Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File:                     OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier:          6FFAeuSY8GYDpvaSxIzSh03lvzX2ZwBDKfUtzfdiwVI=
Subject key identifier:   32:52:76:A0:C5:2E:A8:F4:0E:8F:89:96:35:FA:47:11:F3:07:C4:79
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer:       /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial:       019E1F482785CC7820EB3905DEF8D907BE09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 03:01:22 +0000
Manifest this update:     Wed 13 May 2026 03:01:22 +0000
Manifest next update:     Thu 14 May 2026 03:01:22 +0000
Files and hashes:         1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
                          2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
                          3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: r5Tdie50xj60R7UVVcOCTcapT+A0uJicUDhCGGpo1Zg=)
                          4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:27:85:cc:78:20:eb:39:05:de:f8:d9:07:be:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
        Validity
            Not Before: May 13 03:01:22 2026 GMT
            Not After : May 14 03:01:22 2026 GMT
        Subject: CN=325276a0c52ea8f40e8f899635fa4711f307c479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:1c:9c:25:91:36:a7:45:ff:19:2e:d5:ef:
                    c4:56:8f:6b:91:70:b1:52:d4:e6:3e:c2:02:da:2a:
                    47:f8:03:39:c5:9f:64:32:e1:64:59:fe:34:3c:93:
                    51:43:ca:8d:21:2e:1d:1a:f4:ab:c7:d4:d3:18:84:
                    50:41:f0:cf:c4:d5:39:f3:55:e6:93:b1:32:48:47:
                    8c:b7:ae:ac:e5:0e:c7:bb:12:10:db:7a:36:8f:a8:
                    92:5d:76:d4:96:91:1e:1e:9f:0d:48:a8:cb:0a:e9:
                    02:8f:aa:0f:36:8a:84:64:eb:f7:c9:94:85:75:0f:
                    0a:8f:9e:88:41:db:ca:e1:03:7c:3b:d5:42:d9:27:
                    33:a6:9e:9f:f8:ac:9a:0d:99:3d:47:ed:6b:06:e1:
                    52:a0:b7:aa:5a:f6:df:fd:25:32:45:44:34:0b:9c:
                    c0:ae:8a:d2:e4:4b:cb:4f:2e:df:dd:09:d2:8d:4b:
                    61:f5:66:1c:cb:f6:01:8f:80:f5:06:26:54:05:03:
                    3e:63:b9:91:b8:db:bc:96:3a:09:18:e2:5b:49:48:
                    71:8e:7a:0f:2e:d2:de:9d:29:59:c1:47:16:5d:e5:
                    49:0e:95:f4:bb:af:8b:53:a6:1d:c7:26:1b:de:ac:
                    28:67:ef:bd:d7:16:bd:10:d1:b6:f5:51:f4:e4:78:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:52:76:A0:C5:2E:A8:F4:0E:8F:89:96:35:FA:47:11:F3:07:C4:79
            X509v3 Authority Key Identifier:
                keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:61:e4:2a:97:dc:b8:12:4b:8e:8b:30:36:ad:2f:74:09:
         16:05:5f:ec:83:a9:c9:c3:ee:01:78:fa:0a:f9:28:1e:57:87:
         ab:06:1b:15:5c:5a:30:61:94:7c:7f:82:3f:03:b6:9c:29:1a:
         da:1a:27:aa:d6:1e:a7:b7:6a:fa:1f:ff:8f:24:4a:21:4d:0e:
         6b:50:1d:14:bc:ca:f6:9c:99:4c:b2:a6:62:1f:94:aa:6b:85:
         51:60:04:c0:6b:a5:c3:85:d9:73:88:e5:1f:2f:af:39:eb:b9:
         d8:bc:49:71:b9:43:d2:77:81:93:48:7b:8f:6e:17:de:43:c4:
         96:f3:73:44:55:f7:e8:f3:ae:e2:1f:b1:90:49:5d:3d:2d:7f:
         85:09:6e:2b:57:48:7c:41:e8:9c:42:59:71:1a:02:a6:ca:0f:
         18:af:dc:15:87:93:27:75:be:1d:82:bb:51:26:22:1b:33:f5:
         4d:dc:6f:2b:57:0c:4f:fc:bb:9a:de:46:8f:8d:2c:c1:62:cb:
         74:7c:6a:60:9a:b6:ad:6a:46:d5:2b:75:e9:f6:52:ac:89:de:
         06:3f:7a:5c:a0:f0:69:a2:98:09:9d:6c:72:fe:b9:55:9c:e8:
         d9:91:29:49:eb:bf:9e:a7:6b:c2:7c:42:e0:a8:5c:15:00:dd:
         b7:2e:81:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSCeFzHgg6zkF3vjZB74JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi
YjZkODAwHhcNMjYwNTEzMDMwMTIyWhcNMjYwNTE0MDMwMTIyWjAzMTEwLwYDVQQD
EygzMjUyNzZhMGM1MmVhOGY0MGU4Zjg5OTYzNWZhNDcxMWYzMDdjNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj0cnCWRNqdF/xku1e/EVo9rkXCx
UtTmPsIC2ipH+AM5xZ9kMuFkWf40PJNRQ8qNIS4dGvSrx9TTGIRQQfDPxNU581Xm
k7EySEeMt66s5Q7HuxIQ23o2j6iSXXbUlpEeHp8NSKjLCukCj6oPNoqEZOv3yZSF
dQ8Kj56IQdvK4QN8O9VC2Sczpp6f+KyaDZk9R+1rBuFSoLeqWvbf/SUyRUQ0C5zA
rorS5EvLTy7f3QnSjUth9WYcy/YBj4D1BiZUBQM+Y7mRuNu8ljoJGOJbSUhxjnoP
LtLenSlZwUcWXeVJDpX0u6+LU6YdxyYb3qwoZ++91xa9ENG29VH05HhYRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJSdqDFLqj0Do+JljX6RxHzB8R5MB8GA1UdIwQY
MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt
N2EwZjcyY2JiMmQ1LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1
LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrFh5CqX
3LgSS46LMDatL3QJFgVf7IOpycPuAXj6CvkoHleHqwYbFVxaMGGUfH+CPwO2nCka
2honqtYep7dq+h//jyRKIU0Oa1AdFLzK9pyZTLKmYh+UqmuFUWAEwGulw4XZc4jl
Hy+vOeu52LxJcblD0neBk0h7j24X3kPElvNzRFX36POu4h+xkEldPS1/hQluK1dI
fEHonEJZcRoCpsoPGK/cFYeTJ3W+HYK7USYiGzP1TdxvK1cMT/y7mt5Gj40swWLL
dHxqYJq2rWpG1St16fZSrIneBj96XKDwaaKYCZ1scv65VZzo2ZEpSeu/nqdrwnxC
4KhcFQDdty6BQQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:53:24 2026 by rpki-client