Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File:                     OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier:          IcnPjVr0+yhyIYKnCjgT8L7lT2F3A95p6WWT+QSFKqw=
Subject key identifier:   1A:86:CB:42:16:E9:0A:39:CC:95:46:26:32:C9:16:10:06:B7:27:F2
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer:       /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial:       019FFC48B4EF90C70D5BE6EE17E91F3B13F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number:          19FD
Signing time:             Thu 13 Aug 2026 18:00:51 +0000
Manifest this update:     Thu 13 Aug 2026 18:00:51 +0000
Manifest next update:     Fri 14 Aug 2026 18:00:51 +0000
Files and hashes:         1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: d9/iXtDset/SJGBmJ/QXXKerNmbT7DyDn7gy/8iKw4M=)
                          2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fc:48:b4:ef:90:c7:0d:5b:e6:ee:17:e9:1f:3b:13:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
        Validity
            Not Before: Aug 13 18:00:51 2026 GMT
            Not After : Aug 14 18:00:51 2026 GMT
        Subject: CN=1a86cb4216e90a39cc95462632c9161006b727f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9f:43:45:93:06:24:8a:af:64:1f:99:67:05:
                    16:d7:e7:6c:9f:84:18:58:19:34:b8:ef:d0:53:13:
                    f0:d3:52:53:12:94:60:7b:08:cf:ae:23:9e:b5:c1:
                    8c:33:d9:c8:36:fa:f0:7e:2b:ae:6f:65:b9:7e:1c:
                    07:6b:88:15:fe:ea:14:8d:9e:4e:de:9a:79:75:0e:
                    c2:9d:dc:80:1f:89:54:bb:a0:8b:6f:d9:79:30:9c:
                    13:9a:4c:c3:3f:49:02:ec:5e:32:ae:11:40:b3:66:
                    bc:57:5f:0c:e5:07:14:bc:b0:8d:44:67:bc:5e:a0:
                    56:0a:bb:da:a5:03:c0:0d:83:da:00:46:4e:b4:49:
                    50:95:5c:bd:d2:a9:b4:76:0e:29:1e:7e:c8:68:ea:
                    3a:c4:35:06:66:84:2d:9a:0c:89:f8:f0:cd:f9:a2:
                    3c:1e:6f:69:49:44:58:b1:6f:68:5a:71:13:bd:72:
                    18:03:41:12:cd:8e:38:04:ed:11:be:35:44:e2:c3:
                    bf:2d:7f:ae:6d:d6:70:1e:69:84:a5:9a:f7:a3:ee:
                    b5:23:f1:84:bd:d6:bc:5b:0f:2c:93:b5:e9:26:a9:
                    8a:d3:23:eb:43:03:ea:be:f1:0b:3b:48:9f:78:c5:
                    e4:c7:f4:e1:ef:99:9a:94:3b:73:6c:fb:6e:95:20:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:CB:42:16:E9:0A:39:CC:95:46:26:32:C9:16:10:06:B7:27:F2
            X509v3 Authority Key Identifier:
                keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:82:d3:5e:45:a5:40:1a:9c:27:21:bd:85:dc:f6:07:8d:
         06:ae:2d:9b:ef:bf:17:3b:d9:db:26:ea:1d:99:c3:33:b2:7f:
         c6:3b:30:c0:a7:c1:68:e9:87:cd:4b:a2:b6:de:ef:76:83:6f:
         b2:fb:f3:f1:32:b9:ba:6d:7d:f6:2c:0f:be:34:2c:df:25:f1:
         89:f6:2f:65:9a:28:12:1e:0c:a6:37:c5:ab:26:ac:e6:4d:0f:
         05:2c:87:58:c7:f4:55:f6:c6:42:e1:93:f4:22:8a:3a:1d:73:
         5d:23:81:b5:c4:dc:33:56:44:72:0c:10:09:66:fa:11:3c:ee:
         39:60:3e:91:90:1b:49:47:40:9b:04:dc:ac:24:51:67:0c:89:
         ae:93:b9:3b:04:66:bf:35:a3:9a:3c:d9:a1:f4:dd:dc:e7:61:
         ba:4a:ea:36:fc:00:db:22:93:3b:6e:bc:e7:cb:dd:ba:ca:49:
         46:f5:22:de:aa:40:8b:dc:60:fb:db:45:4a:e8:80:c6:65:de:
         21:8c:02:de:f3:a7:31:02:19:66:f8:c0:f2:c9:25:fe:4f:1e:
         01:97:e8:33:73:ad:53:5b:26:cd:bf:09:23:7a:53:0f:4f:51:
         22:1d:22:70:39:22:34:70:fd:36:45:d8:db:bf:6a:4f:08:12:
         44:a6:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:29:11 2026 by rpki-client