Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
File:                     OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft (raw, json)
Hash identifier:          jQMlg0qv3F9zTz62uovNPxp/cCMIeMtF6eC7UQXhPDI=
Subject key identifier:   F3:F2:D6:6D:F4:24:8E:6F:65:71:89:45:52:93:79:68:D8:EE:7A:5F
Authority key identifier: 3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
Certificate issuer:       /CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Certificate serial:       01A0C9D8B8714CFFD9168858E75DEB040D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
Manifest number:          0150
Signing time:             Tue 22 Sep 2026 16:00:18 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:18 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:18 +0000
Files and hashes:         1: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl (hash: Zb9mQx6lIHV+GyDAkVX+0TiVDhGzKuzibZ2vc5PmqWs=)
                          2: gkTf7nQTsreRRFr_69F3-1CTYmo.asa (hash: 6ZWz3HOG4yY5iF+Cf+k2WgBB6OwjzBCJK4BD/nVdTag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d8:b8:71:4c:ff:d9:16:88:58:e7:5d:eb:04:0d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
        Validity
            Not Before: Sep 22 16:00:18 2026 GMT
            Not After : Sep 23 16:00:18 2026 GMT
        Subject: CN=f3f2d66df4248e6f6571894552937968d8ee7a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:26:1b:43:a3:25:b4:1e:8d:81:d4:71:84:
                    fe:26:e6:f4:88:8b:22:6d:d7:8d:79:4c:a0:ea:81:
                    0c:e5:94:f6:60:99:9f:b5:11:bf:06:9a:fc:50:08:
                    6c:3a:ea:0c:65:bd:56:6b:1d:87:c6:b2:43:39:cd:
                    b0:e9:6c:44:78:f7:b0:01:b3:f3:bd:d2:fc:3c:e4:
                    84:98:17:5e:43:e7:ed:4e:d1:32:12:a2:f2:af:00:
                    2c:c1:63:e4:13:94:bf:d5:bf:64:f1:ea:eb:68:a2:
                    38:11:5e:12:77:ba:e8:33:3a:44:97:d6:1c:99:df:
                    4b:1b:34:dd:c0:a3:1a:45:50:14:70:e4:09:b4:37:
                    4e:4a:43:93:4e:b7:4e:6d:52:5d:7b:62:99:01:e4:
                    83:3e:cf:a9:61:e3:c6:25:72:a2:04:68:fb:a1:0a:
                    97:db:09:cb:94:5e:80:31:c2:6c:b0:16:ac:a8:36:
                    c1:eb:95:bd:d7:be:a8:e5:a1:fa:05:37:fe:e7:a7:
                    ce:3a:36:b5:4d:55:b2:ce:53:b5:5b:03:f6:f5:13:
                    71:32:ee:2c:f7:ac:7b:26:1d:c6:69:38:e4:94:dd:
                    84:73:2c:d4:ea:a9:6e:10:72:87:47:3c:c6:a4:34:
                    81:fd:31:85:bf:83:1b:fb:32:4f:c3:36:02:3b:9d:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F2:D6:6D:F4:24:8E:6F:65:71:89:45:52:93:79:68:D8:EE:7A:5F
            X509v3 Authority Key Identifier:
                keyid:3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d2:de:80:70:67:13:d5:68:4a:a7:02:8e:40:76:fc:f0:59:
         91:aa:f6:8b:a9:c5:04:fb:a5:ac:3c:e0:8d:de:6a:98:3e:5c:
         b0:52:1a:35:23:17:d2:e7:be:c7:3a:39:01:6a:9e:b4:24:1d:
         24:9c:c4:47:c4:6a:7f:77:cd:84:61:ac:ff:2d:9c:6e:6d:2a:
         ca:a7:cc:69:3d:81:8a:19:0f:3a:2c:36:2f:55:d2:1f:cd:9f:
         71:af:c1:e0:b5:ff:2e:d4:cc:2f:14:d3:81:84:1a:77:35:0c:
         c0:3e:c3:2d:6b:a7:49:66:50:12:61:7d:44:12:0e:4c:ed:4a:
         88:af:df:9a:a5:44:66:b8:dc:06:69:7b:7c:0a:39:8a:44:f0:
         f7:84:6b:b4:ed:c7:9a:f8:d5:bf:2f:87:8a:e1:0d:ba:ed:cb:
         8c:7f:3e:ac:5d:96:69:bf:cb:e8:3e:69:f2:e3:f3:3f:50:45:
         89:c6:57:33:17:72:30:bd:e5:0e:8c:2b:29:b5:03:30:d6:e5:
         ef:8f:24:49:46:38:8d:87:18:80:54:3d:1d:44:8e:6a:7b:54:
         8a:ef:e1:59:1f:5e:72:90:31:0b:c7:fa:db:ba:f6:e0:20:41:
         69:a5:bd:e0:08:8c:89:06:3b:f4:1a:31:21:06:45:04:26:ab:
         bd:b0:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:12:26 2026 by rpki-client