Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
File:                     ozMRTL_Gv2aDccVofumKRC_Y6jY.mft (raw, json)
Hash identifier:          i6+LxOnVP+gHJkP31mmgX8vVGXCXT59zQoX+KWYcIE0=
Subject key identifier:   9A:6C:89:CD:BA:AB:C8:D4:74:95:08:BB:A1:1C:FA:08:AF:B1:96:C7
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Certificate issuer:       /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial:       0198D6CD9F2749E920782FE89DB56C324512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 12:00:56 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:56 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:56 +0000
Files and hashes:         1: TfTonluQfmH78OzaVxkJLWOPrQc.roa (hash: o/+GwvpVj7XMHL42Lw0eZWO0sJVLD6s9aZvEqCfH3Ic=)
                          2: ozMRTL_Gv2aDccVofumKRC_Y6jY.crl (hash: rzv13UyQddULOwske5aHCQT6nuhOwAjoM8aHtnVVSJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:9f:27:49:e9:20:78:2f:e8:9d:b5:6c:32:45:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
        Validity
            Not Before: Aug 23 12:00:56 2025 GMT
            Not After : Aug 24 12:00:56 2025 GMT
        Subject: CN=9a6c89cdbaabc8d4749508bba11cfa08afb196c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:be:e4:13:26:93:92:da:63:10:bb:30:b4:d3:
                    60:da:1e:60:66:7b:cb:ba:f2:4c:52:64:64:e4:4c:
                    76:8b:80:7b:3a:b4:e0:75:3c:eb:cc:41:90:ab:42:
                    f1:0c:4a:a7:3a:92:85:ff:63:a6:a2:46:4d:f1:3e:
                    6e:a8:c8:e3:f2:3e:a1:f3:8d:a5:5b:f0:b5:24:6f:
                    94:82:e7:55:1d:76:74:29:ea:24:0f:17:84:3a:eb:
                    46:3d:e4:0a:4e:c5:0c:39:7a:a1:41:3d:71:7f:f9:
                    8c:80:78:38:55:9c:46:5c:01:89:b9:b7:f9:65:27:
                    ec:e6:8d:7b:17:74:55:64:97:ba:43:6c:4a:e6:d6:
                    48:b4:29:d1:91:ef:37:05:6a:9b:39:4f:35:c7:c6:
                    42:a1:eb:46:d5:ae:43:39:a1:4e:2c:a3:76:1b:ef:
                    7a:25:4b:51:37:27:39:7a:1e:64:bd:5c:9e:1f:63:
                    28:ed:b5:43:6e:90:ef:13:e9:04:23:69:0f:9e:69:
                    fd:ab:e7:1f:79:22:f2:a9:67:d3:f9:b5:02:56:72:
                    2c:bd:0c:c2:19:90:c8:5a:b3:e1:18:43:43:b8:49:
                    a1:72:63:05:b9:6f:d8:3a:32:23:28:79:94:dc:8d:
                    1f:1f:63:b2:6d:b0:ef:12:60:df:64:dc:33:c5:25:
                    0d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6C:89:CD:BA:AB:C8:D4:74:95:08:BB:A1:1C:FA:08:AF:B1:96:C7
            X509v3 Authority Key Identifier:
                keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bc:e4:a1:94:2f:9e:d6:28:90:6d:75:63:30:55:a9:f1:61:
         be:be:6e:e1:0b:01:ea:30:d1:a4:43:b4:e0:d4:71:6b:d5:c7:
         6e:66:00:ca:ec:b6:c7:c2:1d:c8:c3:71:cc:1c:83:f6:71:d1:
         5e:8e:83:8b:24:3e:54:0a:83:87:2b:39:60:64:b7:ce:d8:43:
         77:e6:14:71:12:f3:94:1a:77:9a:b2:d1:6f:72:45:7e:8f:3b:
         6b:46:5f:90:66:1f:54:b5:16:e3:76:26:46:97:5e:6a:f4:c6:
         bd:c9:54:28:e9:f4:fa:6f:64:3c:bd:26:85:7d:95:76:f0:b4:
         f7:11:48:45:68:ca:7e:43:8c:e7:e2:67:7e:93:b4:33:82:6f:
         c5:be:09:71:05:17:33:6d:b3:38:6b:fe:bc:a2:0b:c0:35:2b:
         0b:4a:72:4f:f3:6d:0a:9e:45:b2:49:1c:4c:4d:8d:73:b8:e4:
         c3:be:0e:f7:3b:b1:ba:9c:6c:2b:e2:5d:fd:a0:1e:cf:ec:e6:
         ac:3b:72:51:9b:ea:75:0a:74:29:81:7f:a9:98:80:e1:91:11:
         fe:d0:a7:3a:0a:4f:7e:92:ed:9f:ac:dd:58:34:ae:e4:81:01:
         92:32:2f:ad:71:d4:c8:6a:da:b8:cb:5b:a5:27:0c:a9:e2:c5:
         2c:27:c3:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzZ8nSekgeC/onbVsMkUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMzMxMTRjYmZjNmJmNjY4MzcxYzU2ODdlZTk4YTQ0MmZk
OGVhMzYwHhcNMjUwODIzMTIwMDU2WhcNMjUwODI0MTIwMDU2WjAzMTEwLwYDVQQD
Eyg5YTZjODljZGJhYWJjOGQ0NzQ5NTA4YmJhMTFjZmEwOGFmYjE5NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA277kEyaTktpjELswtNNg2h5gZnvL
uvJMUmRk5Ex2i4B7OrTgdTzrzEGQq0LxDEqnOpKF/2OmokZN8T5uqMjj8j6h842l
W/C1JG+UgudVHXZ0KeokDxeEOutGPeQKTsUMOXqhQT1xf/mMgHg4VZxGXAGJubf5
ZSfs5o17F3RVZJe6Q2xK5tZItCnRke83BWqbOU81x8ZCoetG1a5DOaFOLKN2G+96
JUtRNyc5eh5kvVyeH2Mo7bVDbpDvE+kEI2kPnmn9q+cfeSLyqWfT+bUCVnIsvQzC
GZDIWrPhGENDuEmhcmMFuW/YOjIjKHmU3I0fH2OybbDvEmDfZNwzxSUNwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpsic26q8jUdJUIu6Ec+givsZbHMB8GA1UdIwQY
MBaAFKMzEUy/xr9mg3HFaH7pikQv2Oo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMt
Y2Q0OTI2NGVhZjBiLzEvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMtY2Q0OTI2NGVhZjBi
LzEvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7zkoZQv
ntYokG11YzBVqfFhvr5u4QsB6jDRpEO04NRxa9XHbmYAyuy2x8IdyMNxzByD9nHR
Xo6DiyQ+VAqDhys5YGS3zthDd+YUcRLzlBp3mrLRb3JFfo87a0ZfkGYfVLUW43Ym
RpdeavTGvclUKOn0+m9kPL0mhX2VdvC09xFIRWjKfkOM5+JnfpO0M4Jvxb4JcQUX
M22zOGv+vKILwDUrC0pyT/NtCp5FskkcTE2Nc7jkw74O9zuxupxsK+Jd/aAez+zm
rDtyUZvqdQp0KYF/qZiA4ZER/tCnOgpPfpLtn6zdWDSu5IEBkjIvrXHUyGrauMtb
pScMqeLFLCfDaw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:19 2025 by rpki-client