Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
File:                     OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft (raw, json)
Hash identifier:          Oiv7k5WUchB24mynqr7HN7QBHzR7DaFgsi01i1zXM14=
Subject key identifier:   1A:55:2D:D2:84:E7:EA:78:32:97:03:7E:1B:11:9F:62:80:64:EA:9D
Authority key identifier: 3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
Certificate issuer:       /CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Certificate serial:       019EFC4C45914C64F4C00212BCC00F3C8713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
Manifest number:          61
Signing time:             Thu 25 Jun 2026 01:01:57 +0000
Manifest this update:     Thu 25 Jun 2026 01:01:57 +0000
Manifest next update:     Fri 26 Jun 2026 01:01:57 +0000
Files and hashes:         1: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl (hash: pW6QRtknjwAH/r+xVzCYBUicMc5DfZwV11S9gMfZZvs=)
                          2: gkTf7nQTsreRRFr_69F3-1CTYmo.asa (hash: 6ZWz3HOG4yY5iF+Cf+k2WgBB6OwjzBCJK4BD/nVdTag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:4c:45:91:4c:64:f4:c0:02:12:bc:c0:0f:3c:87:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
        Validity
            Not Before: Jun 25 01:01:57 2026 GMT
            Not After : Jun 26 01:01:57 2026 GMT
        Subject: CN=1a552dd284e7ea783297037e1b119f628064ea9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:d8:93:fd:68:78:88:46:85:1a:14:b1:9b:
                    f6:dd:7e:65:5a:3c:5e:21:cd:56:fe:75:16:42:34:
                    77:58:53:88:4b:47:e3:c6:61:f4:02:db:c4:a9:de:
                    5c:7b:f9:66:41:f2:6d:16:29:23:e0:5c:c9:a0:c1:
                    f5:92:3d:4a:36:f3:ec:1b:9a:da:18:c4:d3:ab:ae:
                    89:e3:3c:20:e1:3b:41:1e:79:ef:ea:48:a8:a3:fd:
                    d0:f3:2e:d5:ec:de:14:c6:e7:56:0e:57:d8:40:ee:
                    b3:9a:92:77:33:47:8b:6b:f6:1c:76:cf:8c:39:1c:
                    04:51:9b:56:7f:40:64:a0:14:9b:84:4c:7f:df:dd:
                    5f:78:ac:0f:34:af:48:c4:64:75:89:da:fc:4f:74:
                    26:38:3b:00:cd:ed:5a:42:76:29:ac:18:08:f9:ce:
                    ca:60:33:fb:78:5e:b0:2d:95:ee:ed:bb:3b:d5:ac:
                    4d:e5:35:a7:f0:72:e0:a0:92:38:24:60:5b:ae:77:
                    88:8a:7f:b5:ee:d9:9d:39:58:08:ad:f0:b4:1a:db:
                    4a:67:1b:a9:f6:04:69:97:46:0b:7a:5f:a5:56:30:
                    93:69:9b:33:10:00:ab:74:fb:cf:88:42:2d:e9:9d:
                    ec:b9:63:32:bf:7e:9f:52:f3:39:65:96:bd:3c:62:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:55:2D:D2:84:E7:EA:78:32:97:03:7E:1B:11:9F:62:80:64:EA:9D
            X509v3 Authority Key Identifier:
                keyid:3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9c:da:cf:43:4f:68:c2:db:c5:34:fb:4d:d2:19:54:63:bc:
         32:ba:59:d4:5e:fb:b7:4e:7e:87:ae:1f:a5:c3:a6:8c:1d:10:
         cf:ac:e9:63:22:c8:50:7d:b3:21:14:66:b7:be:a5:1f:48:b8:
         1e:c5:03:14:36:a0:8e:66:87:18:97:ab:68:7e:a6:13:65:9c:
         90:49:7d:8f:0e:d9:34:93:59:99:95:07:80:fd:ec:f9:cc:03:
         5e:be:06:be:5a:76:8f:bd:0a:2f:65:4d:44:51:d0:6a:00:1a:
         d8:32:72:2b:7a:38:91:94:5b:0c:96:65:48:c9:cb:21:73:79:
         aa:d5:be:d0:74:de:09:5f:ea:8d:fc:4c:87:aa:81:03:7d:64:
         a4:48:38:2d:59:32:ae:b6:88:f6:e0:30:00:a6:0a:72:d9:81:
         f7:d0:f0:b3:41:2f:df:2e:fb:b4:c5:ec:d4:94:dd:ac:d5:79:
         52:76:39:92:d5:0d:1a:69:69:a7:61:cc:98:c2:e8:1c:62:01:
         8a:d0:57:49:3b:b9:aa:23:c6:a4:ac:60:27:53:98:6f:ce:8d:
         bf:d7:a2:15:5f:49:f9:88:01:aa:f1:cf:a5:e8:6b:4f:eb:cb:
         fe:f6:36:80:3f:21:77:87:66:7c:04:7c:b5:f7:22:34:52:c7:
         9e:3f:fe:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:00 2026 by rpki-client