Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File:                     om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier:          EYzwcAdHVnhYmzAIbBLSUGdh32YjneQ8EJiAAlOuDgE=
Subject key identifier:   F8:64:A0:52:7F:3C:8E:90:D6:3A:92:4C:83:F9:EB:94:40:F6:35:F4
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer:       /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial:       019EBF91742B04719DDDDC5EC38B29A52F8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 06:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:41 +0000
Files and hashes:         1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
                          2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: 9wCZazA2VK62wCRXPYStRxcJ8J13Y2X5RccBRzqW/rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:74:2b:04:71:9d:dd:dc:5e:c3:8b:29:a5:2f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
        Validity
            Not Before: Jun 13 06:00:41 2026 GMT
            Not After : Jun 14 06:00:41 2026 GMT
        Subject: CN=f864a0527f3c8e90d63a924c83f9eb9440f635f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:09:97:81:4e:2a:2a:12:77:8f:cd:76:cc:68:
                    de:6d:0c:59:0a:65:e9:6d:78:f3:b6:22:d8:3c:8d:
                    2d:3d:3a:14:a8:49:a1:e7:13:c4:1a:6f:3c:f2:88:
                    57:13:70:a7:f0:70:a1:5e:b8:fc:1e:f6:24:24:79:
                    46:d3:dd:22:c8:49:ce:9b:ee:0a:66:68:04:75:19:
                    d4:55:14:ce:18:d8:16:d0:ee:d2:8d:1e:b1:9f:4a:
                    ae:2d:4e:16:0a:0d:f7:08:1b:58:da:22:88:09:c2:
                    87:9c:f4:21:37:2c:f8:cd:64:ba:8c:82:38:17:06:
                    e3:c5:29:a5:3c:f9:55:c6:8c:30:44:1e:39:18:bd:
                    0f:f7:c5:0b:54:58:ea:ee:11:86:88:f2:eb:50:ed:
                    ec:a7:ad:af:8b:9d:5c:0c:9d:7f:2e:a5:96:58:ac:
                    82:92:03:55:ed:e7:fc:8d:1f:fc:46:09:27:de:56:
                    0c:a4:53:22:dd:1e:4e:41:16:60:88:f3:77:08:36:
                    51:75:8e:de:29:78:6f:66:b7:c3:04:b0:2c:4c:ad:
                    0f:fa:e5:ae:38:5b:cb:80:4c:7a:d4:4d:4d:e0:f3:
                    d7:37:41:a6:97:86:9e:a9:c4:c4:5d:33:b6:6a:46:
                    a8:42:43:e2:f8:d8:2b:ee:f2:26:df:e1:e5:5d:f7:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:64:A0:52:7F:3C:8E:90:D6:3A:92:4C:83:F9:EB:94:40:F6:35:F4
            X509v3 Authority Key Identifier:
                keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d7:df:06:e9:9d:4a:e6:06:f7:6e:99:b5:19:b3:f1:25:42:
         0e:81:da:43:07:0d:dd:3b:e3:45:05:39:9e:ab:4f:60:ac:c8:
         ef:21:fd:b1:1f:c7:b7:38:16:37:c4:b2:34:0f:cb:52:3f:db:
         2b:e0:60:bc:2a:fa:63:89:8d:28:eb:d5:df:c9:17:15:7d:13:
         d8:2d:8b:f2:25:d4:33:59:3d:30:ef:7b:59:98:f9:e8:3d:3a:
         74:bc:f1:03:d1:b6:ea:a0:90:19:be:66:36:4c:81:5c:82:cb:
         db:c0:be:97:50:e0:58:4a:22:e3:dd:df:4a:1c:c4:c8:95:18:
         19:a4:35:58:fb:89:a5:26:f0:1f:5f:bc:4e:9a:be:e0:10:64:
         ce:f6:8c:a8:1b:82:38:1d:18:2e:86:45:d5:48:6b:9a:38:54:
         a2:83:14:80:b4:65:29:b0:e5:43:ef:11:cb:e6:08:9d:78:5b:
         e6:bd:7d:a1:7b:ec:0c:c7:80:09:53:c0:35:36:b4:21:d9:31:
         36:d6:59:31:3c:c4:9f:73:10:24:3c:63:64:3b:80:eb:04:e5:
         70:6e:a7:a8:48:cf:7a:ef:3a:c4:a1:63:d3:48:9f:9b:e6:57:
         62:0b:2d:f5:e6:e5:3b:ff:fc:11:c7:db:ae:9b:31:eb:1e:43:
         b7:11:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:35 2026 by rpki-client