Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
File:                     ozMRTL_Gv2aDccVofumKRC_Y6jY.mft (raw, json)
Hash identifier:          MW9IKawi7H6Y4eNzGO+NRcdHH78xKZiLUUla/NtXkzo=
Subject key identifier:   53:BC:5A:0D:28:8A:D8:35:D9:DE:0F:AD:E8:3E:29:70:83:EB:C5:A4
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Certificate issuer:       /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial:       01A114857F812EC879C76FAEF96AEE226922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
Manifest number:          1A9B
Signing time:             Wed 07 Oct 2026 04:00:55 +0000
Manifest this update:     Wed 07 Oct 2026 04:00:55 +0000
Manifest next update:     Thu 08 Oct 2026 04:00:55 +0000
Files and hashes:         1: ozMRTL_Gv2aDccVofumKRC_Y6jY.crl (hash: Nz5ID9jKsvz1DvYhKEZblh2d78Rj6QmD/wgfsPLxdmg=)
                          2: uWmBy_3GGqy8btIxLNhR8fMR-cg.roa (hash: zwBMulSyamfk8Z8Pk6Dsmd9mcHlBSgTYMX3UQ9H6Umo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:85:7f:81:2e:c8:79:c7:6f:ae:f9:6a:ee:22:69:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
        Validity
            Not Before: Oct  7 04:00:55 2026 GMT
            Not After : Oct  8 04:00:55 2026 GMT
        Subject: CN=53bc5a0d288ad835d9de0fade83e297083ebc5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:85:b2:b2:63:39:05:2b:56:0f:4f:2f:66:
                    bc:97:c3:07:9a:91:1c:0c:9d:aa:ce:bd:3d:2e:0a:
                    69:9f:19:1b:01:34:d5:1c:92:0d:09:67:6e:d7:29:
                    9b:4d:fb:5b:43:78:c2:ea:45:d1:45:37:67:55:09:
                    ed:4b:46:97:7e:95:fd:37:52:24:b3:23:c0:9e:00:
                    dd:2e:1d:87:b2:81:39:27:d6:df:b0:92:73:25:37:
                    53:6e:73:bb:e5:10:20:cc:b9:8a:56:70:69:fb:5e:
                    70:71:61:38:cb:d6:30:bd:a8:0a:aa:89:d9:5b:6d:
                    5f:2a:a5:06:62:41:43:a3:e9:8c:f8:d9:e3:39:e8:
                    01:9a:af:92:41:dd:37:8b:d1:95:60:a8:6b:99:39:
                    71:24:e0:b9:d2:6d:17:f6:3c:24:d7:7a:7c:97:d2:
                    6b:26:08:b1:3b:53:da:87:6a:79:97:a2:64:d7:67:
                    52:db:3e:a4:31:c8:e2:04:4d:3e:24:bd:f3:60:f6:
                    bf:88:f5:5b:33:c2:be:7b:2e:e1:fa:76:ff:65:d0:
                    f3:2d:90:db:32:be:21:fd:0c:07:d8:b9:65:e6:76:
                    96:81:aa:c7:cc:bf:00:58:3d:3b:7c:ad:26:b8:1e:
                    84:3c:d8:0b:83:aa:98:4e:12:e8:89:31:2a:12:c9:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:5A:0D:28:8A:D8:35:D9:DE:0F:AD:E8:3E:29:70:83:EB:C5:A4
            X509v3 Authority Key Identifier:
                keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:de:a3:b8:e4:70:98:19:1c:9e:40:ac:4c:ac:0d:04:5e:05:
         5f:c7:23:62:93:75:39:3f:6c:29:92:14:fa:23:95:66:e2:c8:
         b1:48:31:3d:4e:4c:24:4b:68:e0:21:bf:13:31:2b:6e:94:f7:
         c8:ab:2d:3e:86:d6:09:8c:0b:2a:d5:6f:2a:35:85:59:2a:78:
         3d:53:ef:3a:01:b3:dd:76:a3:91:b7:17:5b:61:be:18:63:f4:
         18:ae:09:7f:83:64:64:b7:99:c5:c2:c9:04:6c:4f:c0:7e:99:
         02:c9:cb:0a:1e:f7:12:7a:37:c8:55:b2:e3:71:2a:66:6b:d6:
         c9:a5:2e:6a:d8:9f:ff:fd:f1:4f:5d:24:98:c4:0a:d1:7c:de:
         5d:e5:23:17:a9:11:d2:cb:3c:01:be:64:c9:ea:05:c0:c7:d8:
         64:ec:10:c4:a9:72:e8:36:c0:ba:cb:5a:90:0b:ec:67:10:56:
         ca:aa:6c:66:d5:ca:2a:48:32:6d:e0:06:0b:a2:c0:24:86:f9:
         ba:86:65:c5:dd:e3:e8:9f:8d:46:ad:a5:9f:a0:a4:43:a6:cb:
         96:a6:c0:83:8f:c1:2d:e3:a6:ff:e5:0d:18:d2:23:ff:78:dc:
         30:39:d5:c3:8f:71:56:9f:2c:92:7d:8d:9a:df:e1:dd:dc:40:
         e8:9a:0d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEUhX+BLsh5x2+u+WruImkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMzMxMTRjYmZjNmJmNjY4MzcxYzU2ODdlZTk4YTQ0MmZk
OGVhMzYwHhcNMjYxMDA3MDQwMDU1WhcNMjYxMDA4MDQwMDU1WjAzMTEwLwYDVQQD
Eyg1M2JjNWEwZDI4OGFkODM1ZDlkZTBmYWRlODNlMjk3MDgzZWJjNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0viFsrJjOQUrVg9PL2a8l8MHmpEc
DJ2qzr09LgppnxkbATTVHJINCWdu1ymbTftbQ3jC6kXRRTdnVQntS0aXfpX9N1Ik
syPAngDdLh2HsoE5J9bfsJJzJTdTbnO75RAgzLmKVnBp+15wcWE4y9YwvagKqonZ
W21fKqUGYkFDo+mM+NnjOegBmq+SQd03i9GVYKhrmTlxJOC50m0X9jwk13p8l9Jr
JgixO1Pah2p5l6Jk12dS2z6kMcjiBE0+JL3zYPa/iPVbM8K+ey7h+nb/ZdDzLZDb
Mr4h/QwH2Lll5naWgarHzL8AWD07fK0muB6EPNgLg6qYThLoiTEqEslRRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO8Wg0oitg12d4Preg+KXCD68WkMB8GA1UdIwQY
MBaAFKMzEUy/xr9mg3HFaH7pikQv2Oo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMt
Y2Q0OTI2NGVhZjBiLzEvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMtY2Q0OTI2NGVhZjBi
LzEvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuN6juORw
mBkcnkCsTKwNBF4FX8cjYpN1OT9sKZIU+iOVZuLIsUgxPU5MJEto4CG/EzErbpT3
yKstPobWCYwLKtVvKjWFWSp4PVPvOgGz3XajkbcXW2G+GGP0GK4Jf4NkZLeZxcLJ
BGxPwH6ZAsnLCh73Eno3yFWy43EqZmvWyaUuatif//3xT10kmMQK0XzeXeUjF6kR
0ss8Ab5kyeoFwMfYZOwQxKly6DbAustakAvsZxBWyqpsZtXKKkgybeAGC6LAJIb5
uoZlxd3j6J+NRq2ln6CkQ6bLlqbAg4/BLeOm/+UNGNIj/3jcMDnVw49xVp8skn2N
mt/h3dxA6JoNjQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 08:31:06 2026 by rpki-client