Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File:                     Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier:          MvZy6BbL7qJigRJ/zaaVnbIqjzgL9qJTWv9coq8McS4=
Subject key identifier:   2D:7F:85:56:F4:1D:09:25:AE:7F:8D:7C:1A:66:DE:8D:DA:9E:9D:CA
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer:       /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial:       0197B632C270AF865B0437B8C020F37BD583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number:          14F9
Signing time:             Sat 28 Jun 2025 11:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:08 +0000
Files and hashes:         1: GgsWPeSLOUohaMbTcn2R72DKvqo.roa (hash: FdIvFbwyG4T9lF5cxTm74n7FrVTd+NmNKr/3LVaY4Co=)
                          2: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: 9linGqiZXygTBvFBWmN/dSljX9miyRpCjNbHoz7A6ik=)
                          3: xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa (hash: HPp2kSbUasPwNyhN/FOSH9olW8dRjUen+6wuAaVDD8Y=)
                          4: y3TTdcjKoEjXwgjO1xfh0tYATdA.roa (hash: 7D4/Czv6H7eCbZASUzHWZokIq1S56p3iwes3EPnUWKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:c2:70:af:86:5b:04:37:b8:c0:20:f3:7b:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
        Validity
            Not Before: Jun 28 11:01:08 2025 GMT
            Not After : Jun 29 11:01:08 2025 GMT
        Subject: CN=2d7f8556f41d0925ae7f8d7c1a66de8dda9e9dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2c:66:9c:00:33:25:71:2e:6f:8f:1e:b5:91:
                    ae:11:04:58:76:00:14:77:53:74:b4:70:25:73:e0:
                    08:e7:bf:c6:b2:66:59:dc:f6:19:b2:35:fb:79:66:
                    15:2a:af:c6:1c:44:37:c2:db:65:87:97:67:c9:14:
                    b3:88:1d:13:34:00:31:34:a3:5f:d2:5e:6b:ec:ea:
                    58:56:23:02:84:4a:81:84:99:9b:bc:50:4e:87:ab:
                    ca:61:f1:c2:c5:2d:66:8a:dd:6e:86:dc:e6:5e:98:
                    ff:1a:77:8b:8e:3f:62:54:0a:86:e6:ba:b6:61:5f:
                    ab:a7:89:6b:b9:a8:cf:81:e2:08:af:50:53:85:a0:
                    c6:c6:5e:5f:5f:8a:13:6e:6c:06:8a:fe:70:eb:50:
                    fb:e2:5b:9b:f8:64:ac:84:d0:5f:57:89:59:d9:a2:
                    71:ce:90:99:e3:86:06:37:7f:d6:36:87:31:9d:99:
                    4a:7d:93:6a:09:ab:f7:af:43:ac:14:75:b8:de:a5:
                    3f:7a:1b:c3:c9:e3:b9:be:59:d7:9f:f9:04:9c:e9:
                    8e:ac:fb:a5:2a:6e:31:64:6a:82:ce:25:d0:9a:4e:
                    13:e9:de:e3:5b:33:38:79:19:ad:f9:ec:e8:fa:94:
                    0a:58:f1:c2:63:d7:fb:80:a7:70:54:00:f3:bd:df:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7F:85:56:F4:1D:09:25:AE:7F:8D:7C:1A:66:DE:8D:DA:9E:9D:CA
            X509v3 Authority Key Identifier:
                keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:28:b8:85:6e:2e:2c:fc:20:e1:44:32:07:06:14:af:82:
         6f:b9:03:93:dd:c5:65:6c:21:1f:76:e2:82:36:52:ce:a8:38:
         fb:96:76:a4:93:b4:ed:b6:92:b1:48:13:55:68:d6:39:a4:56:
         0c:28:19:c7:0e:db:c9:b2:31:ba:93:e9:98:c1:04:6e:c1:f6:
         07:12:0c:24:6e:6b:10:17:1a:73:a9:45:b3:12:67:97:60:48:
         96:71:75:c8:cb:5c:ea:84:e5:ed:ba:1a:d3:96:0a:d7:fc:56:
         67:4e:e0:11:7d:4f:83:4f:03:94:5a:ae:3e:86:bd:95:a3:ec:
         e8:2f:82:43:c0:e5:44:75:4c:36:24:0e:f0:a1:14:0d:25:fc:
         1c:49:e7:f0:44:75:ff:9b:a6:ac:42:04:b8:c5:77:b0:b8:4f:
         31:92:25:60:52:62:bf:95:72:9b:18:7d:f2:72:65:7f:59:84:
         4b:b2:c1:9c:34:ed:d0:49:d0:47:9a:6a:f1:42:db:d1:c7:b7:
         87:df:b4:3b:94:5b:fe:e0:ab:87:1a:6c:af:a3:22:5e:52:20:
         53:b6:d8:7b:1b:55:a5:10:37:6d:4b:d5:53:48:5f:69:71:c7:
         ae:4e:b2:2d:a0:b7:10:0d:eb:e7:b0:f4:35:97:72:20:79:fc:
         07:50:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:02 2025 by rpki-client