Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File:                     Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier:          0AyZlz21wy+XLrGv8LDSeB7eHr0RgUDQqS7Fc/UdHko=
Subject key identifier:   4C:E3:0B:F1:22:8D:F4:50:C8:EA:31:D2:80:CE:C9:79:8D:B1:95:01
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer:       /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial:       019EBFC8A57A416D94CF5DE011FCDD118405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number:          09DC
Signing time:             Sat 13 Jun 2026 07:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:58 +0000
Files and hashes:         1: 1-OTLSt9bxerjVQrXim1tii-2o9E.roa (hash: pXJ9LGfvy4+1EbvSdA31KaVxZBu7t1Z+nzZrQNY4cjI=)
                          2: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (hash: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=)
                          3: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
                          4: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: Wg2H1uD5iasWn4N3AUUgj12O4g1dRI4oIE8FP4zp8co=)
                          5: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:a5:7a:41:6d:94:cf:5d:e0:11:fc:dd:11:84:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
        Validity
            Not Before: Jun 13 07:00:58 2026 GMT
            Not After : Jun 14 07:00:58 2026 GMT
        Subject: CN=4ce30bf1228df450c8ea31d280cec9798db19501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:d1:bd:3f:39:cd:fe:b4:02:69:d9:0d:82:
                    d8:31:19:ef:97:ae:76:aa:8e:d0:cf:5b:2d:e6:be:
                    92:2a:b9:65:81:89:75:47:ec:cc:fb:9d:95:c4:f2:
                    f8:11:ca:d2:45:5b:7b:01:d6:d4:41:61:5a:49:d1:
                    86:90:87:e1:0c:7b:3f:66:e6:ec:b0:77:03:36:79:
                    c5:4a:52:78:4c:c5:a9:9d:19:1c:8f:01:df:09:d6:
                    2d:a1:6c:39:3b:36:eb:0c:c0:b4:1e:26:e5:4b:87:
                    30:e8:61:37:ca:9a:c1:89:bb:56:1b:e7:6f:49:58:
                    c1:a8:42:dd:7c:f3:59:b2:43:fc:d2:60:54:df:38:
                    ba:80:22:3c:f1:07:94:49:dd:d6:ff:51:80:8b:68:
                    de:f6:51:77:2a:74:63:25:3b:d1:85:e8:0d:3b:41:
                    13:be:42:7e:b6:2a:e6:a1:1b:ca:2c:fe:3e:d6:41:
                    d1:85:2c:d1:99:12:df:75:ea:3d:03:96:15:c8:4b:
                    c4:0d:d7:5b:87:00:2d:5d:98:ef:10:94:a6:b2:41:
                    7a:ea:13:01:8d:7a:41:d4:f4:59:c7:ad:71:07:8c:
                    f1:03:08:13:6c:c7:2c:b5:53:aa:ac:c4:05:d7:98:
                    9d:c3:5a:64:7c:b8:e6:ab:bf:70:da:53:58:3b:01:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E3:0B:F1:22:8D:F4:50:C8:EA:31:D2:80:CE:C9:79:8D:B1:95:01
            X509v3 Authority Key Identifier:
                keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:eb:44:0e:72:12:55:e6:c4:b2:38:fe:b5:f6:26:d7:69:
         b4:59:12:65:69:86:92:9d:d4:37:fa:98:06:6e:bb:22:e8:3a:
         6d:96:16:fc:c1:e5:92:65:61:a2:54:61:2f:fd:6a:b2:4d:0e:
         44:58:fe:f4:b0:9b:5d:9a:2c:d4:ed:26:ad:4d:af:c5:40:97:
         4c:1f:2a:d8:e5:6d:90:98:95:bc:f0:d7:8e:f4:f7:7a:0b:e8:
         8e:5c:86:66:d0:24:30:8e:43:c3:d9:5a:8a:d3:e4:76:47:15:
         f2:4b:99:0a:99:c5:98:80:29:79:ed:33:89:21:e7:fd:93:b8:
         f9:bd:86:44:ea:58:95:3c:5b:25:4d:aa:e1:98:5e:af:a1:82:
         b1:6e:02:8a:00:6c:92:a4:ad:95:fb:04:19:27:80:48:16:f3:
         af:27:f6:86:45:d0:a4:55:b8:44:ea:37:46:d9:c2:52:d2:18:
         0d:aa:64:d0:50:53:ff:ec:ae:ac:04:47:de:45:0e:9c:fb:63:
         da:63:84:21:a2:88:53:ea:63:8f:fa:01:7d:99:a2:8e:4e:63:
         fa:68:2a:3b:89:75:70:61:05:45:45:0d:85:41:59:77:91:f4:
         95:65:55:de:a9:03:ba:a3:fa:79:f8:22:94:53:77:89:fc:b9:
         d0:71:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:39 2026 by rpki-client