Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File:                     ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier:          kv5+upgGGdMctJCpn+3xVEohh55cBgxV4Ky9dRL0rUo=
Subject key identifier:   43:AD:81:81:D4:E2:A7:60:71:27:82:F6:B2:0C:A9:7A:9E:69:B5:F8
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer:       /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial:       01A0FDC6AE37B74EB02E05DEF0532AEC9D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number:          038C
Signing time:             Fri 02 Oct 2026 18:00:51 +0000
Manifest this update:     Fri 02 Oct 2026 18:00:51 +0000
Manifest next update:     Sat 03 Oct 2026 18:00:51 +0000
Files and hashes:         1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
                          2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: 2ZCBOgjCtf1rpe2vc02A/zZiRvtHNGv+rZtuUChjFl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:c6:ae:37:b7:4e:b0:2e:05:de:f0:53:2a:ec:9d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
        Validity
            Not Before: Oct  2 18:00:51 2026 GMT
            Not After : Oct  3 18:00:51 2026 GMT
        Subject: CN=43ad8181d4e2a760712782f6b20ca97a9e69b5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:7c:13:87:88:f3:eb:a5:9c:7d:38:99:80:
                    cb:e2:16:0e:f6:81:c7:ea:9b:a8:8a:76:aa:1b:75:
                    10:18:1c:4a:c0:c3:a1:20:8c:78:01:2a:cb:a1:0b:
                    d3:2d:1a:e4:ad:3f:c6:d3:74:a0:e0:ff:de:1c:1e:
                    a3:94:6b:01:01:53:7d:15:f2:a4:29:e7:b5:12:6e:
                    e5:6f:9e:57:bf:8a:c9:d1:64:5d:9f:46:dd:bb:15:
                    ee:52:54:54:fb:30:7e:d8:b3:c7:52:f1:41:89:91:
                    cc:3b:79:de:5e:61:49:f6:10:41:97:ca:02:94:92:
                    d8:5e:c2:38:c4:0f:05:b5:02:b7:a0:5d:2a:12:0c:
                    68:10:89:b2:5e:84:53:e4:21:c1:0b:9e:9c:ef:ef:
                    11:d9:c3:cc:00:88:94:ed:a6:3f:3d:2d:eb:dd:d5:
                    47:9a:64:31:69:32:c0:6c:1e:92:86:0e:c3:79:f5:
                    b7:37:da:b4:ae:d8:67:c2:0b:20:10:d5:30:5f:a3:
                    10:23:12:04:83:b7:42:15:f7:87:78:8f:32:ae:90:
                    16:2d:ae:7f:dc:87:20:5c:77:a0:6b:bd:06:ed:6e:
                    b5:5f:82:79:fb:a5:19:17:7f:9f:0e:77:01:8b:d5:
                    d4:d7:c0:6c:b7:e2:fc:35:2a:a3:ad:3b:ec:97:b8:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AD:81:81:D4:E2:A7:60:71:27:82:F6:B2:0C:A9:7A:9E:69:B5:F8
            X509v3 Authority Key Identifier:
                keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:4b:3c:d3:0e:93:e0:87:56:2b:bc:a2:7e:6c:cc:75:e0:
         23:67:16:3b:dd:45:57:0b:00:06:ca:93:d0:e6:05:3a:66:f8:
         33:a9:dc:e2:4f:29:f9:92:2d:19:05:ea:9d:3d:39:24:61:ef:
         ef:86:e4:e1:56:46:90:d9:81:46:13:a1:09:28:e1:4a:c2:7d:
         92:95:48:18:83:a3:d6:9b:ac:59:c3:ae:95:4d:61:a2:db:d9:
         bd:36:5f:c4:82:69:b9:e9:8a:88:21:8e:76:c7:cc:cf:4b:00:
         30:a2:54:e8:e2:9e:51:23:4f:45:d3:5f:99:af:23:47:84:0e:
         f0:5d:af:a2:c9:fa:c7:fc:83:e7:82:a3:67:5c:70:b5:80:0e:
         bf:87:a1:44:87:23:99:d5:0f:7b:70:43:a6:fb:d4:74:e8:c4:
         18:db:c8:a6:63:e0:4c:99:92:1a:d4:90:62:b3:72:82:12:74:
         df:10:5a:a5:a4:94:38:e1:53:cf:11:e9:b8:18:84:05:da:c6:
         6d:b5:eb:89:9b:03:20:da:e7:2c:6d:bc:2e:65:ed:db:e6:4a:
         03:c5:61:fa:8e:12:54:37:eb:51:7d:48:31:eb:93:96:44:45:
         9c:9e:35:f1:5d:42:5e:7c:bd:f6:29:d6:ac:d1:95:14:fe:af:
         0e:34:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:21:14 2026 by rpki-client