Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File:                     Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier:          u2Bp5+Vhws/lNsJliCEZzy5wst64JUwxQK7ZiBZqEZc=
Subject key identifier:   E8:46:6A:75:BA:0A:4C:09:31:6B:ED:46:22:FE:9F:14:07:5C:4A:D0
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer:       /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial:       0198D5F13F420BA9D67121A8E91520C9819D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number:          158E
Signing time:             Sat 23 Aug 2025 08:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:13 +0000
Files and hashes:         1: GgsWPeSLOUohaMbTcn2R72DKvqo.roa (hash: FdIvFbwyG4T9lF5cxTm74n7FrVTd+NmNKr/3LVaY4Co=)
                          2: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: iwQuqWt3LsR2NIF5V2TK7ZI+3y1uYRepndPzWH096gE=)
                          3: xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa (hash: HPp2kSbUasPwNyhN/FOSH9olW8dRjUen+6wuAaVDD8Y=)
                          4: y3TTdcjKoEjXwgjO1xfh0tYATdA.roa (hash: 7D4/Czv6H7eCbZASUzHWZokIq1S56p3iwes3EPnUWKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:3f:42:0b:a9:d6:71:21:a8:e9:15:20:c9:81:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
        Validity
            Not Before: Aug 23 08:00:13 2025 GMT
            Not After : Aug 24 08:00:13 2025 GMT
        Subject: CN=e8466a75ba0a4c09316bed4622fe9f14075c4ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:a6:43:a9:06:86:a3:e5:a7:e7:77:24:61:
                    5f:a6:34:bf:51:ae:a3:dc:d9:92:4b:e1:31:fb:93:
                    b0:71:01:6d:80:86:40:7f:03:c7:8a:d2:32:24:9f:
                    e5:e7:cc:ae:2c:9c:db:75:90:c9:a6:a5:c4:be:b6:
                    3e:7e:8c:79:0e:c1:1b:56:80:5b:44:40:01:a0:fc:
                    c5:66:0d:08:27:c6:1a:55:4d:4d:a0:12:bb:a9:2b:
                    65:ac:0f:02:27:b6:03:08:a0:e1:8d:f7:81:18:bd:
                    2f:31:19:39:27:87:ca:17:74:cf:7a:b4:ab:17:c4:
                    e4:7f:9f:1d:76:01:16:3b:bc:92:dd:cc:70:e1:f4:
                    be:f9:d9:d5:af:89:72:7e:73:0d:29:40:e4:ae:af:
                    37:e9:39:64:96:14:92:16:4c:76:65:59:18:7b:63:
                    6c:d6:1d:f7:e0:65:28:fe:4a:90:d2:6d:b9:e8:20:
                    4e:3c:dc:d5:55:d4:f6:28:3a:ca:5c:bb:8c:d7:64:
                    6d:06:28:5c:f8:58:75:dc:13:75:74:9a:1a:54:f5:
                    87:a3:58:e3:db:53:dc:ef:f7:e0:3e:72:b4:a7:4f:
                    e9:65:2f:64:72:8c:95:bb:3a:d9:11:57:24:27:c4:
                    29:81:02:0a:8f:b6:69:23:43:15:b1:58:9f:96:f2:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:6A:75:BA:0A:4C:09:31:6B:ED:46:22:FE:9F:14:07:5C:4A:D0
            X509v3 Authority Key Identifier:
                keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:db:1d:46:d3:93:d6:91:e1:41:5c:2a:c3:79:0a:b9:e3:
         a2:39:8b:50:8e:49:c1:59:4c:44:50:5c:0b:ee:b5:7c:a2:97:
         5e:2c:61:60:bf:78:37:9c:1c:dc:0e:bd:9b:cd:4e:d9:01:ac:
         90:5d:4b:72:0c:53:2b:4f:66:3e:da:08:e2:65:79:6b:eb:20:
         25:1d:5d:f8:40:30:0e:6f:74:24:88:3e:8d:91:8d:8e:b9:2f:
         af:5a:02:25:c1:5f:3b:31:9a:0d:dd:6a:e1:ac:91:b0:8a:f5:
         d5:17:26:cf:8a:b4:e9:fa:da:15:e8:87:a1:de:68:37:47:f8:
         f9:60:29:2b:19:4d:9c:68:00:26:46:8e:98:ce:54:1a:62:d2:
         94:83:cf:25:60:49:e6:e9:b5:07:56:5a:ac:ab:4c:cc:80:c3:
         b3:2a:e2:35:8e:f4:88:5d:03:fb:d0:9b:18:0e:95:71:75:6a:
         23:8c:67:29:4c:98:22:8c:bd:64:9c:fc:f3:5e:47:d0:16:45:
         91:e1:ec:07:c8:34:ba:f1:14:ff:46:d8:fd:91:80:40:a8:f2:
         70:2a:fb:f6:54:2f:1e:bc:fa:12:57:6f:70:1a:0f:0f:6e:3f:
         71:e3:32:b4:ca:55:66:6d:7a:75:a2:eb:31:3c:21:b8:3b:71:
         84:5c:73:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8T9CC6nWcSGo6RUgyYGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjg1Y2Y4OGE3ZmM0M2ZlMWM3ZmUzNGE2ZmYzZGRiYjQx
NGYwYjUwHhcNMjUwODIzMDgwMDEzWhcNMjUwODI0MDgwMDEzWjAzMTEwLwYDVQQD
EyhlODQ2NmE3NWJhMGE0YzA5MzE2YmVkNDYyMmZlOWYxNDA3NWM0YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9mmQ6kGhqPlp+d3JGFfpjS/Ua6j
3NmSS+Ex+5OwcQFtgIZAfwPHitIyJJ/l58yuLJzbdZDJpqXEvrY+fox5DsEbVoBb
REABoPzFZg0IJ8YaVU1NoBK7qStlrA8CJ7YDCKDhjfeBGL0vMRk5J4fKF3TPerSr
F8Tkf58ddgEWO7yS3cxw4fS++dnVr4lyfnMNKUDkrq836TlklhSSFkx2ZVkYe2Ns
1h334GUo/kqQ0m256CBOPNzVVdT2KDrKXLuM12RtBihc+Fh13BN1dJoaVPWHo1jj
21Pc7/fgPnK0p0/pZS9kcoyVuzrZEVckJ8QpgQIKj7ZpI0MVsViflvIcYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhGanW6CkwJMWvtRiL+nxQHXErQMB8GA1UdIwQY
MBaAFDpoXPiKf8Q/4cf+NKb/Pdu0FPC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDct
NTlkNmNhNjVjY2JjLzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDctNTlkNmNhNjVjY2Jj
LzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYY7bHUbT
k9aR4UFcKsN5CrnjojmLUI5JwVlMRFBcC+61fKKXXixhYL94N5wc3A69m81O2QGs
kF1LcgxTK09mPtoI4mV5a+sgJR1d+EAwDm90JIg+jZGNjrkvr1oCJcFfOzGaDd1q
4ayRsIr11Rcmz4q06fraFeiHod5oN0f4+WApKxlNnGgAJkaOmM5UGmLSlIPPJWBJ
5um1B1ZarKtMzIDDsyriNY70iF0D+9CbGA6VcXVqI4xnKUyYIoy9ZJz8815H0BZF
keHsB8g0uvEU/0bY/ZGAQKjycCr79lQvHrz6EldvcBoPD24/ceMytMpVZm16daLr
MTwhuDtxhFxzyA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:43 2025 by rpki-client