Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
File:                     ozMRTL_Gv2aDccVofumKRC_Y6jY.mft (raw, json)
Hash identifier:          VixgcRI7YhFQSncmSm8bKDh0kI11IZwSeNmMDIYYkPE=
Subject key identifier:   2E:25:C2:6E:68:8C:CA:E4:31:66:84:68:A8:3C:9B:A2:4E:2F:AA:16
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Certificate issuer:       /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial:       019D273B1732B8290C04BC6E86D7B3D11CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
Manifest number:          1892
Signing time:             Wed 25 Mar 2026 23:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:17 +0000
Files and hashes:         1: _of6XJCDa7IDRKvZCSxi-0j0JAQ.roa (hash: kgoplydOSvibwy5xwsCsSSzIjtviPAnX14Ip0WNTTtg=)
                          2: ozMRTL_Gv2aDccVofumKRC_Y6jY.crl (hash: 0C25odAfyH1nDXJZeK0VWJtyM7isplbBxQSTSXYd080=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:17:32:b8:29:0c:04:bc:6e:86:d7:b3:d1:1c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
        Validity
            Not Before: Mar 25 23:01:17 2026 GMT
            Not After : Mar 26 23:01:17 2026 GMT
        Subject: CN=2e25c26e688ccae431668468a83c9ba24e2faa16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:b8:c5:d0:dd:6a:88:da:06:a7:68:34:6f:
                    26:9b:86:b2:5f:f6:06:99:02:4f:14:db:5e:5d:97:
                    6d:14:ef:e4:93:cf:03:f3:c8:44:98:1f:36:e7:9e:
                    98:2d:0a:ef:12:93:f6:23:72:53:62:11:1d:3a:91:
                    b6:b8:e5:ce:de:50:35:7a:ee:fb:8b:ae:04:e6:7d:
                    8c:00:63:20:13:66:ff:91:90:7e:15:5f:45:40:82:
                    06:69:63:2a:a9:85:4a:fa:84:37:13:b2:e4:ef:58:
                    53:6c:9d:8d:dc:71:8b:ad:2e:3c:c4:e0:c5:65:7d:
                    2f:b8:af:9a:ea:02:4b:55:07:6f:62:bd:b2:a6:5b:
                    6f:6f:6b:f2:74:3c:17:fa:38:25:e9:73:9a:5e:49:
                    67:53:43:b4:8f:54:2b:74:dc:d5:bc:09:d9:9d:92:
                    e3:56:8e:26:d6:33:cc:6f:bf:bc:a1:5a:0e:86:bd:
                    aa:52:cc:ac:8f:99:a8:58:24:18:15:97:1f:24:ff:
                    58:56:2f:2e:41:5f:1f:0a:76:d6:06:8b:60:dc:5a:
                    04:83:b8:71:9e:13:ec:b3:69:32:fe:39:71:ba:c6:
                    01:4f:a9:3d:74:9b:80:da:70:f3:0c:4b:1e:29:84:
                    bd:89:58:2e:39:1d:61:ce:66:32:60:aa:9d:1b:7e:
                    9f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:25:C2:6E:68:8C:CA:E4:31:66:84:68:A8:3C:9B:A2:4E:2F:AA:16
            X509v3 Authority Key Identifier:
                keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:74:6c:99:ae:e0:36:4f:4f:b3:d3:5d:ae:2f:93:ff:3c:22:
         01:9f:fe:57:bc:1f:ed:8b:64:6a:c5:73:9c:dd:fd:0d:26:06:
         b4:70:36:82:45:78:62:ee:02:6c:74:7a:2b:ca:32:f3:bc:d8:
         88:a6:1e:bb:59:66:44:b6:f1:d7:17:ed:f2:0d:99:e0:0f:c0:
         a7:7f:75:4a:87:4c:de:5e:c1:71:97:6c:29:f6:a7:79:65:e6:
         47:83:21:c1:c4:a8:99:7c:f4:10:c2:e9:81:44:2e:9d:4a:44:
         e4:f8:14:12:49:fc:44:d1:48:6f:46:ca:80:2f:9b:2c:5e:48:
         5e:0c:55:95:93:e1:d4:c6:1e:b2:eb:5b:48:ad:9c:0a:03:86:
         b3:d3:28:6b:b6:75:0c:89:56:3b:89:e5:7b:23:27:be:bf:81:
         fe:73:ea:9c:57:ea:23:cd:70:d0:6a:78:49:85:d1:43:26:2b:
         88:13:df:53:4c:38:88:a1:85:83:db:42:07:e6:9a:bb:b5:bc:
         51:17:8d:86:48:d1:62:4e:b1:c0:3f:95:31:b3:33:5e:b5:fb:
         a4:43:17:b2:5b:d1:79:04:69:17:fd:66:0a:f0:b1:ef:3f:02:
         5a:7c:50:c9:ba:48:27:51:7f:4b:01:ea:35:8c:b1:b3:d8:3c:
         85:43:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:29 2026 by rpki-client