Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File:                     Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier:          V37spMRWnaSUB9D/PkhP2OPArsOiHNDCjeoUu+3yU7U=
Subject key identifier:   56:82:30:44:14:49:92:30:5C:80:93:28:5A:02:3B:5F:71:4E:76:90
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer:       /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial:       01A1DCB8C863D9A28846746A6B49763368D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number:          0B79
Signing time:             Sun 15 Nov 2026 01:00:59 +0000
Manifest this update:     Sun 15 Nov 2026 01:00:59 +0000
Manifest next update:     Mon 16 Nov 2026 01:00:59 +0000
Files and hashes:         1: 1-OTLSt9bxerjVQrXim1tii-2o9E.roa (hash: pXJ9LGfvy4+1EbvSdA31KaVxZBu7t1Z+nzZrQNY4cjI=)
                          2: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (hash: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=)
                          3: Axb5MTof7fk-anNZXzHyNvLvYvg.roa (hash: HOYWdRZLCpSn9qcwi8QakMqzLqB9ckVUi9jVW/8+P2w=)
                          4: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
                          5: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: Mm+TTc5ium2xTLg1BrA9oKr/fpsIXfx5lZNTjWWbWGM=)
                          6: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:b8:c8:63:d9:a2:88:46:74:6a:6b:49:76:33:68:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
        Validity
            Not Before: Nov 15 01:00:59 2026 GMT
            Not After : Nov 16 01:00:59 2026 GMT
        Subject: CN=56823044144992305c8093285a023b5f714e7690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:91:01:d9:f4:28:2f:a9:67:73:15:2e:a1:
                    db:3a:57:72:5f:db:9d:b0:20:39:40:b2:d4:97:81:
                    da:bb:38:c6:83:2b:9e:40:b1:76:15:86:c4:c4:5b:
                    7d:5e:9a:d4:4d:15:7f:67:b5:87:66:3e:03:0d:3a:
                    40:87:57:24:e2:00:28:c3:f2:d2:fc:10:ce:50:8a:
                    f0:9e:cd:0c:44:2c:15:4a:42:50:c7:46:9d:97:2b:
                    2c:e8:23:ce:e0:4e:5d:f0:b5:ce:e8:ad:a1:63:38:
                    cb:f9:cf:af:81:23:fa:0f:99:85:45:33:a6:65:24:
                    00:24:67:f8:ff:0e:ff:8c:40:9f:78:f9:07:e0:33:
                    f9:ae:1b:cb:a2:c0:e9:94:23:4f:8d:e5:56:a2:b7:
                    fb:6e:88:b0:4c:52:e9:04:2e:56:b5:2f:e0:5d:0c:
                    72:22:9a:7b:ce:73:11:69:56:df:c1:dd:0c:cd:25:
                    76:77:45:d1:ce:24:e0:3c:ab:01:f0:87:36:9c:fb:
                    32:aa:19:ba:5d:45:e5:33:9c:54:67:ff:b1:b8:50:
                    0f:cd:83:40:7d:41:c6:3a:ae:c1:07:5f:69:07:20:
                    ba:9b:09:c4:db:65:75:53:c5:11:e4:d5:8a:17:90:
                    44:4c:ef:b1:67:ca:c6:19:bd:f0:5e:13:b6:de:b5:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:82:30:44:14:49:92:30:5C:80:93:28:5A:02:3B:5F:71:4E:76:90
            X509v3 Authority Key Identifier:
                keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1a:4b:0d:b3:2f:08:96:3f:29:77:86:e9:e6:d8:46:15:37:
         f9:12:33:67:53:be:ba:5d:0b:f4:27:bc:db:ba:ef:b9:19:7b:
         53:9e:67:47:e7:12:fe:f7:68:db:3b:c0:94:1c:0d:09:78:32:
         da:eb:b0:5d:85:76:5e:ba:e8:32:a7:ba:ca:9a:5e:56:1c:77:
         2f:41:1a:ea:f6:d6:03:31:5c:87:5f:74:4e:79:c7:ad:e4:6b:
         3e:82:b0:f6:4c:1a:bf:2c:f8:1f:3c:b1:33:79:f3:36:08:53:
         f6:5f:d3:37:81:d7:bc:1b:55:1b:d1:0f:7a:32:22:55:10:b0:
         cc:53:c1:87:42:11:55:e7:ca:c8:62:36:bd:81:9b:04:2a:00:
         c4:5b:91:f1:12:f5:64:1f:35:fc:ba:73:78:31:04:4f:94:6b:
         a0:24:29:50:b5:93:c4:17:cc:18:17:b7:49:24:4a:44:60:97:
         25:2a:2c:7d:92:b9:19:b2:f7:9d:8b:25:e9:96:11:40:e1:54:
         37:ab:6b:a6:73:9c:3c:b7:33:ca:dd:e4:9c:f1:7f:38:fb:6d:
         49:b2:5b:b7:a8:da:68:4c:ea:0c:b9:fd:e9:1e:07:9f:d5:d7:
         09:1d:51:fd:16:e1:c5:7d:b0:79:d3:43:7c:b7:cc:f7:d9:96:
         a3:81:f6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:53:24 2026 by rpki-client