Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File:                     OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier:          861Z8OJMLlWQzhj60bppt+At0aUkAKhtHSfw1CzkZuk=
Subject key identifier:   4C:17:00:84:5F:4A:60:15:B7:BE:D1:E3:AF:0A:B3:AC:E4:BD:BC:D1
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer:       /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial:       019FA33BAF51E40696469F31C8357EE72C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number:          099A
Signing time:             Mon 27 Jul 2026 11:00:25 +0000
Manifest this update:     Mon 27 Jul 2026 11:00:25 +0000
Manifest next update:     Tue 28 Jul 2026 11:00:25 +0000
Files and hashes:         1: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: 5ccGoz+SOIiGMo6NRLhJWBv7w6KoNI4ICUOAYri840c=)
                          2: PMdpUUy3N8aucFQis2EHtpFZuIY.roa (hash: 4gf7AvqhQ7Z0YpFJcEQijaezm8f7LNn2p+OXg9bnpFY=)
                          3: y2_r5sbY9Lv_uRDh7BVz6TP_Rqk.roa (hash: elggw6C3t4Wz+4yMu7U0O34nBVY/GyhPWM7xDo4hWNU=)
                          4: z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa (hash: x3T0qFMVxxd2FdR3A4LaLQ4+c2t85rP2XyfqD4Q6wxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3b:af:51:e4:06:96:46:9f:31:c8:35:7e:e7:2c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
        Validity
            Not Before: Jul 27 11:00:25 2026 GMT
            Not After : Jul 28 11:00:25 2026 GMT
        Subject: CN=4c1700845f4a6015b7bed1e3af0ab3ace4bdbcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:7e:04:b0:75:aa:9c:5f:11:fa:07:42:c3:
                    20:e6:60:8d:c4:c2:34:44:9d:95:92:db:d9:0d:3a:
                    f0:2c:59:2b:c0:df:98:1e:03:ba:d6:5a:8c:d7:37:
                    ee:6e:eb:bf:db:81:66:ee:7a:eb:3e:64:2b:5e:91:
                    64:46:ad:19:c0:28:1c:da:2f:2f:2c:57:cf:01:b8:
                    21:eb:c2:be:d3:13:ea:d8:b8:08:fb:08:bc:9a:ac:
                    55:32:67:e4:75:43:1c:57:45:a9:b8:75:53:30:e4:
                    3c:e9:38:d0:2e:2f:7d:4b:1d:f8:81:1e:30:4b:5d:
                    a3:81:e2:99:49:8b:77:21:66:d7:19:66:f2:55:92:
                    e5:7c:2c:38:69:49:a0:3e:30:e7:7b:ca:da:a9:4a:
                    14:21:b8:6f:0d:55:55:c8:5a:ad:04:8a:e7:f2:61:
                    bd:b7:bd:c1:d9:96:86:33:3c:c8:b4:f5:1f:3c:6f:
                    70:9b:1c:ca:11:52:7c:7a:62:1a:c7:70:62:d4:79:
                    2d:3e:5b:d3:6f:24:01:2e:d2:de:45:ee:a7:f5:10:
                    d2:8d:52:e3:25:c8:6c:f7:5c:1f:c7:a1:f4:4b:70:
                    cc:44:0e:f8:ac:52:90:42:44:59:4a:33:28:82:8b:
                    5c:98:24:58:02:63:77:e1:7f:ea:f3:05:1c:b9:ec:
                    f2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:17:00:84:5F:4A:60:15:B7:BE:D1:E3:AF:0A:B3:AC:E4:BD:BC:D1
            X509v3 Authority Key Identifier:
                keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:b0:d5:a7:b9:b0:21:3a:b6:9d:82:0f:c1:3d:c5:b4:68:
         8f:f0:10:79:91:fd:d4:b6:e2:78:01:8f:d1:36:80:d9:3a:dd:
         ac:21:e2:89:d6:3f:26:b9:2a:03:f3:d5:39:d1:bc:e3:9b:61:
         b9:a9:cc:52:26:97:85:b8:63:4f:eb:00:cf:31:42:72:24:df:
         a1:32:7a:bd:e2:a9:b6:3d:64:82:86:f9:01:f5:a6:27:b7:1d:
         c5:78:ea:f6:1f:53:9b:23:3a:83:8a:8b:57:58:a9:4d:a3:4b:
         76:b3:d8:53:38:9a:36:d8:7a:e2:a7:c2:1d:5e:c4:ab:ba:28:
         c8:d3:6d:08:24:a6:28:91:62:08:ca:f2:76:e6:c1:37:6b:92:
         93:05:a4:50:95:0a:2d:4f:5a:f5:43:61:93:2a:aa:20:57:f1:
         ab:2b:9d:08:5b:42:a2:eb:bd:15:4b:fd:7a:36:91:9f:6b:7d:
         7a:8f:7a:25:1a:92:6b:b9:a3:11:5a:52:c6:b6:e2:fe:dd:60:
         ce:06:99:8b:7c:bd:ed:f9:54:6c:99:7a:8f:51:95:e7:fc:1c:
         a1:75:7a:c6:46:75:65:6a:73:8a:c7:a4:fa:c9:bd:e2:54:14:
         5e:b2:d5:5a:07:c6:d9:62:8c:e5:02:c5:bc:dd:bc:68:37:00:
         9d:74:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:48:03 2026 by rpki-client