Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
File:                     OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft (raw, json)
Hash identifier:          9OOfxgnQYWK81HlDnKTrdYofhhTYOe7miVvBEIy+nOA=
Subject key identifier:   38:7B:50:3D:13:10:65:C2:BD:4D:BF:95:19:80:D3:1B:96:82:1F:49
Authority key identifier: 3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
Certificate issuer:       /CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Certificate serial:       019F8F10EB7F2FE5D7C829BD8DD451D46DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
Manifest number:          AD
Signing time:             Thu 23 Jul 2026 13:01:18 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:18 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:18 +0000
Files and hashes:         1: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl (hash: LfsRnPFw4ng+80D6SrRPrzrjT4ime8vbQv58/miZFCk=)
                          2: gkTf7nQTsreRRFr_69F3-1CTYmo.asa (hash: 6ZWz3HOG4yY5iF+Cf+k2WgBB6OwjzBCJK4BD/nVdTag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:eb:7f:2f:e5:d7:c8:29:bd:8d:d4:51:d4:6d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
        Validity
            Not Before: Jul 23 13:01:18 2026 GMT
            Not After : Jul 24 13:01:18 2026 GMT
        Subject: CN=387b503d131065c2bd4dbf951980d31b96821f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:48:10:ba:71:50:0d:c0:69:77:d3:37:b5:f4:
                    8b:28:aa:43:1a:08:ca:6c:31:3e:db:03:8e:f8:7b:
                    98:33:bd:3a:67:12:11:d5:70:e3:12:c1:ed:b4:cc:
                    57:38:eb:ff:29:ae:cc:9a:19:35:93:f8:59:30:85:
                    ce:06:a9:86:1d:92:6c:dc:6a:e5:db:1a:9b:fc:07:
                    00:32:7d:ce:79:3d:54:6f:dd:5a:1d:1f:01:7d:5d:
                    f8:1b:d2:5d:11:04:1f:b8:a7:0a:59:b2:70:9b:93:
                    8c:85:6e:07:e1:36:3b:b4:ef:e6:4d:1a:df:7a:f1:
                    8a:de:cf:19:47:da:2a:01:85:25:35:b8:b3:c3:a4:
                    71:0c:37:5e:b0:5a:a2:93:c0:c7:30:2d:9f:ab:4f:
                    8b:80:d6:5b:06:b6:32:3d:1e:ea:0e:2b:76:eb:b1:
                    49:4d:d8:51:dd:8c:17:e5:6e:fa:70:e8:9b:69:97:
                    21:fc:d4:cb:a3:ec:95:b1:37:05:d5:9c:b7:61:c8:
                    57:f7:6e:52:9c:c9:b7:be:91:30:51:76:aa:52:9b:
                    a3:98:da:b3:49:cf:f5:b4:16:6d:30:3c:77:9e:9b:
                    0c:66:1b:b7:ef:25:31:14:95:34:25:b8:db:c2:23:
                    5a:14:26:f7:5b:37:34:9e:24:51:db:98:9f:36:3e:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7B:50:3D:13:10:65:C2:BD:4D:BF:95:19:80:D3:1B:96:82:1F:49
            X509v3 Authority Key Identifier:
                keyid:3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:59:3d:f2:00:b5:f8:c2:ed:62:4a:eb:48:2f:fd:56:11:c6:
         fe:6f:23:84:b3:07:e7:53:8f:63:ce:d7:2e:6e:64:e6:ed:33:
         d5:02:23:f3:7d:44:bb:a5:74:5b:a9:c7:36:87:e3:f9:d2:d4:
         7f:84:25:3b:d5:85:92:4a:17:73:a1:2a:49:41:2d:d8:09:f2:
         b2:01:4b:55:ee:f2:51:16:8e:27:e4:01:db:bd:e6:d5:26:7f:
         3e:fa:08:a4:52:cd:0a:e0:69:35:bc:b2:4b:78:1b:43:29:f5:
         ea:b4:3a:ba:31:7c:e9:c6:01:b1:5f:fd:2f:ac:f9:f7:da:44:
         ec:de:73:45:38:4a:3e:b0:16:a7:2f:03:a9:8f:5e:04:38:d3:
         95:be:07:d4:10:85:31:93:e4:98:7c:55:f5:df:dd:bb:c5:c2:
         26:e3:c4:ab:9a:9a:b3:fa:35:6d:05:89:dd:68:0a:5f:5e:c1:
         82:cf:33:24:8b:dc:97:f0:98:0b:ac:dc:75:8b:56:ec:66:96:
         d4:42:82:a4:b2:db:bd:40:e9:9f:30:7b:21:32:6f:fc:f9:ed:
         bf:02:d4:39:5d:1c:df:71:32:69:b5:fb:21:30:2b:ae:d6:75:
         a1:71:0c:69:b3:30:d7:c1:b2:5d:89:52:96:50:a4:f2:43:65:
         6a:35:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:27 2026 by rpki-client