Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File:                     OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier:          Ur0oshY8HNqnb5757RFAZh8F381+521ZVfM9eRoAhUM=
Subject key identifier:   12:BE:95:16:13:42:45:9B:2B:7F:4F:7E:BC:C3:5D:B2:34:C4:25:94
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer:       /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial:       01A0E3993B9C3531780D0BBD001C14E8A1DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number:          06C6
Signing time:             Sun 27 Sep 2026 16:01:05 +0000
Manifest this update:     Sun 27 Sep 2026 16:01:05 +0000
Manifest next update:     Mon 28 Sep 2026 16:01:05 +0000
Files and hashes:         1: A2yTP0lhhFqNva3nkV1odyS6nwE.roa (hash: hsckG++ZXCzFReA5qOo98hpc0d00fMoMGiw+xttmqVs=)
                          2: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: GZeszJ+PKSDAqhC/klxsmKIicEwjLiXD1gCxZFelElA=)
                          3: uBcATutWZCzBK8D7bBIKL9bxPlQ.roa (hash: JIPy3fI3722I5dmkOB2XD2F/6xuJic82XKrmU7yYHNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:99:3b:9c:35:31:78:0d:0b:bd:00:1c:14:e8:a1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
        Validity
            Not Before: Sep 27 16:01:05 2026 GMT
            Not After : Sep 28 16:01:05 2026 GMT
        Subject: CN=12be95161342459b2b7f4f7ebcc35db234c42594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:85:9d:9d:cb:67:65:3a:3d:f3:4a:d4:9a:
                    77:5c:4b:d0:f5:d8:62:34:c1:94:97:1e:c5:f3:5c:
                    67:f0:fc:c3:12:de:58:58:24:9f:8b:a5:3f:14:fb:
                    e7:fa:3e:1b:9c:27:c7:5e:ad:30:40:d4:28:1b:4b:
                    55:f3:c0:39:3d:2f:2b:2f:6f:e6:a5:44:28:e5:b4:
                    40:2c:e3:6f:97:d6:46:82:2f:82:73:b4:db:da:6d:
                    de:f5:2a:b3:14:0f:45:3e:71:bf:0f:7a:64:e4:ed:
                    63:3b:c1:63:b1:33:63:ec:82:94:6f:4d:c6:cf:fc:
                    31:f9:fa:11:a1:e5:05:fa:29:92:d4:fe:b5:ae:3d:
                    e5:15:37:06:46:d9:e4:e7:7a:0c:e6:9b:25:a2:4f:
                    f3:78:f0:53:88:31:fa:6f:8f:6f:82:32:85:65:d1:
                    2a:35:85:25:2b:91:21:04:4e:0b:bd:b8:2f:a9:ea:
                    2a:52:9c:89:11:46:71:87:76:9f:ff:d7:ee:61:81:
                    8d:0b:25:7f:9b:ae:13:ad:51:15:de:f3:a4:8d:f5:
                    ad:56:6f:9a:5f:f5:77:14:e9:cd:5f:e8:dd:69:7d:
                    4d:8e:c2:b7:59:df:b5:ed:62:5f:f7:4d:2b:a7:83:
                    9e:75:08:10:f0:3e:d6:51:4e:07:96:2c:bb:be:b1:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BE:95:16:13:42:45:9B:2B:7F:4F:7E:BC:C3:5D:B2:34:C4:25:94
            X509v3 Authority Key Identifier:
                keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:74:af:47:16:3b:e2:e6:f6:a5:77:e9:8b:80:42:6d:57:85:
         c7:33:f4:04:04:9b:22:64:1a:60:15:71:45:a6:b4:da:46:1d:
         df:80:55:c8:84:1c:52:c1:8f:8f:dd:3a:30:27:79:e4:7e:aa:
         8d:58:d5:fb:57:9f:46:21:04:fe:67:d9:60:7d:9c:d2:c6:11:
         6f:c7:43:bf:7d:c5:34:ab:de:c1:44:0e:d1:cb:cd:68:02:c1:
         ca:a1:cc:de:a2:e3:68:cb:06:48:2c:ea:00:1f:04:83:91:54:
         fc:6c:9f:4e:a7:49:36:19:e8:9f:c0:50:4e:4e:ad:fc:30:e4:
         27:a3:e1:61:2e:9f:88:cc:06:60:64:bf:46:a8:1a:43:5f:d7:
         a3:58:5d:fe:5b:9c:62:fd:e1:ce:da:c2:29:ed:ca:cd:06:a4:
         6f:2c:7e:0d:ba:75:29:70:85:f7:20:c1:33:b3:e7:1d:f0:cb:
         fa:f5:ab:cd:d2:6e:bc:4d:1a:3e:e5:d4:c2:d4:d8:b5:d7:53:
         88:09:02:59:1e:af:5d:03:a4:3c:58:dd:ea:cf:cb:62:e8:32:
         bb:8a:b1:df:00:36:d5:18:8c:f5:fc:57:dc:64:72:f3:70:e8:
         58:2d:97:9d:d9:ea:23:aa:11:07:10:7e:d1:10:d2:ec:21:0f:
         92:24:0d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----