Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File:                     Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier:          gfTj6YIlsYDANjoJ1JjXbKZmLjqFwMGr6Q8iF1MN70U=
Subject key identifier:   5C:E4:8C:08:70:0E:3C:35:14:58:40:81:E0:CF:D9:53:18:1B:0C:B3
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer:       /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial:       0197481E16D5F0C81F62E9E26D95D296FACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number:          14C0
Signing time:             Sat 07 Jun 2025 02:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:20 +0000
Files and hashes:         1: GgsWPeSLOUohaMbTcn2R72DKvqo.roa (hash: FdIvFbwyG4T9lF5cxTm74n7FrVTd+NmNKr/3LVaY4Co=)
                          2: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: c1wUtyLAGFuFkVNYLhy8X/PBII9vP6YS4/zdm6WJv3I=)
                          3: xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa (hash: HPp2kSbUasPwNyhN/FOSH9olW8dRjUen+6wuAaVDD8Y=)
                          4: y3TTdcjKoEjXwgjO1xfh0tYATdA.roa (hash: 7D4/Czv6H7eCbZASUzHWZokIq1S56p3iwes3EPnUWKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:16:d5:f0:c8:1f:62:e9:e2:6d:95:d2:96:fa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
        Validity
            Not Before: Jun  7 02:00:20 2025 GMT
            Not After : Jun  8 02:00:20 2025 GMT
        Subject: CN=5ce48c08700e3c3514584081e0cfd953181b0cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:5e:8b:5b:98:31:a7:8d:98:8d:49:c6:3e:
                    ef:16:06:df:a4:68:3c:c4:f8:3d:87:cf:e8:1c:cb:
                    ee:50:92:c1:23:74:d7:1e:1d:ab:a8:06:69:4d:a1:
                    89:56:34:4d:3d:45:79:84:85:2d:be:c0:9b:8a:dc:
                    b8:2f:98:0a:50:b5:fc:5e:e6:bb:de:55:d4:ba:e2:
                    a5:60:b4:1f:9d:f5:e8:f9:62:1f:dd:34:30:0b:2c:
                    45:ad:c9:83:14:10:07:da:93:a3:e7:d5:d6:52:e2:
                    ed:41:5a:ba:9f:7c:6c:8a:ca:38:3e:fc:76:64:6a:
                    ce:44:ea:97:3f:0f:2e:9e:b8:9a:4e:eb:9e:a1:9e:
                    9c:74:cd:23:06:82:2f:fe:b9:14:ad:dc:a3:19:80:
                    81:bd:ea:b8:60:e9:8e:ac:de:86:c0:f1:77:70:65:
                    01:c6:51:03:82:5e:50:94:33:4b:c5:cc:aa:39:54:
                    cb:24:ca:aa:1c:b4:fd:b1:9d:90:9a:2c:7b:e6:a2:
                    d6:10:38:35:bc:5c:e0:04:b2:1d:67:dc:d8:71:09:
                    8c:5f:3f:11:e2:b1:e5:55:cb:a8:86:c6:cd:39:65:
                    0b:12:ae:a5:64:e6:a5:0d:f6:cb:9c:c5:0b:3d:eb:
                    6c:f5:8c:0b:ad:c0:d9:d9:58:d6:9a:9f:1d:76:de:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E4:8C:08:70:0E:3C:35:14:58:40:81:E0:CF:D9:53:18:1B:0C:B3
            X509v3 Authority Key Identifier:
                keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f7:4d:de:ae:5c:26:28:29:6d:e8:b8:d5:67:ce:f5:15:89:
         c3:e5:3d:2b:53:4a:21:c2:1b:ea:55:b9:c6:19:d0:eb:83:28:
         ea:24:77:41:e9:f1:3c:24:46:43:7e:83:f6:41:90:83:4c:ef:
         a0:f5:36:33:2e:8c:bc:3e:1b:6b:f6:4d:75:29:ff:a8:c6:83:
         df:97:60:d4:3d:d2:a5:b0:49:5b:c3:4f:20:86:13:ff:8e:8f:
         89:1a:aa:cb:48:e8:b2:03:d3:49:54:65:bf:70:73:8c:ab:9b:
         59:c7:c6:4d:a0:75:27:b9:3f:8d:e4:62:22:99:b9:b9:4d:87:
         25:1d:58:b6:6a:34:60:8e:19:34:ee:01:9e:d8:5b:07:d8:94:
         50:0f:6b:fe:33:eb:99:6c:0e:fa:1b:9e:2c:ba:42:5c:bc:2d:
         f0:4d:1c:20:cb:34:4d:ff:77:56:a9:e5:2e:4d:79:9a:87:29:
         2f:4d:db:ed:3e:5d:79:00:ea:c5:8f:e4:27:12:f4:bc:b9:d6:
         94:c7:2b:ea:4d:9d:ee:0f:68:6b:aa:f6:81:74:4d:4f:15:1c:
         76:b8:53:bd:81:3c:9c:44:7e:22:3a:5f:7e:a3:ac:07:af:71:
         b6:dc:7b:17:00:c2:ec:8f:9f:37:7c:44:23:80:80:88:fa:bb:
         82:4c:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:08 2025 by rpki-client