Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File:                     OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier:          maP8RHep4+kaYexeG0ui9z1pyUkZNBxN5BrYVNd8LFs=
Subject key identifier:   6F:48:6A:14:59:45:E4:72:63:D7:23:A4:9D:E5:91:45:FC:BC:94:B5
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer:       /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial:       019FA2299B07639672CF12E87A9DA145552B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number:          09B0
Signing time:             Mon 27 Jul 2026 06:01:03 +0000
Manifest this update:     Mon 27 Jul 2026 06:01:03 +0000
Manifest next update:     Tue 28 Jul 2026 06:01:03 +0000
Files and hashes:         1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
                          2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: kaJwsLRpV/Ecz4uGyEPDIFAO9R2D27jevW4EvbZaJdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:9b:07:63:96:72:cf:12:e8:7a:9d:a1:45:55:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
        Validity
            Not Before: Jul 27 06:01:03 2026 GMT
            Not After : Jul 28 06:01:03 2026 GMT
        Subject: CN=6f486a145945e47263d723a49de59145fcbc94b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:f1:c3:98:8a:05:c2:e5:1b:01:c6:f5:b5:
                    34:2b:9e:68:2d:57:e0:1f:81:8c:6c:c7:39:f7:37:
                    4a:d3:70:4f:08:34:18:3d:fb:19:88:d7:4a:04:3e:
                    ac:1a:e7:4f:a3:98:cd:89:11:a3:64:de:b6:ea:ec:
                    db:cd:d2:bc:46:1e:e1:e9:5f:ae:b1:fa:85:53:62:
                    30:ab:c0:93:34:f4:e4:d4:fa:f0:48:21:57:57:82:
                    47:4c:8c:ef:0a:a2:06:a8:db:20:1e:22:4e:5f:25:
                    8c:91:e0:3e:6b:e0:35:63:bd:93:27:a9:4c:ca:99:
                    97:7a:47:c3:67:29:36:81:2f:c4:d6:0c:c7:f8:ce:
                    d1:1c:5e:b9:00:2c:7f:9e:23:b7:5d:26:6d:61:8a:
                    d3:7d:37:16:a9:a3:5d:58:94:41:e8:2e:d6:08:34:
                    ce:f7:9d:73:70:93:b3:65:70:0c:5c:47:57:3f:6f:
                    9f:7f:e4:65:07:49:53:2e:10:c5:63:b5:ab:bc:d6:
                    ab:26:51:c1:cb:7c:82:da:09:e1:42:9b:49:4c:f8:
                    a7:f8:6c:d7:59:86:57:d1:be:3a:38:fa:28:b1:75:
                    4b:68:38:00:eb:8e:f8:ae:28:e6:a0:47:54:ed:d1:
                    3c:08:ae:c0:6e:6c:17:06:36:17:81:2f:5b:a6:67:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:6A:14:59:45:E4:72:63:D7:23:A4:9D:E5:91:45:FC:BC:94:B5
            X509v3 Authority Key Identifier:
                keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:49:d2:e1:36:1f:ce:24:c0:22:20:ff:db:35:a4:9d:92:
         65:35:f5:2b:ba:af:9a:72:38:fb:43:3e:2a:5a:20:76:f1:d4:
         7c:e8:31:0b:55:08:d6:64:6d:20:86:77:d4:fd:31:22:55:71:
         f0:a7:e3:15:48:89:f4:4b:7c:fc:14:bf:ef:4e:4f:4c:41:30:
         85:56:8a:47:76:9e:76:c5:92:c8:43:82:1e:3d:19:dd:ac:cc:
         65:98:af:8e:50:eb:27:bb:ce:95:49:e1:5d:2a:8a:ee:ea:63:
         bf:89:67:9a:5e:eb:f5:59:a6:8e:54:0b:d9:fd:72:cd:eb:1e:
         3e:7c:e0:5f:9d:0d:1a:9e:b2:7e:01:2f:7f:cd:0c:b8:d5:b8:
         53:5e:83:c7:a0:dd:6d:64:0b:55:3e:6e:c9:32:f2:68:72:c5:
         ca:74:6b:7b:0e:d8:bc:d1:55:75:df:35:51:7b:c6:83:12:30:
         87:cd:af:a9:c7:8d:e8:47:f2:de:94:96:cb:bf:73:3c:47:7a:
         ee:81:34:63:63:23:26:f0:73:ff:61:09:72:5b:44:66:9e:b7:
         25:e9:39:7e:e6:ca:54:ab:a4:d1:ea:13:cf:1f:b9:fc:40:ab:
         34:67:fe:28:20:b3:e6:20:e1:29:99:fc:a3:6a:42:42:19:be:
         96:c4:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:09 2026 by rpki-client