Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File:                     Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier:          C2xe5pxh3GEFUrDSCtfWLXkd5cjGzqLpCDnBndbvM24=
Subject key identifier:   9A:FE:20:09:8D:21:7B:00:2E:06:A5:A2:33:70:F3:B5:54:62:5A:D0
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer:       /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial:       019D99622CB5124D8C7556EC9D109E3E44FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number:          0942
Signing time:             Fri 17 Apr 2026 03:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:41 +0000
Files and hashes:         1: JoUKfEu67T1yJyCyuLRPbJCk_UQ.roa (hash: /JFcfYSQ61PUPBzY8BJBcJYoayzrujrEpWXJsY4TO/o=)
                          2: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
                          3: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: 5kF80KVYsRrAQQ59i65riWB/1snBuI0kT7wKDVwpwwI=)
                          4: T9bowjYXEErwoaVYRV05cPhQNYY.roa (hash: K7Owe1SM069q+ebSYvPGJjD8paXxVB14K/5eVIO60Es=)
                          5: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:2c:b5:12:4d:8c:75:56:ec:9d:10:9e:3e:44:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
        Validity
            Not Before: Apr 17 03:00:41 2026 GMT
            Not After : Apr 18 03:00:41 2026 GMT
        Subject: CN=9afe20098d217b002e06a5a23370f3b554625ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:90:d1:d7:a3:03:14:0d:b0:de:37:21:9c:
                    e3:f7:13:02:f7:29:06:01:c4:fc:b3:fc:58:81:4e:
                    21:bc:f1:f0:e0:d1:57:96:67:bb:73:44:f0:4a:9f:
                    d7:2c:37:4b:e6:7a:c0:53:a5:be:9a:c6:a6:4c:20:
                    5d:da:da:e7:f6:6f:c8:2a:a6:2d:0e:66:60:53:60:
                    b3:24:f3:80:09:c7:8a:8a:31:58:17:c2:50:44:6e:
                    66:87:96:c3:43:51:0d:40:00:4d:db:9b:ce:5f:9d:
                    17:f5:43:ce:da:f1:b1:51:01:28:10:1f:9b:f6:7e:
                    34:90:c2:d1:0e:f2:88:e0:65:bd:ed:50:6e:c8:ad:
                    c1:ab:15:b1:c7:2e:1a:af:83:3f:c1:12:2f:84:8d:
                    5d:d9:6a:05:d0:f4:8d:8a:78:e0:c5:47:63:68:9f:
                    b7:23:05:6e:00:f6:04:17:74:1e:86:08:38:c6:76:
                    82:70:24:38:0f:77:3e:e7:1b:aa:4a:72:72:70:a2:
                    ab:19:cd:47:89:ec:07:1e:2b:79:e6:c4:8c:ed:59:
                    f7:2e:0f:a2:07:bc:32:90:fb:9b:99:8f:cc:7a:32:
                    a6:e1:0f:f5:8c:ba:61:6b:e7:c8:d2:5f:35:d5:bf:
                    be:68:f6:42:0d:1f:12:b2:6d:21:22:3b:77:78:6d:
                    de:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FE:20:09:8D:21:7B:00:2E:06:A5:A2:33:70:F3:B5:54:62:5A:D0
            X509v3 Authority Key Identifier:
                keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ca:cb:ea:b6:16:66:5a:2c:fe:61:92:cf:0d:ca:f4:41:e4:
         1c:e3:07:e6:e1:68:31:77:a8:fc:de:0b:f6:0a:9e:1e:3c:d4:
         68:fd:8b:b6:db:93:61:ff:03:94:e3:a6:cc:2a:14:a6:08:58:
         92:fc:17:d9:2e:78:10:0d:8d:d9:ff:d9:0e:46:25:f9:6b:af:
         84:48:0d:31:fd:51:20:be:8e:c0:3c:18:37:22:67:c7:e7:85:
         fe:b3:ff:ec:fc:33:48:52:a7:8c:17:16:f2:b5:9d:3a:e6:fc:
         df:f1:3b:d4:98:09:8c:bb:91:5c:78:35:5d:cc:84:f7:5c:6a:
         1a:a9:c5:54:1f:ee:af:a0:dd:ae:8d:aa:f1:72:18:46:a4:bb:
         e2:0f:66:00:c3:ed:ea:58:29:d8:67:e8:bc:f8:27:75:c0:4f:
         64:fd:57:82:96:46:fb:24:cd:9c:c1:ab:60:44:30:25:34:83:
         b2:18:a6:74:40:30:63:fa:19:00:93:38:ef:07:b0:e6:d8:c0:
         e4:81:2c:d5:17:32:93:c1:38:96:7a:9b:86:47:d2:c7:47:88:
         56:70:45:f9:5d:b5:f4:4c:c7:6f:b2:c2:41:d8:0d:cc:fb:1e:
         9f:6b:23:34:4f:bb:0d:31:bb:9e:22:32:c4:d4:8b:07:4e:25:
         d9:30:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:31 2026 by rpki-client