Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File:                     om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier:          VlO7t/rDKN3etCAJs+LzkYmwhGxazbTjR01JeuZll2k=
Subject key identifier:   C2:42:B4:25:C3:31:FD:4E:D0:7A:AD:2B:E9:C0:F1:2D:BB:E3:32:E1
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer:       /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial:       019DA48ABA17F478DF8ADF05F0A17E33E542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number:          0F93
Signing time:             Sun 19 Apr 2026 07:00:48 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:48 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:48 +0000
Files and hashes:         1: 48VETktm8u5cwxfi5tzhrXCS1PA.roa (hash: pocJNPkIQ+wfrZHo23pdtb1YIKYD79x6IBlh2144Vzk=)
                          2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: OrY2KiAt5vuyfOp3XzCKiZBqS/GMMDxxV64xv5XL4pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:ba:17:f4:78:df:8a:df:05:f0:a1:7e:33:e5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
        Validity
            Not Before: Apr 19 07:00:48 2026 GMT
            Not After : Apr 20 07:00:48 2026 GMT
        Subject: CN=c242b425c331fd4ed07aad2be9c0f12dbbe332e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:47:4e:2a:40:a1:f9:ee:58:f5:1c:81:fe:
                    c4:b5:69:63:31:85:fc:8c:33:c6:5d:ca:23:75:55:
                    6e:a5:fc:8c:e5:df:c1:25:64:48:b9:09:c5:5c:f8:
                    a2:ce:3c:bf:08:3d:ac:32:81:e8:9d:84:03:fe:e0:
                    fb:0b:92:f0:09:74:5f:f4:5d:bf:9e:9a:8d:49:ec:
                    a1:91:24:3d:b3:69:fa:83:e0:f1:ea:f8:f1:ea:79:
                    db:72:fb:5b:ca:97:72:60:8c:e6:e1:73:79:99:51:
                    56:e4:1a:c5:4b:26:ff:62:41:78:83:70:d2:92:44:
                    02:3b:45:63:be:a0:ce:3f:d5:88:64:7a:9f:3e:e0:
                    d5:c7:64:f5:ec:1e:0b:01:d6:66:69:ba:84:7f:48:
                    77:ff:ea:e3:28:c8:52:1d:35:fd:4d:82:bb:5e:13:
                    ec:ee:33:b3:84:0d:b9:6d:6e:ae:8a:7c:52:39:7f:
                    92:f3:bd:6b:d2:86:47:29:89:5b:93:b8:8a:18:1f:
                    09:a2:5e:56:82:90:7b:e8:a6:00:8a:9a:ef:33:19:
                    8a:75:b6:8a:ee:bf:47:0e:94:40:dd:af:a7:10:28:
                    3b:61:9c:b2:29:4a:1a:20:2c:83:3c:c5:b3:4c:7a:
                    32:74:a6:2d:4d:4c:30:9b:c7:a5:c3:0b:55:63:a9:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:42:B4:25:C3:31:FD:4E:D0:7A:AD:2B:E9:C0:F1:2D:BB:E3:32:E1
            X509v3 Authority Key Identifier:
                keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b1:c7:8a:ca:87:ec:52:dd:4d:c0:bc:fe:ab:3d:35:58:0e:
         d3:c7:fd:8c:67:cb:69:c1:a9:c4:66:e2:40:62:ff:96:58:10:
         7a:2f:6c:40:56:18:9b:e8:9b:c3:81:67:66:1c:0b:3b:7c:27:
         d5:aa:11:b0:01:30:54:24:8a:86:0d:28:a8:48:23:a9:7f:ef:
         47:19:dd:cd:0e:c9:57:af:ce:57:dd:03:e1:db:5a:5c:5e:08:
         26:be:b6:d5:1a:f8:82:82:ae:52:d1:6a:90:79:c1:dd:63:ea:
         3c:47:f4:29:7c:43:4b:5f:44:76:e9:a5:22:0b:4b:18:7c:7d:
         1b:60:ad:0f:1a:f7:16:11:37:aa:bc:2b:d3:bb:02:28:2e:c5:
         14:b5:d9:8d:34:7d:3f:97:6b:cf:c0:bd:8a:ea:38:5c:c2:f4:
         a2:ab:40:86:94:53:49:13:fc:02:12:69:69:7c:77:26:27:a6:
         d6:d8:7a:f5:86:6e:37:a3:49:e4:57:ba:2e:fa:19:58:8e:ee:
         61:0d:70:82:3b:3d:08:df:80:67:ad:96:00:dc:9a:af:79:f3:
         45:5d:41:45:f8:49:41:e4:f6:16:72:c6:08:06:55:4f:93:52:
         55:d2:4c:61:21:b0:56:ef:2c:db:34:19:3f:33:d9:aa:1d:5e:
         98:29:2c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:45 2026 by rpki-client