Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File:                     om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier:          cIFvpZkI+v6Ikr9EutsgKJjzsRJUDTdWt30z4pOg2Hc=
Subject key identifier:   41:64:E8:1D:58:88:32:43:BE:E5:23:02:E5:CD:74:E4:27:8D:06:10
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer:       /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial:       01A0DC4DFC4FC0F6747E1A81121E46468EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number:          1A05
Signing time:             Sat 26 Sep 2026 06:01:33 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:33 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:33 +0000
Files and hashes:         1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=)
                          2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: KJO3vkovDJyORfOYugNRWGH0bHx5PCbP/GICqO7/Z5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:fc:4f:c0:f6:74:7e:1a:81:12:1e:46:46:8e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
        Validity
            Not Before: Sep 26 06:01:33 2026 GMT
            Not After : Sep 27 06:01:33 2026 GMT
        Subject: CN=4164e81d58883243bee52302e5cd74e4278d0610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:d7:bd:34:bc:05:1b:4a:44:21:c1:d9:00:
                    8c:8c:d3:94:9f:7f:f2:7e:9f:b8:11:10:89:2c:cf:
                    49:79:2b:56:5d:d1:70:e7:57:05:c0:3a:2a:65:25:
                    dd:8d:7d:69:58:53:04:69:aa:f8:a9:f0:83:76:b6:
                    7a:4d:8c:36:68:fe:e0:77:99:bf:d6:d4:bf:d9:c1:
                    21:a1:bb:e6:43:cc:e3:96:6e:e5:f6:74:17:95:61:
                    58:32:67:37:90:0b:62:bf:b0:af:c4:fd:fa:10:16:
                    f3:19:e2:ac:72:c1:16:05:aa:96:b6:d1:70:0d:66:
                    35:ed:41:7b:07:cc:5d:c0:2f:ab:df:13:89:63:61:
                    2d:b6:21:00:2d:39:16:f1:29:66:3c:82:e8:8b:fc:
                    a9:28:dd:25:d4:65:0e:81:cf:68:d9:41:0d:be:8c:
                    82:0c:41:08:eb:10:88:ae:7b:9a:73:3d:17:ba:84:
                    aa:37:95:8e:d2:33:8a:c2:55:a3:7a:b6:c3:7c:f6:
                    6e:36:a6:8b:cc:7f:bf:2d:c5:1e:eb:a7:ce:f3:4c:
                    5c:9e:8e:4a:c3:86:59:e2:c2:24:ea:a5:b9:84:55:
                    8d:54:b4:5d:ad:d7:d3:2c:ae:f0:5e:ba:54:50:53:
                    01:1e:8c:15:35:8c:5d:42:f9:ad:3a:82:3c:7e:97:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:64:E8:1D:58:88:32:43:BE:E5:23:02:E5:CD:74:E4:27:8D:06:10
            X509v3 Authority Key Identifier:
                keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4d:75:8f:d9:e7:4f:b6:38:4b:fc:cb:52:82:31:60:de:bc:
         b6:56:bb:71:e5:4d:ec:01:ae:ed:22:11:c8:91:77:2f:55:d7:
         53:d3:88:02:f4:70:e7:2c:8e:48:f6:ee:9d:8e:ff:7f:0d:00:
         28:44:2c:2a:21:36:b3:6e:d1:61:ed:36:f3:7a:1d:6f:12:03:
         67:01:fb:22:a2:4c:6b:a9:e6:a5:67:8e:bc:5f:59:f7:9d:b9:
         eb:c6:1d:e6:d9:8b:1b:a4:66:95:7e:91:22:d4:4e:e8:b7:8f:
         26:c8:4e:15:5d:d0:c2:92:f5:7a:e7:d1:43:55:7a:10:1a:d3:
         39:54:79:f5:5c:c1:ba:bf:e9:ec:6d:6f:06:99:5a:7d:56:12:
         94:0a:d4:67:c4:07:ac:88:ab:cd:43:22:2d:15:c0:81:f4:c8:
         dd:21:fe:2c:51:06:f5:37:4b:cb:df:86:f7:98:10:0d:31:2c:
         6f:56:f3:25:6e:a9:5c:6c:bf:bc:00:33:a7:51:58:35:ef:54:
         89:84:cd:e9:c6:6a:0d:cd:1d:58:e5:bc:39:51:17:5d:02:6f:
         f3:39:99:c7:77:e9:43:e4:63:34:11:94:e7:b2:ad:be:3c:04:
         9a:ea:8d:7b:4a:22:b9:38:c4:e4:9d:b9:2c:53:49:4b:71:1b:
         0b:cb:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:50:51 2026 by rpki-client