Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File:                     OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier:          AU6/WkACicVb7yfJszBbv1dYQvbYMBcakO/QOuehEV4=
Subject key identifier:   57:A4:88:DB:C4:15:88:DC:57:A5:E3:E2:7A:5B:C0:97:A2:3D:BA:7F
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer:       /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial:       01A140B9FD6DA67E2C3D17A4866797D8A634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 18:01:33 +0000
Manifest this update:     Thu 15 Oct 2026 18:01:33 +0000
Manifest next update:     Fri 16 Oct 2026 18:01:33 +0000
Files and hashes:         1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: EW6RWowXtXccN2ZLx08h9SD2gwBalliNC2LDOv/8k70=)
                          2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:b9:fd:6d:a6:7e:2c:3d:17:a4:86:67:97:d8:a6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
        Validity
            Not Before: Oct 15 18:01:33 2026 GMT
            Not After : Oct 16 18:01:33 2026 GMT
        Subject: CN=57a488dbc41588dc57a5e3e27a5bc097a23dba7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:56:94:33:b0:54:be:94:1e:e5:93:40:9d:
                    2d:32:80:d4:c3:e7:06:5a:47:52:1b:07:31:7f:52:
                    26:70:23:2f:09:a3:36:b5:dc:79:0c:b8:6a:20:5e:
                    ec:d4:0c:a6:8c:66:9a:34:f0:54:ab:6c:0d:23:a5:
                    5e:cc:8e:c2:bf:f3:d3:b9:3d:54:95:36:58:d6:4f:
                    95:3a:6b:6d:e1:65:1b:0b:e4:cf:11:2e:f0:99:4a:
                    73:5b:7a:53:46:29:86:5b:53:70:09:94:f3:52:73:
                    9e:fd:42:e5:ee:ee:fb:b5:8f:c2:84:c3:33:2e:ab:
                    4d:cc:6b:2c:af:67:50:73:16:58:87:c1:85:e7:92:
                    08:fb:34:bc:91:ad:fd:76:8d:93:e1:7e:fa:f7:a7:
                    39:8c:c2:21:6c:f9:7b:aa:da:e6:0a:ad:0e:75:8c:
                    de:63:85:9c:9b:ed:de:a3:ee:22:f8:ad:24:a5:bb:
                    58:b3:4f:53:e8:4b:7e:02:c6:2b:5b:b4:43:ae:e8:
                    f3:65:5d:72:ad:20:44:26:ea:32:5a:45:df:06:8b:
                    7b:4a:be:bb:4d:dd:16:3a:6b:f7:48:cc:1e:64:d2:
                    b5:1e:c9:5a:44:6d:08:39:94:37:41:b3:e8:82:67:
                    17:6c:ae:37:e9:0f:bd:d9:5d:2b:94:00:c0:b9:e0:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A4:88:DB:C4:15:88:DC:57:A5:E3:E2:7A:5B:C0:97:A2:3D:BA:7F
            X509v3 Authority Key Identifier:
                keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1a:99:a1:59:22:18:ed:1c:d7:fb:b8:1c:c9:d6:22:49:dd:
         50:71:35:31:04:d8:64:6c:63:76:24:c1:8c:55:8f:04:b9:83:
         99:10:69:b1:32:44:f2:9e:c0:2f:3c:df:9f:64:e9:ed:48:01:
         b1:79:36:24:21:52:16:bf:30:9e:d7:61:da:44:a1:6c:28:d7:
         f7:1e:57:aa:32:40:25:f8:86:70:7e:39:79:4e:ac:05:9b:6b:
         27:3e:48:80:af:b3:e2:73:28:5f:b5:0e:dd:e7:5d:87:ed:aa:
         d1:d1:f9:fa:0f:35:a4:ac:9e:e7:dc:de:0d:88:4d:2d:07:b6:
         07:37:88:c8:53:22:6f:fa:2c:53:e8:22:13:99:f7:55:31:b3:
         c9:67:64:ee:a4:3c:78:92:92:92:2f:de:11:1e:29:0c:85:9f:
         35:86:bd:d6:45:4b:19:fe:d5:3a:0e:01:4e:31:82:e3:43:d2:
         04:d0:47:6d:a6:06:86:30:77:f0:aa:ea:f1:39:a8:0f:d4:8a:
         0e:d7:bb:22:b2:66:a5:2f:25:ce:ba:27:a9:ee:3a:e9:82:7c:
         fd:3d:9e:d3:24:0a:1b:c7:cd:d3:74:2b:8f:77:43:b9:c9:5b:
         94:91:57:2e:e0:8d:da:18:83:9a:3f:e1:c8:22:51:32:e2:ad:
         79:6e:45:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAuf1tpn4sPRekhmeX2KY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzliMjM4MmYzODUxMmU1OWVkMThlYmZhYTU5NmM5NTUy
MTI5MTAwHhcNMjYxMDE1MTgwMTMzWhcNMjYxMDE2MTgwMTMzWjAzMTEwLwYDVQQD
Eyg1N2E0ODhkYmM0MTU4OGRjNTdhNWUzZTI3YTViYzA5N2EyM2RiYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEtWlDOwVL6UHuWTQJ0tMoDUw+cG
WkdSGwcxf1ImcCMvCaM2tdx5DLhqIF7s1AymjGaaNPBUq2wNI6VezI7Cv/PTuT1U
lTZY1k+VOmtt4WUbC+TPES7wmUpzW3pTRimGW1NwCZTzUnOe/ULl7u77tY/ChMMz
LqtNzGssr2dQcxZYh8GF55II+zS8ka39do2T4X7696c5jMIhbPl7qtrmCq0OdYze
Y4Wcm+3eo+4i+K0kpbtYs09T6Et+AsYrW7RDrujzZV1yrSBEJuoyWkXfBot7Sr67
Td0WOmv3SMweZNK1HslaRG0IOZQ3QbPogmcXbK436Q+92V0rlADAueCYqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFekiNvEFYjcV6Xj4npbwJeiPbp/MB8GA1UdIwQY
MBaAFDs5sjgvOFEuWe0Y6/qllslVISkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMt
OGI4ZDc2YjJkMjRlLzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMtOGI4ZDc2YjJkMjRl
LzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxqZoVki
GO0c1/u4HMnWIkndUHE1MQTYZGxjdiTBjFWPBLmDmRBpsTJE8p7ALzzfn2Tp7UgB
sXk2JCFSFr8wntdh2kShbCjX9x5XqjJAJfiGcH45eU6sBZtrJz5IgK+z4nMoX7UO
3eddh+2q0dH5+g81pKye59zeDYhNLQe2BzeIyFMib/osU+giE5n3VTGzyWdk7qQ8
eJKSki/eER4pDIWfNYa91kVLGf7VOg4BTjGC40PSBNBHbaYGhjB38Krq8TmoD9SK
Dte7IrJmpS8lzronqe466YJ8/T2e0yQKG8fN03Qrj3dDuclblJFXLuCN2hiDmj/h
yCJRMuKteW5FBA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:12 2026 by rpki-client