Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File:                     Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier:          iZER5xLxY5EyGHTyLrGPFfC2h9guabh+7JB4Evjb5ko=
Subject key identifier:   9F:EB:B1:97:C5:09:BB:56:BE:94:D7:98:2E:20:D2:21:6B:BE:12:DC
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer:       /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial:       019D9886BD51B3063F7AFDBC9E84F8C384BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number:          1806
Signing time:             Thu 16 Apr 2026 23:01:00 +0000
Manifest this update:     Thu 16 Apr 2026 23:01:00 +0000
Manifest next update:     Fri 17 Apr 2026 23:01:00 +0000
Files and hashes:         1: 4CWfekzf4x-HS1fJIidism45k8I.roa (hash: BHdLLhr5F9G9d810caL7Kieqc8ckL+IwjTONjFXfuYQ=)
                          2: AleCDdJblQdVI-S091EQULB75VY.roa (hash: eSD+DKApi4DxBKaxewRCjm2s463W9mcSqjdhdutCm0w=)
                          3: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: p8GqlZSS3n1JFPx3BCTV32dC/pb8gm5TMIyStP8V4ro=)
                          4: Sl9bNPBsXlBI0DeUAp-mjVlbQuQ.roa (hash: OCH6KKa8NHD+YpgJ2LuApSob95p9PeDsu1ZA6J3sKlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:bd:51:b3:06:3f:7a:fd:bc:9e:84:f8:c3:84:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
        Validity
            Not Before: Apr 16 23:01:00 2026 GMT
            Not After : Apr 17 23:01:00 2026 GMT
        Subject: CN=9febb197c509bb56be94d7982e20d2216bbe12dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:8a:f8:5a:3e:65:f6:6c:f3:d3:a0:fc:a9:
                    33:50:74:8e:0f:71:0b:70:ef:92:73:4f:ce:29:04:
                    21:b9:79:b0:06:ae:b2:26:46:11:99:d4:2d:2b:01:
                    36:dc:5c:44:f0:85:a1:ed:5c:52:a4:7c:f4:a5:6c:
                    f7:83:b4:2e:25:a8:11:e8:43:3d:f6:60:39:83:cd:
                    62:65:9d:48:db:0b:6b:0e:61:e9:1e:e0:4d:e0:02:
                    88:3f:06:79:ae:de:36:35:66:25:30:a2:22:6e:cc:
                    9e:25:7f:83:f8:11:a5:11:a0:ef:d4:c6:6e:6b:49:
                    aa:bb:4e:33:6e:99:28:b5:ac:58:c2:a1:e5:1d:5b:
                    af:5f:38:de:0d:a8:4c:6b:b1:35:a9:25:8d:62:eb:
                    e4:44:7f:cf:a8:4e:63:85:1f:75:bf:e7:d6:8e:a2:
                    5f:3a:87:ef:35:60:09:81:42:39:28:87:1b:f8:1d:
                    6e:46:fc:80:97:2f:a2:5c:46:47:f6:07:99:8c:99:
                    34:fa:04:9c:da:16:37:48:b6:b4:0c:40:0e:37:fa:
                    04:3c:d7:dc:0e:56:10:ec:f5:f8:82:00:f9:98:84:
                    22:83:be:4a:d0:a7:03:02:f3:5b:63:44:e9:c3:39:
                    24:f9:ea:3b:52:93:4a:73:d5:9b:e0:da:60:ef:15:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EB:B1:97:C5:09:BB:56:BE:94:D7:98:2E:20:D2:21:6B:BE:12:DC
            X509v3 Authority Key Identifier:
                keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:ad:2c:3f:50:e0:d9:f7:19:0b:ee:7f:eb:08:00:22:55:
         7e:16:f7:20:ee:1a:74:1f:cd:ff:75:07:b7:9e:5b:c1:04:6a:
         a6:4b:dd:28:3c:a2:c1:8b:63:94:ce:a7:0e:ab:b3:71:bd:31:
         5c:9a:c1:47:b6:87:91:71:59:ab:8e:53:22:5b:9d:c8:41:65:
         b3:35:28:9a:02:d9:b9:de:92:39:4c:22:3f:30:ab:0e:6a:bc:
         8d:fc:cc:31:24:3d:48:52:9c:7c:36:da:12:aa:7a:aa:24:ba:
         4b:50:38:3c:bc:9e:73:61:00:fa:9f:d2:e5:e3:16:9f:38:6b:
         f9:3d:94:b3:d2:e3:3d:5d:e0:f8:43:92:6c:11:ad:92:7d:c6:
         d0:5d:61:59:de:29:fa:9f:40:97:9e:8c:3a:62:1e:3a:3d:68:
         05:57:3b:10:fa:9a:95:87:e3:33:f4:16:a3:70:95:0c:a2:92:
         a0:7c:c4:63:0b:ce:4d:7d:a3:c1:1d:d4:0b:de:b3:e2:50:8f:
         13:59:97:27:8b:5c:7d:71:4b:cd:fe:fc:61:91:66:9d:50:a3:
         27:12:93:b2:a1:36:67:16:a1:f9:bf:70:e4:7f:01:50:e4:75:
         84:75:9e:52:65:63:2c:a7:ae:2d:50:a7:5f:60:2f:72:16:66:
         70:ef:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:05 2026 by rpki-client