Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
File:                     OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft (raw, json)
Hash identifier:          wwYSVmkAJjvKTOBfDzQp5D1hdUl+lLROaaV7Txw6pcQ=
Subject key identifier:   BF:9B:F7:0C:3F:D8:28:20:AD:BD:B2:70:EA:0F:F5:3F:0D:6C:83:95
Authority key identifier: 3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
Certificate issuer:       /CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Certificate serial:       019FA82B6E87C851D08A270BA6D0696722F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
Manifest number:          BA
Signing time:             Tue 28 Jul 2026 10:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:46 +0000
Files and hashes:         1: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl (hash: p++vbeStw0opzRxq37ienV2IyTmJyfVIQZkJaFQPYu0=)
                          2: gkTf7nQTsreRRFr_69F3-1CTYmo.asa (hash: 6ZWz3HOG4yY5iF+Cf+k2WgBB6OwjzBCJK4BD/nVdTag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:6e:87:c8:51:d0:8a:27:0b:a6:d0:69:67:22:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
        Validity
            Not Before: Jul 28 10:00:46 2026 GMT
            Not After : Jul 29 10:00:46 2026 GMT
        Subject: CN=bf9bf70c3fd82820adbdb270ea0ff53f0d6c8395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0f:b7:54:52:47:56:a9:55:2c:8e:1a:36:bd:
                    01:3a:77:b1:12:bf:2e:e2:67:78:56:4a:22:14:de:
                    f7:0b:06:4d:fe:11:e2:4c:5c:5f:20:8e:dd:0c:b0:
                    df:51:41:11:9f:7c:d5:0f:4e:77:d2:f3:11:96:b4:
                    ba:d3:24:50:e1:9f:c5:eb:67:1c:a0:c5:55:62:28:
                    e9:2d:d2:11:b8:83:2d:98:e1:ce:06:6b:d0:a8:c5:
                    09:d9:fa:f3:e9:1d:33:3d:96:41:1c:65:ad:56:03:
                    c9:a0:aa:2e:35:11:52:f8:a6:50:40:fa:d3:d4:83:
                    5a:78:e0:67:0f:d6:14:22:bf:b6:5b:d6:79:99:e3:
                    f6:5f:7e:a5:19:c7:ee:89:49:a9:6a:76:10:5b:81:
                    ca:53:c8:be:65:19:09:d7:1f:7e:9a:6c:3d:02:fa:
                    95:48:ec:b8:0e:f5:a5:59:e3:93:84:25:46:8c:7b:
                    2e:2c:c3:ad:0e:86:02:4d:10:84:ea:e2:3a:9a:d1:
                    70:f8:99:06:55:a9:58:7e:0d:4b:fb:85:eb:08:28:
                    c2:c7:54:73:d7:81:41:83:94:8d:2b:9f:13:1c:fe:
                    f0:92:b7:a9:cb:f0:2c:69:39:26:d5:ad:09:58:4f:
                    1f:35:ce:3e:fc:10:d6:33:53:f9:17:b8:be:1a:ff:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9B:F7:0C:3F:D8:28:20:AD:BD:B2:70:EA:0F:F5:3F:0D:6C:83:95
            X509v3 Authority Key Identifier:
                keyid:3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:68:13:9f:64:b7:29:aa:5a:53:d0:83:48:0d:40:c7:e7:bf:
         72:df:89:c8:e2:ba:60:b1:19:79:65:ef:fb:9e:e2:84:20:00:
         ef:75:3c:35:8a:6b:4f:0f:21:4f:d6:23:39:ae:a5:cc:a5:d1:
         73:8c:69:65:cf:4e:da:06:5d:df:f9:67:d9:d9:88:23:6e:5d:
         0d:42:d4:64:cc:4c:03:f0:08:79:bc:b8:e7:01:5d:c3:86:6d:
         76:81:6f:a0:3e:50:85:0b:a4:6e:27:0a:5c:7b:ca:e7:dc:3c:
         fb:1c:14:de:47:78:3f:12:02:e2:65:46:88:02:f2:90:4f:c2:
         44:42:07:e0:7f:04:1f:76:f2:f8:c0:da:e7:52:4f:43:e5:a8:
         4a:03:49:67:06:81:81:ea:d3:ed:3a:22:27:40:d9:10:9d:52:
         60:b1:ad:2b:26:33:ef:b7:96:e9:69:80:93:f2:14:87:dc:5f:
         b0:fa:ac:d8:84:79:34:53:67:6e:00:35:3f:59:9e:d9:55:fe:
         8d:ae:e7:b3:fd:54:2e:8a:79:2f:38:61:57:23:39:db:b2:d3:
         2d:bb:ad:01:5a:82:2a:d1:6b:2a:48:03:f6:89:4a:31:47:50:
         d6:e3:33:0c:a7:ab:8e:59:53:17:42:7d:00:87:a4:fb:5f:7f:
         11:77:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:03 2026 by rpki-client