Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File:                     omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier:          6k+OWoOTk38hHW5OODZRQBD8nsaJFi9RZ/xo+rbgZEo=
Subject key identifier:   1D:F3:B1:A5:14:E7:52:A6:B4:43:38:2F:EB:CC:06:F1:84:AF:AA:67
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer:       /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial:       01A0C77D27EB6312D5E230655A5724EB52C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number:          1A68
Signing time:             Tue 22 Sep 2026 05:01:03 +0000
Manifest this update:     Tue 22 Sep 2026 05:01:03 +0000
Manifest next update:     Wed 23 Sep 2026 05:01:03 +0000
Files and hashes:         1: DHTVOspVelmD6hKbvHHdFSxrQgA.roa (hash: A7Oq6WR9f6YTO2BNgRao+GzDKScqL9wSwbqMrDuqnLc=)
                          2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: D/Dngt8FieNOWJrkU5bDpi/jUtyEu2cvl37ML2tuPkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7d:27:eb:63:12:d5:e2:30:65:5a:57:24:eb:52:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
        Validity
            Not Before: Sep 22 05:01:03 2026 GMT
            Not After : Sep 23 05:01:03 2026 GMT
        Subject: CN=1df3b1a514e752a6b443382febcc06f184afaa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:cb:6b:0d:57:61:b4:87:9c:de:bc:f4:df:
                    34:f3:8f:e9:f6:8d:5b:bd:12:ef:5b:67:be:80:a4:
                    5b:c1:c7:1d:da:cf:0a:34:fb:ce:82:61:35:29:3e:
                    ea:79:72:19:61:2e:4b:9c:74:d2:0b:9e:1f:f6:90:
                    3a:66:bc:e5:01:47:15:ad:d5:59:19:26:1c:5b:c8:
                    5c:11:5b:61:e8:7d:ce:1a:4a:60:46:31:e3:39:46:
                    29:bf:44:e6:48:59:0e:e7:b3:30:0b:30:a1:53:1a:
                    d2:9a:fb:92:40:1f:fe:8a:85:9b:90:58:ef:a4:f5:
                    7b:67:65:87:bf:ca:d0:87:68:7b:34:45:22:ec:00:
                    ec:db:89:3a:2a:8b:46:f5:71:26:7c:57:16:25:62:
                    86:ea:1b:74:f4:af:aa:a6:da:00:e3:56:14:2e:8d:
                    dd:5c:48:18:40:62:ca:05:8a:9b:6e:d7:67:ce:6e:
                    0e:68:f2:2d:f7:a6:e3:7a:9c:5f:c4:ee:6d:48:88:
                    ce:6b:f9:8b:20:90:6d:77:fa:17:f7:ff:d0:6d:68:
                    b7:ca:2e:23:5e:90:9b:07:57:0f:7f:81:b2:cc:bb:
                    5a:54:c4:58:bc:b2:ca:45:dd:37:92:b3:30:9b:1d:
                    e6:cd:6d:11:66:40:6e:fe:8b:d2:2d:19:c7:08:a2:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F3:B1:A5:14:E7:52:A6:B4:43:38:2F:EB:CC:06:F1:84:AF:AA:67
            X509v3 Authority Key Identifier:
                keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a6:ba:18:47:35:c9:6f:05:6d:4d:cc:d8:bc:06:3a:f5:ad:
         c0:51:77:b6:d7:e6:bd:67:f7:f3:7e:65:fa:04:b5:de:b8:9f:
         c9:3b:b1:2b:ca:5d:f8:be:95:b8:f3:ef:c9:5b:bb:6f:23:69:
         5e:dd:1d:72:30:47:b5:b0:ec:b0:58:63:6f:34:2a:c1:c5:63:
         d2:2e:e0:2b:4b:0d:94:bd:02:29:d5:02:21:49:6c:1a:5c:01:
         85:36:d6:6e:b0:28:fa:d8:50:0f:86:30:5d:75:a9:e3:a1:1e:
         c0:7a:70:7f:01:84:0c:0a:48:b3:2d:ef:b5:f4:37:60:0d:0f:
         6e:f8:8e:4e:cd:ba:84:21:a5:ba:d3:b3:e6:d0:11:e7:da:95:
         10:03:0a:44:ae:fe:c3:31:46:37:fa:ab:68:16:82:91:11:48:
         92:5c:69:bc:39:a9:41:a5:df:00:d5:75:0a:2d:4a:1a:ed:51:
         f8:4b:34:46:ed:bb:5b:88:ac:7c:7d:38:c8:bc:73:4d:c8:95:
         51:6e:be:58:6e:f9:1d:db:b3:94:0e:8f:0e:76:13:62:e5:6b:
         52:39:96:fc:40:a4:7b:8c:82:86:e8:1f:9b:35:68:b3:9a:e4:
         ca:46:63:8c:7e:e2:1e:5e:b3:a5:60:37:2f:ef:50:59:dd:ee:
         12:2a:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:48:47 2026 by rpki-client