Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File:                     omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier:          WsXphKEKbBW6fWP5sWx9lRGEAeoZ3UMqptY2NisYTeA=
Subject key identifier:   6F:5E:79:0D:5C:2B:07:EB:93:48:F7:BF:A1:5B:69:F1:5C:E6:98:C1
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer:       /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial:       019E1DFE39A12204748BB411BF15F017E23F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 21:01:00 +0000
Manifest this update:     Tue 12 May 2026 21:01:00 +0000
Manifest next update:     Wed 13 May 2026 21:01:00 +0000
Files and hashes:         1: bLAwkpsQ7D6caU7zIeAaY5nux8E.roa (hash: KqLO/vffpcb+/IGfGAsD+PmTdmluxkrnPOhEPWZAu6E=)
                          2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: iDpCOUQ56HcR9e6/oJq6iOuuh9YX3sJKx4OlONQKjSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:39:a1:22:04:74:8b:b4:11:bf:15:f0:17:e2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
        Validity
            Not Before: May 12 21:01:00 2026 GMT
            Not After : May 13 21:01:00 2026 GMT
        Subject: CN=6f5e790d5c2b07eb9348f7bfa15b69f15ce698c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:c2:43:f7:f4:6b:17:c8:b1:78:78:3b:f4:
                    19:91:77:ac:53:70:42:ae:9d:45:a8:9a:4b:14:ae:
                    08:19:aa:59:3a:1e:2a:50:3f:29:14:6b:6d:6f:ad:
                    32:69:be:f8:51:16:bd:b2:d1:0a:aa:6d:88:90:08:
                    99:d1:1b:68:9c:af:a0:e5:7e:e9:3d:3b:ed:9b:85:
                    7b:44:93:75:49:1a:f8:fe:82:43:6e:e1:d9:d1:9b:
                    15:f1:35:0f:1d:f1:b4:75:1e:24:9d:6d:9f:36:a1:
                    f6:c9:c1:09:0b:99:5a:81:c7:2e:82:c7:85:ff:a3:
                    78:89:b6:a1:58:df:25:8b:83:62:19:37:f5:60:41:
                    16:ba:46:f3:52:37:97:9c:7a:8a:f7:2d:00:68:cf:
                    2f:84:e3:03:a8:d2:cd:5e:df:87:b2:0d:c5:05:0e:
                    3f:8d:0a:7d:4e:84:d8:0d:28:a9:55:b2:3d:7c:4e:
                    1f:59:6d:49:4a:d9:ee:ea:71:7b:89:ea:ee:fb:46:
                    42:4a:c1:8a:fe:b1:78:42:64:be:f0:bb:37:59:67:
                    d9:a8:cd:20:75:75:a6:93:5f:2d:c7:d7:f5:f9:b3:
                    70:8d:ab:d6:ad:26:c6:6f:80:e4:50:c3:d8:43:d5:
                    49:8a:2b:41:91:07:13:39:b3:c0:9d:20:c6:64:e3:
                    38:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5E:79:0D:5C:2B:07:EB:93:48:F7:BF:A1:5B:69:F1:5C:E6:98:C1
            X509v3 Authority Key Identifier:
                keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:de:9d:db:3c:08:3b:e4:08:6d:0b:35:08:34:db:69:d8:7e:
         49:72:38:ec:ac:0a:63:5b:d9:aa:85:87:cd:45:a3:8a:4a:53:
         65:00:c0:e4:61:9c:71:59:7c:3c:57:35:c0:c5:12:72:e7:6a:
         90:5d:d1:c9:31:a9:28:8b:e8:08:dc:60:50:70:3d:ed:b9:62:
         d8:62:9c:15:59:fe:08:6e:c9:cf:3d:e6:da:ea:f7:61:9f:31:
         33:c9:eb:a8:3c:fb:0a:f6:77:34:ec:52:46:f4:e0:02:3e:d9:
         02:c0:f4:69:42:f6:53:53:ae:f5:d2:f6:e8:15:a2:af:3a:60:
         4f:5b:ba:f9:d7:15:12:62:a2:7b:7f:f5:b0:45:6b:da:60:ce:
         3a:a9:6a:e9:5c:83:b9:55:0b:fe:16:55:9c:06:64:60:29:26:
         f5:3c:8f:ee:5a:bc:6b:fa:2b:21:3f:fe:9b:ec:48:1c:4e:ca:
         52:25:1d:e6:80:f9:d4:53:d9:11:6e:f5:bb:b4:d3:7c:81:5a:
         98:18:98:3a:ba:76:d3:fb:ff:2e:a2:32:76:55:2a:78:80:de:
         1e:69:07:8e:f7:bd:3d:e8:bf:d0:6e:07:82:c1:cd:41:e2:0b:
         98:66:52:e1:4c:a7:b6:e2:0a:5d:99:2a:36:11:26:05:ac:a0:
         7c:2a:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:26:24 2026 by rpki-client