Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File:                     om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier:          7I0PBwzOOxqMFm+sAPJcclkDzpetlEwNBh02sIqwFmg=
Subject key identifier:   E3:40:23:30:C9:57:1D:B8:E4:49:FF:DD:CC:08:0E:5E:63:7C:89:AD
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer:       /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial:       01A00213E700A31793D2E5ED1CA4294B678E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number:          1994
Signing time:             Fri 14 Aug 2026 21:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:53 +0000
Files and hashes:         1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
                          2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: 8Kg/mFECqFpGN9cZ+gEo+y3xrtFjwxVikpmtB3SUytY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:e7:00:a3:17:93:d2:e5:ed:1c:a4:29:4b:67:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
        Validity
            Not Before: Aug 14 21:00:53 2026 GMT
            Not After : Aug 15 21:00:53 2026 GMT
        Subject: CN=e3402330c9571db8e449ffddcc080e5e637c89ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:9c:4c:a5:76:0f:f8:33:5e:34:c8:42:c9:
                    48:59:1e:21:66:be:e9:2a:27:41:59:43:dd:bb:7a:
                    3b:56:04:6d:d3:87:d4:e3:49:90:11:4e:6a:1c:85:
                    60:f8:98:bb:0a:a6:11:0a:f4:03:28:7f:85:dc:34:
                    4f:fa:20:6d:4a:e1:ad:87:bc:3c:d5:7d:ac:08:4d:
                    c0:44:c2:a1:08:9b:db:65:35:76:71:d0:41:e9:e0:
                    c3:fa:73:d2:66:0f:01:4b:44:fc:02:ac:84:ff:65:
                    b4:78:dc:be:91:82:e3:fe:c0:11:a1:5c:57:a4:95:
                    d6:9c:40:bb:07:90:c3:f5:c9:1a:42:cf:ff:13:c0:
                    2c:aa:0e:0d:90:2c:6a:22:47:5a:ec:e5:f4:35:15:
                    09:83:96:f5:02:6f:f3:d8:f6:5d:54:d6:67:5d:4b:
                    a9:84:c5:d6:62:ab:30:b1:1f:c7:3f:4c:73:56:d1:
                    2d:92:a1:50:7c:de:23:49:e9:17:4e:1c:1d:63:03:
                    ea:31:2c:24:49:91:fb:74:36:4d:50:9c:00:cc:29:
                    0f:7a:2e:00:88:43:1c:22:7e:d0:d4:a0:35:21:f2:
                    7a:9d:38:c2:45:51:6a:b5:d9:67:2b:4a:a1:a1:bb:
                    78:04:6f:0e:bd:9a:1a:33:63:1e:c3:ff:de:ec:ab:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:40:23:30:C9:57:1D:B8:E4:49:FF:DD:CC:08:0E:5E:63:7C:89:AD
            X509v3 Authority Key Identifier:
                keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:2e:01:46:95:72:0d:9c:e5:7d:34:f9:df:58:a6:63:b7:
         cc:a2:77:f0:3b:ec:2e:19:c1:f8:20:ed:5f:03:e3:dd:eb:d8:
         f9:6b:d1:29:e3:3f:f5:63:c1:2a:7a:87:4d:1d:87:7f:4d:e9:
         cc:1d:e0:61:71:1c:43:5b:a5:c0:c0:df:64:27:2c:fa:65:95:
         3f:56:84:04:4d:fa:f1:71:9a:28:fd:2e:25:ee:04:ce:e3:d8:
         3b:fe:04:7a:94:b5:88:0d:30:6e:8f:58:e0:7b:eb:20:ec:cd:
         0b:e2:ae:1c:45:b0:22:49:77:fb:7a:11:dd:8f:c1:19:fc:8c:
         b5:b4:82:d9:c9:fc:64:f3:48:ec:07:e8:82:e8:ae:bb:0a:bc:
         9f:e4:6a:4f:0f:2f:6a:ff:47:04:6d:4c:2b:10:70:25:ae:fd:
         7a:19:b5:85:26:01:e0:ab:88:f5:73:1c:fe:7d:ec:1b:c5:91:
         e2:58:28:76:e4:de:7f:57:df:5d:85:c6:ce:18:d3:cb:00:d9:
         e0:bc:7f:0a:2f:09:09:75:23:3b:a4:7d:29:61:67:95:8c:c8:
         45:76:7b:a9:a2:21:15:c8:4d:43:69:9a:dc:61:68:35:b8:03:
         34:cc:90:0f:69:7f:ea:cb:6e:35:ec:cd:1d:58:e6:f2:f0:86:
         c8:fc:5c:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE+cAoxeT0uXtHKQpS2eOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNmZhN2VlMzBhZGEzNWFiMWZjMDRmMzQwZmVkZjY0N2E5
ZjgxNjIwHhcNMjYwODE0MjEwMDUzWhcNMjYwODE1MjEwMDUzWjAzMTEwLwYDVQQD
EyhlMzQwMjMzMGM5NTcxZGI4ZTQ0OWZmZGRjYzA4MGU1ZTYzN2M4OWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnecTKV2D/gzXjTIQslIWR4hZr7p
KidBWUPdu3o7VgRt04fU40mQEU5qHIVg+Ji7CqYRCvQDKH+F3DRP+iBtSuGth7w8
1X2sCE3ARMKhCJvbZTV2cdBB6eDD+nPSZg8BS0T8AqyE/2W0eNy+kYLj/sARoVxX
pJXWnEC7B5DD9ckaQs//E8Asqg4NkCxqIkda7OX0NRUJg5b1Am/z2PZdVNZnXUup
hMXWYqswsR/HP0xzVtEtkqFQfN4jSekXThwdYwPqMSwkSZH7dDZNUJwAzCkPei4A
iEMcIn7Q1KA1IfJ6nTjCRVFqtdlnK0qhobt4BG8OvZoaM2Mew//e7Ktg2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONAIzDJVx245En/3cwIDl5jfImtMB8GA1UdIwQY
MBaAFKJvp+4wraNasfwE80D+32R6n4FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQt
ZTkyNGNlNWE3NWIzLzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQtZTkyNGNlNWE3NWIz
LzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuwuAUaV
cg2c5X00+d9YpmO3zKJ38DvsLhnB+CDtXwPj3evY+WvRKeM/9WPBKnqHTR2Hf03p
zB3gYXEcQ1ulwMDfZCcs+mWVP1aEBE368XGaKP0uJe4EzuPYO/4EepS1iA0wbo9Y
4HvrIOzNC+KuHEWwIkl3+3oR3Y/BGfyMtbSC2cn8ZPNI7Afoguiuuwq8n+RqTw8v
av9HBG1MKxBwJa79ehm1hSYB4KuI9XMc/n3sG8WR4lgoduTef1ffXYXGzhjTywDZ
4Lx/Ci8JCXUjO6R9KWFnlYzIRXZ7qaIhFchNQ2ma3GFoNbgDNMyQD2l/6stuNezN
HVjm8vCGyPxcqQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:19 2026 by rpki-client