Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File:                     Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier:          HQFogdWlsHIgEveoBd8mVa8doALWNv/9jo1gj4QJks4=
Subject key identifier:   C8:DA:6D:F8:AC:1E:5A:3C:65:18:A5:3C:B9:88:E3:46:DC:F1:A0:E8
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer:       /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial:       019E1DC747CBD197F2A8E0CF0508E3E8A4C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number:          184B
Signing time:             Tue 12 May 2026 20:00:59 +0000
Manifest this update:     Tue 12 May 2026 20:00:59 +0000
Manifest next update:     Wed 13 May 2026 20:00:59 +0000
Files and hashes:         1: 4CWfekzf4x-HS1fJIidism45k8I.roa (hash: BHdLLhr5F9G9d810caL7Kieqc8ckL+IwjTONjFXfuYQ=)
                          2: AleCDdJblQdVI-S091EQULB75VY.roa (hash: eSD+DKApi4DxBKaxewRCjm2s463W9mcSqjdhdutCm0w=)
                          3: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: GecfyK6ImH45qoptkQw9w4FXz91SNnaam3WONF8w9W0=)
                          4: Sl9bNPBsXlBI0DeUAp-mjVlbQuQ.roa (hash: OCH6KKa8NHD+YpgJ2LuApSob95p9PeDsu1ZA6J3sKlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:47:cb:d1:97:f2:a8:e0:cf:05:08:e3:e8:a4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
        Validity
            Not Before: May 12 20:00:59 2026 GMT
            Not After : May 13 20:00:59 2026 GMT
        Subject: CN=c8da6df8ac1e5a3c6518a53cb988e346dcf1a0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:aa:08:53:6f:3d:3b:56:d4:17:d4:72:81:37:
                    0d:17:52:e4:e8:1d:3f:6e:be:25:a5:1a:17:72:5b:
                    a6:ef:dd:52:eb:da:39:15:9a:4d:4e:60:95:04:21:
                    9d:f4:af:e3:db:5f:3e:c9:a5:ba:d9:96:e4:fd:af:
                    6f:95:66:06:fe:13:c9:67:72:17:cf:b3:37:f2:6c:
                    1d:f5:6b:cc:f9:81:d4:76:4b:5a:83:7d:b8:2c:99:
                    c1:7b:2d:19:99:2a:20:d5:74:0b:96:7a:27:21:7e:
                    15:f3:f5:1f:ca:d7:75:82:7d:14:14:a1:1a:13:68:
                    f4:6d:f0:97:c5:27:e2:56:7b:9c:c0:78:67:6c:78:
                    07:73:e5:6c:18:9d:1d:a9:60:df:7c:d7:c1:46:eb:
                    de:0a:b7:3e:80:3f:5c:f8:40:03:91:09:d8:ab:66:
                    32:e2:4a:20:82:dd:7e:ed:85:05:0c:5c:df:20:91:
                    f2:52:16:1a:6f:b4:55:ed:8d:52:8c:6a:8d:11:c3:
                    21:13:4a:23:9c:d3:31:22:3f:b2:18:f6:f5:e5:58:
                    d4:93:6c:7c:8b:b3:38:5f:16:cc:bb:eb:a8:45:e8:
                    5f:43:56:8b:ea:d3:62:94:a0:41:23:cf:e2:9f:d1:
                    c3:c8:bf:be:16:61:1f:dd:5d:32:d9:fa:34:c2:65:
                    ff:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DA:6D:F8:AC:1E:5A:3C:65:18:A5:3C:B9:88:E3:46:DC:F1:A0:E8
            X509v3 Authority Key Identifier:
                keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:25:62:f5:a5:4d:dc:ca:b3:71:1e:7d:29:5a:6b:26:93:e0:
         18:9f:ae:4e:d7:f8:4d:e4:d6:7b:e9:f2:c1:9f:b1:05:99:8d:
         92:4d:ac:9a:e9:38:d9:df:e4:1e:85:68:8b:be:1a:5b:89:8d:
         ab:b7:1d:ba:2b:56:b2:f8:e6:19:c6:0b:20:08:bb:f2:11:59:
         da:4f:19:78:92:df:c2:e6:af:2b:7a:4d:40:44:ca:00:0a:f9:
         c3:3e:75:49:b1:66:e9:2e:52:be:4f:af:45:e9:d3:74:c6:55:
         3e:13:ef:ef:1d:fb:c5:e4:8a:46:7f:26:8e:0b:35:61:fb:56:
         cc:26:1e:3f:18:f3:ef:13:fe:ca:a8:3e:39:d2:45:52:22:e6:
         81:c0:6a:4d:c1:61:64:4d:f8:b4:4a:15:89:f0:ef:fa:15:c8:
         08:2d:19:b7:07:c5:a2:27:54:9d:0a:5c:13:58:1b:57:9c:30:
         40:4f:0c:66:5b:8f:d4:76:2f:e4:62:1d:6f:f8:a2:4e:0f:40:
         07:d4:af:69:5b:d7:44:ce:7f:20:94:d3:43:67:3e:c0:73:f0:
         14:39:19:5a:7c:a4:d9:93:43:0a:38:f9:a5:e6:43:52:37:1a:
         dc:e7:e0:b8:f1:69:89:0e:c2:be:6e:34:62:65:bf:16:c4:a9:
         ed:d8:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:23 2026 by rpki-client