Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File:                     Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier:          vpbYLvzq9F4zjW3mjMrblvNvbiipcx5IzGvuw80+MlY=
Subject key identifier:   E6:D4:7A:DC:2D:9B:C3:C6:46:86:A7:31:3F:01:70:7E:4D:49:BE:44
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer:       /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial:       01A0C632DBE2E9098A682562428CCD7E94FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number:          0A80
Signing time:             Mon 21 Sep 2026 23:00:16 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:16 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:16 +0000
Files and hashes:         1: 2vFmTEXL4sIOGvvxET_z9OsJtkM.roa (hash: hE+J8l/9QyGd/yFHBwyjIvFqStRGpbN8ok17t6YgQA4=)
                          2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: EffNOUM79cPhW/XFi0GCWVjdLm1Vb7/TR6N4AQT5JNE=)
                          3: ngZkQQAAmyzs-8i5NBKDT7ozzfE.roa (hash: 6UMNzj0BfpUOXrwKXdq5vGzZXckdpCxU0zZpgK6Silc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:32:db:e2:e9:09:8a:68:25:62:42:8c:cd:7e:94:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
        Validity
            Not Before: Sep 21 23:00:16 2026 GMT
            Not After : Sep 22 23:00:16 2026 GMT
        Subject: CN=e6d47adc2d9bc3c64686a7313f01707e4d49be44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:71:39:ef:fe:cc:02:8a:f3:e2:46:c4:82:
                    c4:74:6b:a3:4f:4e:c3:ed:ed:29:fb:55:b6:c6:b7:
                    0a:6a:5a:67:6f:54:b4:5e:2e:de:45:83:df:9d:65:
                    e7:73:13:56:99:ec:b4:e7:0e:c2:25:ed:3c:f3:eb:
                    9b:d4:df:cb:48:a5:7a:73:58:86:f6:10:71:9a:7c:
                    1c:df:35:84:40:56:d4:5d:47:6e:b5:3f:6f:b9:4b:
                    73:57:ea:7f:f6:59:ea:eb:c0:27:05:63:34:ee:e5:
                    14:65:1d:98:1e:5c:8b:f1:39:1e:9e:1c:73:b3:b2:
                    b8:89:69:79:bb:fa:7e:1d:98:f3:c8:9f:49:b9:6f:
                    f1:f7:10:a8:ca:73:08:a4:a6:26:90:7c:0c:1b:9c:
                    d8:d4:cf:17:98:ee:54:2f:54:85:63:7a:62:23:4f:
                    44:95:fe:b2:2a:92:6b:b4:d2:41:f7:62:51:a2:48:
                    37:a2:af:07:fe:82:12:c2:df:0c:ef:a4:b2:86:53:
                    42:93:b4:30:e9:5d:f6:d1:2f:26:2b:1f:9f:99:1f:
                    e2:8a:04:1e:1b:6c:60:22:22:a1:26:a5:38:d6:3d:
                    99:b6:67:9c:68:41:77:49:41:fc:8a:29:71:3f:02:
                    b6:68:6b:be:59:41:13:eb:50:95:89:fe:a8:d5:cc:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D4:7A:DC:2D:9B:C3:C6:46:86:A7:31:3F:01:70:7E:4D:49:BE:44
            X509v3 Authority Key Identifier:
                keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:99:9a:bd:b9:a6:a9:f5:b9:8e:3e:91:a9:80:85:aa:59:
         46:67:72:fb:62:d3:20:e3:e5:a0:46:8a:1c:b4:53:28:24:3c:
         10:42:ce:f1:f4:f1:f6:e8:76:98:33:02:4e:8c:af:17:ca:12:
         81:e1:08:1c:cd:ad:a5:5e:6c:04:30:3d:cd:9a:69:5c:c1:bc:
         f7:dd:4d:82:d8:47:4c:14:0e:c0:3b:ed:f8:c9:4a:d0:05:f6:
         2a:c0:36:05:fd:42:4f:c4:c7:74:51:a9:95:e3:34:23:00:2f:
         27:5e:57:5b:7b:2e:81:00:ef:93:08:c0:35:39:b5:c8:cb:4c:
         d3:b1:85:19:6d:92:05:49:06:9c:81:ed:38:33:08:c3:55:a8:
         8c:ca:d9:8e:fb:1c:d3:77:fd:fe:39:e9:3d:8c:cf:74:d0:6e:
         20:f4:8e:b3:b7:82:7b:62:5a:60:06:5a:2e:5f:19:75:2e:3a:
         aa:ec:db:ab:2d:b0:71:95:53:cc:4a:00:13:89:53:38:a3:11:
         f2:28:0a:94:18:9f:28:b8:12:d5:dc:b8:02:f7:70:8e:6e:f5:
         cb:aa:81:e2:35:eb:ea:cc:94:6c:78:cb:bf:96:6b:38:e0:86:
         4f:b2:b9:45:6e:db:04:d0:f7:ea:65:44:cf:0a:2b:eb:b9:fe:
         98:b4:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:55:44 2026 by rpki-client