Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File:                     oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier:          ZdAZUQK6s1mEE5CyFWMNgVqQshY+DMUCNV9bDn6WQFc=
Subject key identifier:   54:EC:1F:99:C6:18:99:F1:5D:94:DE:10:19:A9:33:EF:3F:C0:F9:6E
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer:       /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial:       01A1069307F8DAF8F8E017866A341BBB61F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number:          1A1C
Signing time:             Sun 04 Oct 2026 11:01:01 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:01 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:01 +0000
Files and hashes:         1: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: iM1WAY+OhYeUzu5zjT0HjjJGT5brpZRuDVbfFB93H1I=)
                          2: p7q0kuT4l_QfTZ5_ImIne2o94fw.roa (hash: +S1UVYMeaTeGs9fWcZKSGrpvJ3bbJy0eiN+e0mJvcII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:07:f8:da:f8:f8:e0:17:86:6a:34:1b:bb:61:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
        Validity
            Not Before: Oct  4 11:01:01 2026 GMT
            Not After : Oct  5 11:01:01 2026 GMT
        Subject: CN=54ec1f99c61899f15d94de1019a933ef3fc0f96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3b:5a:8e:49:08:8c:e0:70:17:44:2b:38:92:
                    f3:d6:e8:33:86:01:cf:08:44:c6:c7:2d:e8:86:34:
                    ae:86:62:b0:02:9a:85:6e:82:d2:a1:c6:1a:2d:0f:
                    f9:7d:b1:25:88:0d:22:49:50:44:ea:98:15:da:7c:
                    14:8d:22:24:51:4d:db:32:8f:00:80:fa:95:26:3a:
                    c1:08:22:da:f3:af:78:91:94:88:40:49:21:8e:14:
                    47:76:07:ba:b4:84:f6:9b:a3:73:96:c4:32:fa:9d:
                    1c:b9:0f:5b:e1:a8:f3:ef:11:e2:15:aa:0d:7f:02:
                    98:44:b1:f0:a2:42:85:cc:17:10:eb:47:92:30:1e:
                    35:8f:40:9c:40:5d:75:8e:c6:eb:ff:b6:66:f6:56:
                    74:f7:97:62:1e:ff:68:3a:b9:8a:f9:de:95:9f:e7:
                    5c:7a:95:30:03:d0:ec:fd:70:68:90:ce:a9:e6:74:
                    54:ce:53:e2:c0:50:f8:eb:35:a1:46:75:b6:d8:e8:
                    7e:7f:b9:f6:cb:13:af:4c:88:a3:66:90:8c:fd:75:
                    4b:00:5d:6a:9b:1b:8c:aa:41:62:59:05:f2:14:fa:
                    d2:42:69:ee:b9:88:09:ea:77:10:b9:2f:43:58:78:
                    89:bc:0c:9f:0f:90:32:26:47:f3:cb:b0:61:f5:ad:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EC:1F:99:C6:18:99:F1:5D:94:DE:10:19:A9:33:EF:3F:C0:F9:6E
            X509v3 Authority Key Identifier:
                keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e8:cc:8d:33:ba:fe:59:0e:36:df:f5:0c:a7:07:34:57:54:
         d0:ce:38:f0:d1:e0:bf:3e:da:4e:58:70:05:24:e8:7a:da:cc:
         a8:43:ae:77:51:24:65:11:57:85:d5:d9:b6:c0:93:9d:cf:d0:
         44:98:9a:0c:ff:9b:8a:39:00:34:56:55:56:0e:4a:0a:cf:51:
         93:a2:e8:34:fb:5c:ab:ba:39:3e:ca:61:15:80:5a:18:e7:3e:
         27:8b:08:af:66:0a:38:4e:20:11:df:75:b4:c2:fe:fc:ca:12:
         49:71:de:27:8d:bb:76:f5:21:c1:67:3e:ea:7a:d0:cf:9f:4c:
         0c:b4:13:27:1f:5e:1e:01:2a:8c:02:a0:40:99:7e:c9:0a:ef:
         2b:4a:38:91:cf:07:e0:9b:88:c2:89:dc:a2:ff:e5:82:da:68:
         f5:5e:bb:42:53:8c:76:54:76:96:cf:6d:dd:29:b9:ea:0b:17:
         9f:40:14:f8:1c:c2:44:6e:48:45:97:58:ad:a8:38:f4:31:8f:
         44:a0:94:9c:3e:24:54:9a:ca:8d:72:32:f7:e9:ee:a0:56:57:
         26:97:33:e1:1c:43:49:a7:a5:93:59:0b:39:8e:bb:ac:6b:27:
         1f:07:aa:fb:47:28:57:4d:04:bd:26:10:0d:30:b8:d1:5d:61:
         97:54:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:07:30 2026 by rpki-client