Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
File:                     OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft (raw, json)
Hash identifier:          gXszjruyJ7T9eDUvZHCG6aTVsZEFiqOnkQxmB6PuYu4=
Subject key identifier:   6D:1A:56:ED:B6:E1:6B:B6:73:9E:C1:93:96:D4:5C:26:7A:F2:C0:24
Authority key identifier: 3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
Certificate issuer:       /CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Certificate serial:       019EC06E41C9A269D3B8B4C139E757EBC386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
Manifest number:          42
Signing time:             Sat 13 Jun 2026 10:01:51 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:51 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:51 +0000
Files and hashes:         1: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl (hash: E2U2FHNYErA2AuaMo1LoCYHsQ0Zs5AhkMD/FRQG1yyU=)
                          2: gkTf7nQTsreRRFr_69F3-1CTYmo.asa (hash: 6ZWz3HOG4yY5iF+Cf+k2WgBB6OwjzBCJK4BD/nVdTag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:41:c9:a2:69:d3:b8:b4:c1:39:e7:57:eb:c3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
        Validity
            Not Before: Jun 13 10:01:51 2026 GMT
            Not After : Jun 14 10:01:51 2026 GMT
        Subject: CN=6d1a56edb6e16bb6739ec19396d45c267af2c024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:af:7c:5c:6b:c6:3f:84:02:3c:ad:aa:62:
                    44:95:c5:1c:c8:b9:3e:37:57:b5:79:6a:67:0c:ae:
                    d6:74:a9:8d:bc:6b:47:92:6e:fc:7f:c5:ce:3e:cd:
                    d3:dc:b5:08:f5:f9:23:70:63:85:43:3c:d0:56:a9:
                    41:d0:11:03:3c:92:a0:f4:b6:a1:84:ce:76:24:9c:
                    0f:51:72:17:c1:e8:e3:d3:97:b1:8c:18:50:3c:9c:
                    3e:ce:3a:c2:25:e2:2b:62:01:38:d2:e5:7e:02:34:
                    55:c6:35:cd:4f:36:32:4a:df:5b:7f:fb:16:b9:40:
                    b8:a2:7c:e8:c9:80:88:f6:76:8d:70:fe:73:52:06:
                    90:07:e5:57:72:54:3d:15:a9:93:47:b3:85:c2:d8:
                    4d:93:29:25:a7:26:a4:0f:d6:29:61:d7:40:7f:e3:
                    f2:69:80:2a:75:75:d0:53:f8:ee:23:58:66:a5:9d:
                    51:94:d8:7d:3e:b6:0c:2a:04:75:44:0a:70:52:09:
                    24:6b:30:3d:d6:50:72:1d:34:be:ec:2c:5b:88:57:
                    10:4c:17:b5:2f:ca:ad:9c:d0:c7:c0:0b:1d:71:e8:
                    9b:39:fd:7e:70:fc:75:b3:cc:cd:3e:8a:b1:31:73:
                    e1:42:d1:e4:eb:a0:2f:d6:e0:ad:02:88:23:f3:78:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:56:ED:B6:E1:6B:B6:73:9E:C1:93:96:D4:5C:26:7A:F2:C0:24
            X509v3 Authority Key Identifier:
                keyid:3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:69:dc:64:81:f3:8f:c1:dc:af:a1:d1:18:99:2d:1d:70:
         c7:f5:77:58:92:5f:2f:8f:35:f5:07:6a:d0:2f:53:c7:40:41:
         3d:0f:c1:77:92:5a:e3:66:83:cd:79:98:13:04:11:f3:cf:a8:
         80:8b:e5:b5:b4:7a:35:60:52:62:72:8d:fc:b9:b3:aa:10:e2:
         71:69:99:66:d6:2a:ce:a6:6c:75:80:61:55:3d:1d:5c:82:6e:
         f4:1f:2b:fb:30:72:ab:14:a8:67:4c:ae:63:98:be:98:36:b6:
         94:7e:e3:67:19:72:25:aa:72:1e:f0:76:a1:6c:c8:35:97:93:
         27:17:48:f8:18:66:84:e8:f3:14:eb:e7:e6:b6:19:b1:3b:93:
         29:49:8c:68:86:82:63:bb:7b:7e:1f:e5:25:31:de:c0:a7:12:
         cd:21:3b:e6:30:51:b4:ac:2f:ce:1f:d1:6a:c6:a7:4f:d5:3b:
         76:71:04:d1:85:41:2c:31:45:7a:a3:7c:3b:c3:5a:4c:8f:02:
         87:94:31:0e:30:93:94:a9:d1:04:70:6f:18:01:ce:62:c2:4e:
         93:a2:e1:bf:a5:49:a7:8e:a7:40:d0:6b:72:02:a8:f9:08:84:
         2a:06:a8:71:47:14:de:cd:3a:91:c0:3c:99:c6:84:6d:5d:b5:
         1d:f8:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:58 2026 by rpki-client