Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File:                     Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier:          YokKzUT/sTvrcULF4hZCOJRsZ490PHzFOMhhzKZ4ayM=
Subject key identifier:   2A:AD:93:AA:64:84:67:EE:51:7D:2F:B9:8D:E4:8C:70:0C:B5:36:1D
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer:       /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial:       019F71737D3380D4E9D004A2D11D4BF9516D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number:          0A38
Signing time:             Fri 17 Jul 2026 19:00:21 +0000
Manifest this update:     Fri 17 Jul 2026 19:00:21 +0000
Manifest next update:     Sat 18 Jul 2026 19:00:21 +0000
Files and hashes:         1: 1-OTLSt9bxerjVQrXim1tii-2o9E.roa (hash: pXJ9LGfvy4+1EbvSdA31KaVxZBu7t1Z+nzZrQNY4cjI=)
                          2: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (hash: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=)
                          3: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
                          4: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: gmncIxpvotUqVblPndv1vH3NVs+Ar+U72UZXJ6YNqOg=)
                          5: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:71:73:7d:33:80:d4:e9:d0:04:a2:d1:1d:4b:f9:51:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
        Validity
            Not Before: Jul 17 19:00:21 2026 GMT
            Not After : Jul 18 19:00:21 2026 GMT
        Subject: CN=2aad93aa648467ee517d2fb98de48c700cb5361d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:dc:9b:97:74:8e:57:5c:9e:bd:8d:6b:73:
                    a5:68:d2:ae:55:b2:10:df:f8:e4:a9:cb:e0:cd:62:
                    29:a7:fd:78:bc:42:b6:b2:62:fd:12:0d:87:f2:97:
                    0f:3e:1a:da:e1:03:20:f2:a3:89:02:ad:07:b5:9f:
                    50:1a:33:e7:a8:8f:f3:63:c5:5d:e9:c2:50:6e:b8:
                    cd:90:33:69:9e:11:71:50:ba:d9:79:c0:a3:cd:ef:
                    07:49:16:35:5c:64:30:05:e4:2e:a3:f7:2e:91:8c:
                    dd:b6:c1:31:c6:46:2d:3b:f6:b4:bf:d8:70:2a:dc:
                    8b:74:79:bf:2c:5b:04:d3:05:d2:f3:a9:81:87:7e:
                    ae:c1:b7:4f:f3:aa:81:f4:f3:23:37:f9:aa:2d:b9:
                    da:e9:f5:93:ca:0b:80:c2:26:88:1d:89:7c:f0:12:
                    69:15:8c:52:16:c4:55:5f:b7:f4:df:48:9f:ae:6c:
                    8c:e5:62:f8:66:14:65:4a:14:fa:4f:6a:89:ef:53:
                    85:3a:17:3c:b3:55:b4:d8:ce:84:48:1c:e1:db:d3:
                    cf:bc:b4:dc:28:57:d1:23:2c:13:21:9b:f8:e2:1a:
                    71:7d:ff:56:3b:66:83:0c:b4:5f:e8:75:e4:af:7b:
                    c2:69:23:9c:78:08:e0:2d:a6:c6:a0:99:a4:3b:c7:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AD:93:AA:64:84:67:EE:51:7D:2F:B9:8D:E4:8C:70:0C:B5:36:1D
            X509v3 Authority Key Identifier:
                keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:ab:dc:32:2b:1a:17:34:61:60:f1:04:8b:10:78:40:31:
         b2:ab:48:45:7c:db:09:e5:5f:05:29:ba:02:03:96:28:d8:0b:
         7a:76:5f:41:f6:eb:66:e4:30:b1:f3:b5:4f:79:b3:f4:43:66:
         ab:2a:d6:62:dd:e0:9a:38:cb:64:b1:88:12:99:c4:56:29:0d:
         e2:46:f2:3c:08:3b:27:b0:c4:e7:ca:e0:06:fd:fa:0b:0a:ac:
         89:fe:5d:c3:7e:ac:b3:a6:38:66:4b:8a:82:59:c9:9c:2b:85:
         3b:36:1e:ca:3e:1b:58:70:94:6c:6c:db:1c:98:c3:39:e9:cd:
         44:b5:2c:df:db:11:24:ad:4b:3f:a2:83:d1:25:02:ef:4f:01:
         e2:d5:15:a8:32:8f:17:74:5e:2e:de:9c:eb:83:7f:cf:42:bf:
         f7:39:7e:42:0d:3d:3d:d1:cf:00:12:ce:51:8e:a4:fd:2e:26:
         50:f5:6f:62:98:3f:a4:9c:48:13:15:4d:5b:7e:22:c3:ea:75:
         56:b8:c7:ea:ee:3e:0c:a8:83:46:c2:ce:17:d8:55:d4:c0:2e:
         c8:4c:78:e7:62:26:41:94:d1:03:f3:66:e9:2d:4f:5b:aa:44:
         ec:b0:ab:8f:99:7c:e7:e4:03:d6:4a:47:b9:4d:3a:10:66:d3:
         73:54:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:49:19 2026 by rpki-client