Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File:                     OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier:          RrHfrxRVddWqOfig01++mIxSyfZCZzFACVaI2Ty5S90=
Subject key identifier:   22:1F:4F:64:B0:86:96:A9:76:7E:EB:35:2E:1D:4E:5F:E5:DC:B1:A9
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer:       /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial:       01A0CEC88F828C551265AA40351680BA5D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number:          1A6A
Signing time:             Wed 23 Sep 2026 15:00:45 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:45 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:45 +0000
Files and hashes:         1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: x3vsOAQgRclLFsE+ygjviZW9yOHdGbegIF50DTJbkpc=)
                          2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:8f:82:8c:55:12:65:aa:40:35:16:80:ba:5d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
        Validity
            Not Before: Sep 23 15:00:45 2026 GMT
            Not After : Sep 24 15:00:45 2026 GMT
        Subject: CN=221f4f64b08696a9767eeb352e1d4e5fe5dcb1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:87:06:ff:e3:34:99:2c:a6:2b:d1:4b:8f:
                    7d:06:e1:37:a4:92:db:81:f5:6d:02:21:c1:58:57:
                    97:7c:e2:ad:c5:02:bc:14:4e:65:d9:e3:02:85:92:
                    11:96:f2:23:06:e3:df:1f:3d:ac:a2:6b:49:fc:64:
                    db:8b:26:f7:19:68:a6:d4:22:51:90:2b:36:fd:51:
                    8e:57:91:6f:34:33:5a:7b:d0:3a:0d:45:29:8a:40:
                    e7:84:ff:27:2d:61:46:b4:6b:44:f0:09:31:85:cc:
                    2a:4c:bf:40:54:86:0d:07:fc:42:cd:69:09:71:43:
                    eb:e5:dc:87:e9:fb:73:bb:9e:59:f0:5b:2f:f9:76:
                    ca:5d:e6:86:fc:a6:31:bc:5c:fb:c9:03:32:56:df:
                    79:1f:42:59:fb:0f:06:de:65:ac:b2:dd:8f:c9:9f:
                    d1:33:a4:aa:30:fb:56:1b:e6:bf:7c:26:bd:36:1f:
                    e3:3d:d0:7e:84:40:ac:6b:0e:76:e3:eb:7d:ad:6f:
                    58:34:54:81:18:35:a0:12:01:67:14:fb:86:71:58:
                    6c:5b:bb:82:34:73:5a:35:99:5e:fc:53:54:e6:84:
                    57:f0:98:28:81:4c:27:47:ba:cb:10:50:be:65:81:
                    45:d0:d2:64:7b:11:7c:4b:c9:07:b9:d4:f8:3b:ee:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1F:4F:64:B0:86:96:A9:76:7E:EB:35:2E:1D:4E:5F:E5:DC:B1:A9
            X509v3 Authority Key Identifier:
                keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:cf:3d:ed:6a:95:12:58:2e:c0:84:b3:49:7f:ef:70:e8:
         15:92:78:76:2e:f8:c1:fa:63:c4:4f:97:89:1c:e1:c1:ad:03:
         d4:d0:99:a0:29:15:6c:1a:58:9c:98:ee:06:9e:10:87:a9:8f:
         13:5a:89:a9:74:f5:59:7f:43:14:9a:50:f1:64:13:65:c6:58:
         e6:c1:59:be:41:e0:6a:f3:b6:66:e3:4d:ab:5f:0b:48:0a:71:
         02:3f:73:e4:b1:1f:22:3d:b2:ee:d1:a4:c6:29:e5:dd:65:30:
         1a:f5:ef:0b:7f:9a:1b:25:a5:f7:13:ff:6b:f0:13:cf:12:17:
         97:05:67:0e:ef:5c:53:73:bf:4b:74:da:a6:f4:29:e3:97:39:
         4a:61:85:96:75:0a:2c:14:c4:c1:28:5b:36:91:77:0c:78:d7:
         c4:7e:41:9f:6d:7b:8c:81:e1:58:6d:ea:e3:d5:69:21:50:6b:
         12:75:48:a5:34:b5:b1:42:f8:d0:5a:fe:b5:aa:e9:8a:6d:cd:
         c9:67:d0:3f:71:c8:d5:9d:02:e7:ff:0b:6e:a7:b1:b8:63:2d:
         bd:e6:88:a7:37:90:93:92:f9:a9:28:81:e0:61:e2:df:1b:11:
         38:83:86:2f:03:f1:9a:af:ca:da:59:54:fb:44:ca:5d:73:d9:
         16:ee:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:05:50 2026 by rpki-client