Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File:                     OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier:          pR8LcLhg2VL7cn51Wa+cK0J3v9UIivM0eTHB97GBY3c=
Subject key identifier:   E5:87:62:63:F0:C3:84:FD:99:6F:33:7C:54:5E:EB:B7:3E:48:4C:9A
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer:       /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial:       019FA03B344295604C09FB71FAAB69BEC274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number:          09AF
Signing time:             Sun 26 Jul 2026 21:01:02 +0000
Manifest this update:     Sun 26 Jul 2026 21:01:02 +0000
Manifest next update:     Mon 27 Jul 2026 21:01:02 +0000
Files and hashes:         1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
                          2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: UFXArIedOnwBpfWwF56jKl9qYCAgn54zgJmgw5kYrK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3b:34:42:95:60:4c:09:fb:71:fa:ab:69:be:c2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
        Validity
            Not Before: Jul 26 21:01:02 2026 GMT
            Not After : Jul 27 21:01:02 2026 GMT
        Subject: CN=e5876263f0c384fd996f337c545eebb73e484c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:ff:ce:14:cf:10:9a:17:2b:af:c3:21:69:
                    5f:6b:85:81:d6:6b:da:20:0f:4d:6b:14:00:3a:37:
                    2e:8e:1b:7d:e0:59:9a:08:71:3f:cc:9e:24:d8:7c:
                    56:e4:25:ba:1c:66:53:40:64:72:95:75:82:e7:09:
                    23:86:12:2f:d9:1c:f3:2f:6e:86:87:93:62:df:06:
                    a5:35:90:ca:0b:e9:aa:3b:f0:9b:0a:4a:34:7e:42:
                    0b:14:15:6b:3e:7d:e2:43:e7:df:fd:51:05:37:ac:
                    c2:43:21:1c:f9:02:59:01:81:20:01:a9:27:c0:2f:
                    77:25:9e:b6:ef:ef:bd:15:05:af:d8:e1:f4:22:0f:
                    fc:3d:e2:25:ef:b5:ff:4f:b9:a0:0b:88:ee:bd:5b:
                    07:93:62:f0:cb:15:29:45:b2:69:5a:2e:d2:bf:0b:
                    5b:9f:d3:04:43:f4:2e:fc:e9:9f:7a:c4:59:ba:3e:
                    d8:de:f3:ef:e1:97:fe:99:6c:c2:48:8c:11:2d:cd:
                    bb:d4:f7:41:d6:88:0b:56:fd:6d:f5:c2:28:d0:03:
                    40:7d:8f:03:e1:45:19:19:79:4c:dd:a6:05:35:86:
                    ec:db:25:a2:e4:ff:a3:10:36:e9:b3:d1:5d:52:9f:
                    5f:f3:18:d3:d3:cc:50:41:08:0f:e5:2b:ed:02:84:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:87:62:63:F0:C3:84:FD:99:6F:33:7C:54:5E:EB:B7:3E:48:4C:9A
            X509v3 Authority Key Identifier:
                keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:28:52:6b:50:c5:9a:47:dd:55:ee:c1:c0:81:12:2e:d2:
         fb:da:04:00:ee:39:34:a6:e1:40:28:8c:ff:1a:5a:e4:42:81:
         c9:b9:9b:a8:41:a9:82:45:0e:92:be:52:cb:b3:48:71:03:03:
         8a:ac:7f:36:84:7f:68:98:af:62:b7:ae:66:7d:09:16:f0:c5:
         fb:4d:4c:05:bb:3b:43:8c:16:57:b7:b6:d7:5a:67:0d:04:43:
         51:f1:a1:01:2c:c0:29:0b:50:2b:10:81:76:e2:c9:ec:f5:ad:
         92:4c:a5:8c:6f:38:0a:43:2f:d2:8e:06:ed:74:d7:f0:48:d9:
         b0:af:6c:f7:95:15:33:ea:48:70:50:ee:58:0c:fb:bd:22:61:
         8c:a5:e0:d2:fe:45:e2:35:48:00:31:ff:c0:6c:f3:13:3a:de:
         65:90:2a:9f:21:fb:9a:e4:84:f9:83:85:a5:3e:65:24:d2:b7:
         9b:98:75:72:67:79:1b:fb:25:91:6d:62:25:ca:e3:ca:78:5f:
         91:b5:cd:c2:fd:39:bf:fd:16:43:03:62:d1:65:67:23:14:66:
         7d:13:51:6c:8d:1c:93:94:7c:e0:07:d9:61:25:07:48:3d:28:
         90:59:7f:a0:7d:43:d5:5a:79:1b:74:0b:b0:ec:5e:95:6a:4a:
         2a:90:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:14 2026 by rpki-client