Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File:                     OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier:          5r9vTNRuCPHgQvGZJ5Sju0Y/N4SZVU82C2hYnWECnl8=
Subject key identifier:   4C:2E:52:E5:7D:F6:8B:90:85:EB:B2:61:B1:24:14:43:D1:B6:47:2B
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer:       /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial:       019E20921C5D85F8DCC434E19602256399E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 09:01:46 +0000
Manifest this update:     Wed 13 May 2026 09:01:46 +0000
Manifest next update:     Thu 14 May 2026 09:01:46 +0000
Files and hashes:         1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: EFEMvfVr0PYzlcyicstmuxxlSD2s/ZzVow/gi4+q7Kg=)
                          2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:1c:5d:85:f8:dc:c4:34:e1:96:02:25:63:99:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
        Validity
            Not Before: May 13 09:01:46 2026 GMT
            Not After : May 14 09:01:46 2026 GMT
        Subject: CN=4c2e52e57df68b9085ebb261b1241443d1b6472b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:21:c5:00:d7:07:00:6c:d0:65:58:b5:82:
                    56:00:f4:1c:d4:14:b8:07:ca:14:30:a9:76:c8:dc:
                    d8:2f:37:31:51:69:78:00:79:3a:0c:2b:68:65:03:
                    40:aa:3b:f0:fa:1a:28:ef:99:3d:3b:c8:0e:7a:99:
                    90:af:a9:80:1d:69:f4:a3:d1:0c:1b:c1:3c:ae:0c:
                    38:0b:2c:89:f7:67:df:23:cd:1b:91:3b:07:5c:16:
                    ce:fe:44:14:3d:96:61:69:06:91:40:e2:be:85:6a:
                    a2:05:20:20:12:16:75:48:41:7a:ef:47:f6:4c:ff:
                    5b:e5:a2:aa:69:f2:5a:08:63:bc:61:8d:6d:c1:b5:
                    f8:6c:75:55:1a:49:2f:af:92:67:af:5f:e2:5d:fa:
                    4f:6b:16:c4:37:72:3c:0e:e8:47:33:ea:81:94:a6:
                    6b:92:52:dc:1c:0a:fb:cb:41:93:c8:aa:fa:6a:b2:
                    5b:9d:14:81:73:03:b1:7e:65:d7:b5:ef:73:91:20:
                    93:84:3d:de:8b:7f:ed:98:79:7a:72:54:bf:99:05:
                    a9:ef:46:c5:bc:fd:a0:a9:06:e7:6d:1b:8f:9b:f7:
                    e6:1f:9f:10:eb:dd:3b:df:b5:eb:6f:10:a5:64:e6:
                    32:ec:3e:90:b8:a2:26:8a:00:ee:4b:bc:b1:32:36:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2E:52:E5:7D:F6:8B:90:85:EB:B2:61:B1:24:14:43:D1:B6:47:2B
            X509v3 Authority Key Identifier:
                keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ec:9d:ba:c1:31:23:4e:7f:76:87:6c:10:35:d0:95:8f:f6:
         2e:50:43:5e:92:e3:ed:03:64:a5:38:29:ce:f5:d0:f5:47:64:
         26:ad:59:1f:51:b9:00:0b:89:cd:a0:be:a8:12:2d:34:4e:57:
         f9:7f:5c:b3:39:9d:58:e3:51:79:ae:8f:c7:5b:0e:c6:60:58:
         9b:92:9e:29:9c:10:8d:7a:26:39:4a:a0:0c:f2:5e:87:47:e1:
         7d:2e:c0:24:9e:41:98:d9:96:a3:bc:98:26:64:6a:da:8c:0f:
         af:73:f9:a7:e0:b2:4f:95:5c:5b:87:2f:ec:d8:b1:80:3d:d4:
         e0:b8:05:7d:7d:4c:2a:3f:ad:e3:44:22:d7:f7:de:9b:e3:19:
         a7:14:d5:8d:d0:e8:38:d5:76:e1:0f:e5:56:7b:3d:ae:69:53:
         c3:2a:9c:69:3d:43:88:ca:63:3e:b9:43:77:da:c2:f5:3c:69:
         15:9a:b1:24:2d:ae:00:7a:11:0e:c0:81:8e:9a:82:60:e6:89:
         29:73:70:60:3b:a2:35:38:6a:5e:cb:ad:46:d1:fb:08:59:83:
         97:37:2d:4a:c6:cd:2e:3c:20:4a:f2:8d:c2:90:86:ae:b8:48:
         30:e8:ee:ec:ec:06:3d:ae:8f:72:1f:03:c3:ef:82:25:9d:e3:
         af:77:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:16:13 2026 by rpki-client