMoK8v2NtctlAErgl8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5
N2RlMzcwHhcNMjYwNjAyMTkwMTQwWhcNMjYwNjAzMTkwMTQwWjAzMTEwLwYDVQQD
EyhjZmIwZGY5MDlmODE1YmYxZDBjZjY0MTZlNTA1Njk3NjI5OTg0NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7oWO5NvsbcpaJo4akWBsw3ktZDm
8qepWCzg6wUxMoNYXzWfU0lQycdUbmvQHHhgeT1f8MLbEZgN112TtBa40H64O4qo
7Bv2vIK7JWo71d5USrEhTwp1lPKzal7S7jaDiZHNAeMvO87yUhxg4rqL+mrpLdax
pmc8GDhN1e+oncOVBj+WXE27y7S1SfkWR5dipSIwXlx5MHmi6RnnjTj7dLcbVwci
CbvHA5sbWrENBp6jD1HX5xJGGWR1tWyt/t2PQ/qVONYf+zUALBuP2ZGf3GAcbGtu
+Nhrr1tko40ZT0ppkiiUR2zMoS5dMwf5sEgtmGuqUGtqNcN12toygqq3dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+w35CfgVvx0M9kFuUFaXYpmEeKMB8GA1UdIwQY
MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt
MmNlYThlMTUzNjMyLzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy
LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWorjwfyh
anbgtdA+IhoPwqJbZefQAKwHIMvhMjTLnfyVMOGR6H6zKudtjwSvYD5PoVntaE9g
P59wleTChGrQnQnmDfiriSJg16u/xr64bEkZEolFITqI16CNdbabKLgl30tfDfeg
k8X6jx0LoS2spE2SVI74OnO/hQfU44bEXRxQLjpRnnugQSDm2ZVnKPfTqAYZY8Xc
Eb8Wp0BQ701tIhardOn1GKEsTKzzryxMs7zyw+lMiRQ/CXmntGvefHyY2KuZXnr0
isuk3Y9CVEzI6LJnQ0OCU5dS9tiyeB41WEmFUFSmVbik0Ag/x95iAbyPPpbJjihx
iWoihlGBLI779A==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:22 2026 by rpki-client