Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File:                     om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier:          OEltwpxUMWKeHK9gdArBnsedMvvq7RL47BjixOhDgV0=
Subject key identifier:   76:E6:46:56:96:E3:1D:B9:31:2B:1E:86:18:20:02:9E:AC:9C:B1:A7
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer:       /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial:       019F1A55E575F918716F7749172BF8BD9C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number:          191C
Signing time:             Tue 30 Jun 2026 21:01:04 +0000
Manifest this update:     Tue 30 Jun 2026 21:01:04 +0000
Manifest next update:     Wed 01 Jul 2026 21:01:04 +0000
Files and hashes:         1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
                          2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: DqMLgben2mbTPsZW+a40nYchNiESByGx1s7HNX66Z48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:55:e5:75:f9:18:71:6f:77:49:17:2b:f8:bd:9c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
        Validity
            Not Before: Jun 30 21:01:04 2026 GMT
            Not After : Jul  1 21:01:04 2026 GMT
        Subject: CN=76e6465696e31db9312b1e861820029eac9cb1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:c1:66:16:57:b9:94:eb:33:b6:00:36:fb:
                    8a:0c:3d:12:67:62:71:36:7b:5f:6c:4f:c0:0d:d7:
                    93:67:e5:c4:c6:7e:16:1c:c0:48:47:6d:44:c9:70:
                    ac:06:66:65:0b:d1:c5:96:4b:30:8c:0a:6a:dd:1a:
                    8d:a7:29:eb:ba:85:87:2e:7a:2f:9f:71:4d:fb:3e:
                    5c:96:bf:77:41:5a:1a:8c:3d:10:49:64:e6:19:5b:
                    e6:9f:c9:93:91:20:fb:f0:ca:a0:65:74:21:34:ae:
                    1d:ff:25:8d:3e:a7:11:7a:06:aa:20:c7:ff:cb:e8:
                    14:32:b4:2d:59:a5:5e:8a:93:ad:29:1e:3c:97:9c:
                    4e:f6:8a:3a:ad:41:4d:bb:71:e0:a8:7b:ad:e5:21:
                    e6:83:41:29:f0:b0:ed:19:c0:1a:ec:4b:3f:cc:41:
                    d6:85:d8:4c:a3:29:7f:4a:3d:eb:3d:fe:30:6c:7d:
                    a6:be:7c:f3:98:0a:41:de:b6:27:bd:6c:a1:81:d4:
                    18:7b:2b:f1:a9:97:e3:90:67:fb:8a:a9:95:0d:b8:
                    1e:86:70:21:ed:18:99:23:29:0e:da:2a:fa:6c:dc:
                    69:04:57:e4:83:45:f3:a6:95:c8:cc:f6:0c:12:77:
                    1a:c1:5e:bb:77:c2:77:ac:3d:77:3a:ab:4e:a3:83:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E6:46:56:96:E3:1D:B9:31:2B:1E:86:18:20:02:9E:AC:9C:B1:A7
            X509v3 Authority Key Identifier:
                keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:50:10:6d:c4:86:a6:40:b3:2e:eb:66:f7:e5:0a:6b:fd:95:
         85:d3:e8:75:cb:6f:6d:be:7c:e8:68:5c:31:1f:b0:43:32:3d:
         03:f1:4e:3f:c7:e4:26:bf:4e:8c:bc:5c:55:29:64:5f:15:8d:
         e7:47:47:43:9c:a8:48:a0:27:1c:02:0c:71:8e:17:e1:4e:69:
         c5:9f:79:48:1f:4d:0a:bc:a0:e0:59:99:70:64:b4:b1:67:b7:
         cd:11:59:c5:c8:23:e5:bc:4e:06:01:21:72:ab:8a:97:84:31:
         f4:01:ea:98:51:e2:34:3c:71:d9:3b:8d:63:08:fd:a7:bd:6b:
         71:fd:39:12:6b:b3:e1:10:6d:67:c9:ba:ad:05:fe:0d:18:05:
         ef:46:66:28:70:97:15:f5:40:5f:58:c0:9c:95:4e:bd:11:87:
         97:80:9d:db:b9:f1:34:5c:1f:b5:51:9d:0c:d1:8e:5d:9e:22:
         c7:46:60:57:61:0e:fd:0c:df:8e:ca:99:24:18:3b:9a:8b:00:
         c1:3e:0b:98:1e:e3:50:ec:ce:6e:b5:cb:63:61:ea:b8:8c:9f:
         aa:b8:e1:4c:a5:32:bf:67:76:bb:d8:a8:19:21:ed:23:a7:f3:
         16:77:fd:58:c3:20:f3:ba:b8:a5:64:16:da:5f:f7:a5:a1:9e:
         62:34:e0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:22 2026 by rpki-client