Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File:                     0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier:          muEhBCn/3pKJWNUmiNuRAsIDC299wB06Sx7WjWioZ/k=
Subject key identifier:   04:5C:4A:80:27:27:78:D6:A6:76:8F:C9:6C:AF:92:85:DC:88:46:55
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer:       /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial:       019D9998FD3B3813692A845E14A8118133F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number:          0732
Signing time:             Fri 17 Apr 2026 04:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:33 +0000
Files and hashes:         1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: tQ21cCjH4EG8sdobxZ1C1ypKY5fsPvXXEAd/sQmEO1k=)
                          2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:fd:3b:38:13:69:2a:84:5e:14:a8:11:81:33:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
        Validity
            Not Before: Apr 17 04:00:33 2026 GMT
            Not After : Apr 18 04:00:33 2026 GMT
        Subject: CN=045c4a80272778d6a6768fc96caf9285dc884655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:71:32:f1:82:e1:95:11:56:35:70:14:d9:
                    5b:8b:14:4f:47:51:65:bd:9a:b7:54:c6:e9:cc:fd:
                    fc:0c:c1:b1:62:2e:b6:4d:88:92:2b:4c:7c:95:4a:
                    c0:03:f1:5c:6a:ac:fa:88:d2:b7:a7:23:3d:b8:94:
                    9b:2b:4b:64:0e:40:c0:5e:9b:b6:45:25:33:ac:e9:
                    61:14:0b:34:6b:bf:5b:48:4f:f8:87:d8:80:07:6f:
                    51:af:7e:28:89:d7:06:cc:99:77:b2:c0:44:b9:f2:
                    18:0f:62:5c:f2:2b:72:42:42:ce:1e:81:22:b6:c1:
                    de:ba:5a:a2:bf:3a:01:f4:51:33:18:cd:91:c0:54:
                    a3:0f:48:8b:53:6e:8a:6b:34:4f:76:42:be:2b:06:
                    9e:85:3c:33:d7:24:95:10:52:28:68:b5:cc:0b:b7:
                    24:84:c8:ba:56:40:cd:61:93:fb:46:1c:48:b9:da:
                    70:b3:83:31:dc:aa:c1:a3:9e:7b:6d:42:ef:3c:59:
                    47:56:bd:a0:76:66:31:f2:03:b1:3e:31:34:ac:19:
                    be:73:18:2f:75:24:65:0c:2c:f2:b7:c0:58:19:fa:
                    be:75:7e:aa:09:36:c0:4b:f7:fb:d7:a3:b3:8c:55:
                    ff:46:8d:ff:b0:fd:02:3f:8b:cd:aa:9f:a7:33:dd:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5C:4A:80:27:27:78:D6:A6:76:8F:C9:6C:AF:92:85:DC:88:46:55
            X509v3 Authority Key Identifier:
                keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ff:25:ef:78:72:c7:a3:62:88:67:7f:c9:26:b9:aa:d0:ca:
         d2:74:bf:5c:14:27:49:0e:56:d8:9e:6e:8a:3d:59:41:ec:13:
         de:e7:67:2a:f6:c4:c0:90:82:e9:26:48:68:6e:48:b1:47:ef:
         1c:21:d7:6d:7f:a9:0d:f8:76:00:ac:79:04:02:89:55:36:32:
         b8:60:81:72:a7:6e:9d:b1:fd:bd:43:73:93:97:49:ab:4e:fa:
         13:e1:d6:6a:17:e9:73:1e:a5:7e:01:18:a0:c9:04:2f:e1:d0:
         35:a9:38:5e:b9:18:25:28:94:3a:9f:12:12:90:6c:52:1d:bc:
         54:4e:63:8c:b2:99:6d:35:54:a4:dd:cd:6a:6a:1c:fd:e8:46:
         0f:cf:d2:f7:52:f5:ba:c7:70:02:cb:63:4b:12:a0:00:ba:6a:
         c9:03:a7:08:36:c6:82:f0:7c:45:57:64:65:89:6e:9b:81:11:
         f8:86:47:42:47:51:b1:6e:ab:3f:7c:83:ba:00:2d:86:e8:8d:
         f4:47:7b:99:f0:a4:d3:53:a1:30:5d:75:5f:8d:88:b0:ff:e0:
         55:3a:d1:d8:1d:f2:93:09:9b:08:cd:70:14:31:16:f5:2d:61:
         2c:66:d3:3e:71:39:4c:5a:02:a3:6f:ae:65:7f:c9:b5:7f:d4:
         5a:8e:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:30 2026 by rpki-client