Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File:                     OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier:          aFjOpe9aPT+pNV6mE+HwP0CPk8Po8KStUu/+QwwIg/E=
Subject key identifier:   4E:75:00:3B:04:0C:07:11:20:56:CE:24:E0:28:62:26:1D:38:95:77
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer:       /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial:       01A1DD2714BE904744BBF9F8C36267B99E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number:          1AF6
Signing time:             Sun 15 Nov 2026 03:01:28 +0000
Manifest this update:     Sun 15 Nov 2026 03:01:28 +0000
Manifest next update:     Mon 16 Nov 2026 03:01:28 +0000
Files and hashes:         1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: gug+szL5Svyty4qvcek8xhqDp5IonYLW8ipR3X0Di8E=)
                          2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:27:14:be:90:47:44:bb:f9:f8:c3:62:67:b9:9e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
        Validity
            Not Before: Nov 15 03:01:28 2026 GMT
            Not After : Nov 16 03:01:28 2026 GMT
        Subject: CN=4e75003b040c07112056ce24e02862261d389577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:ed:64:7e:d5:04:06:71:5a:9c:3e:3a:cc:
                    7b:67:d8:28:e9:f7:d4:de:37:54:e2:94:56:0e:94:
                    e1:0c:07:d9:54:38:0b:20:64:70:a9:b9:91:78:f7:
                    41:24:17:af:d4:87:47:d6:f8:1c:15:02:67:17:63:
                    c9:7b:d3:5a:28:8f:a1:40:75:37:1d:da:bb:30:c5:
                    e8:f4:b4:20:69:20:a3:0d:46:88:57:1d:a9:9f:0a:
                    a8:c6:14:98:33:4d:1a:00:89:04:6c:7e:0f:35:94:
                    62:c4:0c:98:9b:c7:be:c7:9d:4f:d0:38:99:43:35:
                    97:8d:5e:8e:3a:0b:73:78:38:61:60:07:e3:95:0a:
                    a8:d5:d8:6a:43:e3:95:73:ab:7c:55:3d:c4:be:02:
                    4d:2d:28:a4:fc:fd:ad:da:0d:5a:2e:fc:1c:31:2d:
                    82:d3:4e:d1:cd:a6:7f:d4:42:ad:d3:d6:77:be:52:
                    aa:d1:cc:89:ce:55:50:9d:9b:c3:7f:09:7a:a5:eb:
                    24:ad:2d:36:ac:64:35:a5:e0:ee:ed:40:b7:c5:73:
                    cc:88:7f:1a:28:6b:e3:e1:cb:98:f4:b0:0d:9b:98:
                    46:bd:ba:dd:9e:c1:73:d9:a5:de:4c:72:66:e1:66:
                    3e:0e:f1:bf:48:bc:05:37:23:51:1e:d6:01:fc:44:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:75:00:3B:04:0C:07:11:20:56:CE:24:E0:28:62:26:1D:38:95:77
            X509v3 Authority Key Identifier:
                keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:51:27:4b:7b:82:5c:e9:23:6f:49:de:26:a1:f6:f6:18:fd:
         b5:ca:c9:5c:3e:22:b9:01:fc:f3:6b:e8:b6:f8:07:9e:b8:c5:
         7c:95:d8:f4:62:95:7b:e3:47:d3:0d:3e:ff:e7:cd:ae:b4:d6:
         0f:e8:ee:a7:ba:d1:05:1d:43:13:4e:ab:f7:c9:bd:62:33:24:
         7e:76:27:c2:e9:93:f7:08:37:a3:44:32:ca:60:65:1e:06:fc:
         11:db:22:37:a9:38:bd:05:f0:b6:c9:00:33:c6:47:fb:13:09:
         bb:84:a1:8a:bc:73:a6:f7:a4:52:fb:0e:46:52:a7:ed:e2:ef:
         08:3c:d8:95:c9:90:90:96:65:a1:de:d7:dd:4a:4c:4b:7b:08:
         e2:cd:65:e7:61:46:2d:9a:53:0a:9c:2b:5c:58:45:7f:f3:22:
         16:d1:69:01:01:56:78:58:7e:08:a3:9b:f1:45:5e:e2:66:62:
         f9:b2:b7:ed:44:83:54:53:a6:5c:e2:89:cc:17:02:8e:88:4f:
         59:6f:eb:73:d6:a0:9d:99:bf:45:ae:c4:07:c5:1f:2b:9e:ed:
         9c:21:d9:cc:60:2d:b5:12:3a:96:3b:91:b8:41:5d:a6:bb:b0:
         18:a9:0d:2d:a0:33:77:73:7e:72:02:f6:52:b2:c1:a1:98:d0:
         34:c2:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:11:00 2026 by rpki-client