Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File:                     om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier:          RJPxIHdj/JLEYi/Ku95tQwceLU4it92GHMydYkJiiGs=
Subject key identifier:   7C:1D:FE:FA:F8:46:FB:D6:EB:34:2C:E3:EB:EA:44:4B:36:DF:FE:E5
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer:       /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial:       019D9A0721E88175CC529864A45BF4700C9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number:          1855
Signing time:             Fri 17 Apr 2026 06:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:51 +0000
Files and hashes:         1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
                          2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: 7h7Go1YxVIN4Eg39+VDt5xGsBzJo0dGiCJ+3uvxHhzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:21:e8:81:75:cc:52:98:64:a4:5b:f4:70:0c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
        Validity
            Not Before: Apr 17 06:00:51 2026 GMT
            Not After : Apr 18 06:00:51 2026 GMT
        Subject: CN=7c1dfefaf846fbd6eb342ce3ebea444b36dffee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:95:d3:4a:1b:d1:55:aa:0f:a8:a3:d4:8c:
                    95:bf:c1:32:f7:f9:51:a0:91:cc:f4:af:19:ac:60:
                    7f:2a:4f:15:2a:e4:0f:58:eb:af:7e:78:c5:2e:78:
                    eb:48:11:a6:86:ef:5e:43:77:81:1c:a3:56:73:65:
                    03:cb:2a:c8:8b:61:27:a0:13:ac:61:a9:00:0a:34:
                    f4:58:84:15:5a:f4:3b:f0:1d:5c:df:14:09:d5:07:
                    d4:13:30:fb:e6:fb:8b:3d:93:a9:9e:1e:55:76:41:
                    da:ad:f0:1c:c8:6a:27:7f:c7:ac:aa:d4:37:db:12:
                    fe:19:c6:e4:0e:6e:20:e6:ab:bf:d4:66:72:68:48:
                    47:ed:1c:26:93:09:66:26:35:2b:be:23:fe:c5:c9:
                    56:cb:8f:d8:66:91:63:5a:61:1e:9b:3d:6e:ab:90:
                    2a:03:e9:7d:76:07:d4:32:3e:8a:70:d7:6a:a8:46:
                    8d:8f:38:a4:78:a1:34:77:1f:4c:36:ed:33:d5:3c:
                    b9:80:8e:ff:77:1a:69:d3:d2:4c:b8:15:57:28:97:
                    16:8c:ac:4a:df:22:40:53:d3:24:89:cf:1f:cf:d7:
                    e7:dd:14:88:58:42:d2:33:e4:96:3e:2d:4a:08:8f:
                    1f:b3:3b:67:05:8a:0f:29:ac:9e:2d:f9:7b:e9:bc:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1D:FE:FA:F8:46:FB:D6:EB:34:2C:E3:EB:EA:44:4B:36:DF:FE:E5
            X509v3 Authority Key Identifier:
                keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7b:55:81:2b:a4:2e:98:a1:32:bf:a7:e4:1a:a5:49:b9:42:
         a0:38:15:bc:4c:f1:69:ff:27:7a:10:44:45:8b:3a:0e:e9:c1:
         c3:47:88:7f:c0:f0:2b:e2:81:fc:7e:14:86:5e:41:25:ad:04:
         e9:d8:a5:d6:4a:76:c3:cd:66:6c:31:ce:d8:b4:0e:26:ee:f3:
         01:a4:78:fc:bd:52:bc:f1:d8:78:5c:6f:61:9d:1d:a8:bb:f0:
         87:84:94:94:1b:71:99:bf:e9:90:10:28:d0:1f:80:44:22:2f:
         2e:f3:4f:8d:b6:54:8d:85:35:01:db:30:3c:04:8b:68:d6:a1:
         df:a1:ce:b1:37:04:1e:45:5f:53:90:a0:fd:2d:88:e6:88:6b:
         94:79:6c:dc:2e:da:71:e5:15:54:31:de:36:11:46:8a:f9:f9:
         61:db:4c:0d:1c:0b:f1:40:01:54:41:28:5c:a1:08:64:1d:68:
         1e:f3:3d:d6:d5:5e:f3:d2:9f:54:37:6c:12:e1:4a:97:f2:20:
         7a:d3:48:95:ff:e2:4b:23:69:e6:af:42:1b:00:8a:07:a3:66:
         ec:93:e8:0f:44:59:fc:2d:21:13:2c:59:00:6b:ce:f7:11:d7:
         45:e6:9b:e6:e7:58:e3:fc:15:fc:bf:d7:e5:4e:5d:e4:28:f6:
         d2:87:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:43 2026 by rpki-client