Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
File:                     Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json)
Hash identifier:          ahePOeE4NuRmY9lLzsw5XnlQCqaTbu0P7TuLJzvJHcY=
Subject key identifier:   B7:3B:02:A0:18:83:4D:69:E1:6D:3C:09:09:5E:E1:C6:E4:65:B0:35
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Certificate issuer:       /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial:       019F91A3BD8413DC1DBCD37AA79D4DB4D3DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
Manifest number:          1488
Signing time:             Fri 24 Jul 2026 01:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:54 +0000
Files and hashes:         1: 45NAgDB6reu-erXNEESN-p09cvM.roa (hash: tQMQESDB/lcPTItmMJXfJlwNUfLcCJXoZ+NN7/bh2WQ=)
                          2: JaqR-Q1XpvizwsvI-kPY47fRqMs.roa (hash: gzQ9Ftm7Gk050dXtwRWunltOfemqcE+EB8R+/Ghu8FE=)
                          3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: OPDFkTbKpg4Xd4+twVj0Cjwn+VovWN7OhZXXdMGQaYg=)
                          4: ZyJM5BuiXRdQwp8CTGPeW7hXFhQ.roa (hash: sJFYdvfIFI7XLe3RcotKCLHPJQZ5SZe+aPUoxKb9ID4=)
                          5: lyRXIvB-zm4H5fi5XUDSXwMzWYk.roa (hash: PP50Q9MOjUz3zniPrlR3x+kz4+woEcIafSr6taXbTAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:bd:84:13:dc:1d:bc:d3:7a:a7:9d:4d:b4:d3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
        Validity
            Not Before: Jul 24 01:00:54 2026 GMT
            Not After : Jul 25 01:00:54 2026 GMT
        Subject: CN=b73b02a018834d69e16d3c09095ee1c6e465b035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:6e:27:99:cc:b3:39:91:79:26:d6:59:ab:
                    35:61:71:6e:ba:fe:e8:e3:3e:ff:02:cd:cf:a8:ee:
                    a8:a0:7c:59:e1:5f:0f:a7:98:6d:fb:6c:a7:79:06:
                    98:9d:57:06:c4:c4:ee:9a:9a:77:4a:b4:1a:26:5f:
                    eb:8c:9b:f9:d4:e2:02:4c:83:2e:0a:06:5d:e5:13:
                    c1:b5:32:13:93:78:da:2e:2d:4d:0e:3f:13:7f:99:
                    0d:95:74:06:61:b8:a9:b6:2f:7b:28:34:da:42:8b:
                    64:1e:a0:f8:50:5b:7f:f2:7f:e4:6d:69:8e:e9:ae:
                    48:d6:61:60:ee:9b:30:ae:d4:e7:8f:d0:9a:74:cf:
                    09:92:d1:61:71:76:e9:cf:7e:20:1d:97:ee:7d:56:
                    6b:db:ac:40:8d:60:ad:89:88:54:3f:00:41:ba:02:
                    79:49:34:de:e3:69:2f:0e:fe:80:8b:d0:b4:e5:36:
                    76:96:08:91:12:91:61:8f:0b:3c:24:32:d4:78:f9:
                    8f:08:c3:b6:30:a5:f9:ac:54:cb:ed:df:b0:32:6c:
                    54:52:62:fa:03:1b:6d:72:f7:78:a3:82:18:bd:68:
                    b7:cc:de:4f:fe:96:ea:90:16:30:c3:79:1b:e0:be:
                    0a:13:b9:f0:71:15:8a:55:9a:04:b7:07:6b:c1:33:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3B:02:A0:18:83:4D:69:E1:6D:3C:09:09:5E:E1:C6:E4:65:B0:35
            X509v3 Authority Key Identifier:
                keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b1:66:b9:35:e8:a9:37:19:25:5f:84:a1:c3:93:a1:85:56:
         53:f3:14:80:72:46:f5:62:fd:49:31:05:7b:86:fb:53:a7:cf:
         51:fa:92:31:93:d1:cf:ca:b4:f3:be:ca:80:87:19:7c:98:8a:
         95:bf:01:b6:98:4b:ff:5a:65:66:d3:77:de:d4:e7:71:b1:9f:
         43:ca:30:da:2a:11:d9:39:dc:89:b7:e9:b9:6d:e6:14:0f:2c:
         54:ae:3d:50:c5:35:ce:91:12:51:1c:1e:fd:ac:05:8a:b6:b3:
         9b:07:8e:b5:a6:9a:6e:3a:a6:a4:8c:a4:d2:e0:49:75:ed:00:
         d7:cd:7e:88:25:e6:4b:8a:dc:d3:1d:45:18:9a:cc:3d:75:da:
         0d:25:79:e7:41:58:8a:41:80:ca:bd:6f:28:3f:0a:51:9b:e2:
         79:bd:bc:55:04:83:cd:47:32:6c:37:de:f3:89:17:7f:ea:1f:
         58:5f:91:11:63:76:5d:de:2c:09:4f:05:47:a9:56:ee:45:72:
         2e:a3:f2:f4:c4:0d:64:f1:18:2e:87:69:1d:b8:c9:f6:a0:e7:
         64:3f:eb:ce:1c:17:16:94:10:ed:3e:b0:0f:59:14:b3:a4:fa:
         0f:6c:d1:06:1c:62:b7:56:1a:cf:e4:0e:e3:99:c7:11:d7:f8:
         9e:b3:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:03 2026 by rpki-client