Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File:                     Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier:          YZFRzoiSq/7cxmpsnJrdW5CEl/IqqqlQ2g4QrDnm75Y=
Subject key identifier:   1E:76:6B:5A:5E:F4:ED:43:61:05:81:21:05:69:5E:C3:38:7E:42:D9
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer:       /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial:       019ED3F44164D91E8FC24B3AB650A827EFD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number:          097E
Signing time:             Wed 17 Jun 2026 05:01:00 +0000
Manifest this update:     Wed 17 Jun 2026 05:01:00 +0000
Manifest next update:     Thu 18 Jun 2026 05:01:00 +0000
Files and hashes:         1: 2vFmTEXL4sIOGvvxET_z9OsJtkM.roa (hash: hE+J8l/9QyGd/yFHBwyjIvFqStRGpbN8ok17t6YgQA4=)
                          2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: 2xfMPedXrg9NtfD1Qo7a2bW4KLWkFSGM8Dxp8KcnNk8=)
                          3: ngZkQQAAmyzs-8i5NBKDT7ozzfE.roa (hash: 6UMNzj0BfpUOXrwKXdq5vGzZXckdpCxU0zZpgK6Silc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:f4:41:64:d9:1e:8f:c2:4b:3a:b6:50:a8:27:ef:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
        Validity
            Not Before: Jun 17 05:01:00 2026 GMT
            Not After : Jun 18 05:01:00 2026 GMT
        Subject: CN=1e766b5a5ef4ed436105812105695ec3387e42d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:7c:91:f2:e3:bd:c4:bf:b3:1d:4b:2c:21:
                    62:c2:50:e8:64:75:a8:91:17:51:60:8e:41:1b:52:
                    98:4e:b8:4b:da:4e:e9:b8:b8:00:ee:dd:ea:80:d9:
                    1a:3e:2c:cc:ea:3c:02:f4:65:14:9a:9e:05:a4:26:
                    30:7a:bb:45:53:e9:06:79:bf:59:7a:6b:7f:c7:54:
                    74:77:83:67:f7:f6:63:ee:ec:40:61:4d:bb:11:d3:
                    8a:76:b0:62:9c:9d:76:77:e4:f0:92:4c:76:19:23:
                    c3:51:40:54:02:b2:62:40:7e:91:72:bd:49:f9:c5:
                    e9:0e:31:48:a8:12:c2:7d:a8:ae:fb:56:a6:a3:bd:
                    8c:46:ad:91:1b:31:d4:09:5c:2e:47:b4:01:7a:a3:
                    ab:74:b6:ed:54:d9:20:36:62:6b:0e:15:f4:bd:60:
                    bc:57:34:f5:56:47:2e:a7:a5:aa:85:36:87:69:8c:
                    c9:f4:8d:52:14:5a:5e:e3:03:35:a7:a7:1e:57:47:
                    6b:36:4c:88:dd:66:91:7d:cd:9e:2f:4a:95:b6:f2:
                    3d:59:53:db:00:95:a3:6e:81:57:6b:4d:c1:32:96:
                    ca:73:c6:b2:3d:b9:99:3b:4c:49:a6:c2:60:59:86:
                    d6:2b:c2:bf:98:f7:bd:98:bb:54:e0:00:2c:d4:2e:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:6B:5A:5E:F4:ED:43:61:05:81:21:05:69:5E:C3:38:7E:42:D9
            X509v3 Authority Key Identifier:
                keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b6:71:07:db:50:c4:1f:65:e9:65:d3:d8:7b:b8:44:8d:01:
         25:95:fb:1c:bc:b7:2c:0b:b6:6a:0d:02:e4:dc:b2:7e:af:7b:
         a6:66:e8:a7:dc:c0:c6:94:ac:a6:17:9b:a8:d2:74:a0:dc:57:
         b5:11:eb:76:31:dc:c0:0c:35:50:19:3b:24:e0:8e:0d:f5:14:
         be:3f:3f:48:e4:6c:a7:eb:7f:62:78:ca:5b:fd:6a:fc:32:29:
         7e:13:ed:e5:02:fe:92:0f:4f:55:2a:a1:43:15:ca:3a:18:60:
         af:05:8c:47:fa:68:6d:77:b4:fe:ee:38:3c:53:8e:d4:17:18:
         25:de:0f:97:ad:34:dc:25:a2:02:fd:f6:7d:e3:34:d7:3f:13:
         ea:47:48:82:6d:ca:c1:95:7a:6f:47:31:5c:7d:fc:a2:86:fc:
         b6:7a:64:0a:00:62:27:73:f6:c5:56:f0:68:2c:d3:c5:07:6c:
         69:28:e2:a2:a7:53:f4:ab:af:ff:f9:69:70:53:76:7a:3e:84:
         04:74:c1:15:d4:6d:f9:78:05:61:0b:b4:86:93:58:40:17:a0:
         ea:c5:31:43:f4:b9:a2:71:ce:d5:7c:a3:e2:5e:27:97:3e:c5:
         6f:a5:17:69:ed:36:4f:85:99:d0:39:cd:e8:38:bf:0e:1f:8a:
         df:5d:11:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:45 2026 by rpki-client