Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File:                     ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier:          GHXnArF7IFnZPSvK2H7nvqwiNg9jW1y7Sc6KVHPaawE=
Subject key identifier:   7C:DD:48:EF:D8:0D:1C:02:B8:B7:FE:DC:AF:FD:D9:D8:9D:A4:D4:6C
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer:       /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial:       01A131EB3F9688EB0789B6D534C3612D28E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number:          03A7
Signing time:             Mon 12 Oct 2026 21:01:03 +0000
Manifest this update:     Mon 12 Oct 2026 21:01:03 +0000
Manifest next update:     Tue 13 Oct 2026 21:01:03 +0000
Files and hashes:         1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
                          2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: KKguj/+LYIgxBaR3H96mRJ+EgbiX2JxZdasvubK3qvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:eb:3f:96:88:eb:07:89:b6:d5:34:c3:61:2d:28:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
        Validity
            Not Before: Oct 12 21:01:03 2026 GMT
            Not After : Oct 13 21:01:03 2026 GMT
        Subject: CN=7cdd48efd80d1c02b8b7fedcaffdd9d89da4d46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:a7:78:fe:12:3c:51:e5:12:f7:77:7b:61:
                    85:b9:3d:7a:6c:07:ff:a3:27:bb:57:2d:e5:6a:a2:
                    e4:6f:5c:7d:95:55:ac:21:dd:00:40:2a:05:ca:8b:
                    30:4e:e4:ed:a9:61:d9:d8:92:19:a2:09:85:a3:62:
                    77:15:84:a7:b7:5d:ea:8e:cc:fa:72:ee:da:34:18:
                    38:15:0e:65:b0:e0:73:45:b7:06:ae:5a:82:2f:56:
                    3d:6f:b7:72:6a:07:f7:a7:15:c5:b8:95:c0:9c:2c:
                    b8:e8:3d:fd:78:e0:bb:b5:c1:60:c8:41:fa:84:28:
                    70:55:f8:f5:dc:2a:26:0c:30:27:be:3f:17:69:d1:
                    3c:94:b9:5b:39:11:8d:c7:08:1d:89:f5:6e:8d:ef:
                    2f:45:3e:76:1b:f9:cb:78:33:88:c3:83:90:72:09:
                    5c:2d:2b:13:3d:1f:83:c8:b0:75:24:ae:fb:c0:89:
                    fa:fc:30:c8:27:de:ac:0a:74:92:5f:8c:4b:40:75:
                    b9:2a:de:a1:27:ff:00:57:cb:64:21:1f:c3:2e:40:
                    f4:75:45:10:bc:86:3a:a6:67:cb:81:28:b1:3b:ae:
                    15:fa:0c:b3:88:87:3b:7c:ba:eb:6e:84:dc:50:75:
                    15:59:a3:4c:21:0f:ad:b8:b1:3b:91:e3:db:a4:60:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DD:48:EF:D8:0D:1C:02:B8:B7:FE:DC:AF:FD:D9:D8:9D:A4:D4:6C
            X509v3 Authority Key Identifier:
                keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:6a:f8:4b:bc:c9:bd:d8:f0:97:29:eb:d0:d7:2f:2c:af:ca:
         3a:b5:33:b9:bf:47:d6:21:d7:26:09:6b:4d:40:f8:6b:d0:cc:
         ca:c6:eb:9c:ec:60:7b:59:a6:b9:55:b8:ee:80:c4:71:91:f5:
         95:d1:17:ed:b4:d6:d9:e1:2e:34:36:fb:4c:b0:59:14:cd:8b:
         7b:b7:e2:98:c6:65:83:6e:ac:46:b0:cb:53:2f:4b:32:4f:cd:
         c3:8c:10:1d:ce:64:5c:cf:7d:37:27:82:9f:65:20:6e:74:c0:
         e7:10:d6:5c:33:f6:16:54:58:40:99:41:e4:2c:8f:6d:a2:18:
         20:c0:d9:c6:fc:23:16:9b:44:8c:fd:b0:55:50:48:b7:1a:aa:
         d7:28:c4:95:49:c8:2c:1a:92:0c:2e:57:02:6c:72:05:de:19:
         4d:1e:be:fd:83:04:15:b6:04:d8:bb:cf:9c:d8:86:9b:05:8a:
         68:3e:f7:71:2e:88:6a:50:56:7f:7b:1f:69:e8:38:52:da:af:
         68:d3:dc:41:44:e5:87:d5:4d:39:84:74:92:f8:40:36:a3:f3:
         8a:63:26:c4:da:ee:0f:45:4b:ec:a8:52:99:8c:84:74:fd:8c:
         f0:4d:0f:b0:7d:76:f0:63:6a:c0:ed:fe:37:1b:b6:09:a9:4f:
         9d:a1:7d:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEx6z+WiOsHibbVNMNhLSjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzM2NkNjI3OWUzYWRjMTk5Y2NlZDE0NDhmODA4ODE4NDI5
NTlkYmIwHhcNMjYxMDEyMjEwMTAzWhcNMjYxMDEzMjEwMTAzWjAzMTEwLwYDVQQD
Eyg3Y2RkNDhlZmQ4MGQxYzAyYjhiN2ZlZGNhZmZkZDlkODlkYTRkNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJCneP4SPFHlEvd3e2GFuT16bAf/
oye7Vy3laqLkb1x9lVWsId0AQCoFyoswTuTtqWHZ2JIZogmFo2J3FYSnt13qjsz6
cu7aNBg4FQ5lsOBzRbcGrlqCL1Y9b7dyagf3pxXFuJXAnCy46D39eOC7tcFgyEH6
hChwVfj13ComDDAnvj8XadE8lLlbORGNxwgdifVuje8vRT52G/nLeDOIw4OQcglc
LSsTPR+DyLB1JK77wIn6/DDIJ96sCnSSX4xLQHW5Kt6hJ/8AV8tkIR/DLkD0dUUQ
vIY6pmfLgSixO64V+gyziIc7fLrrboTcUHUVWaNMIQ+tuLE7kePbpGAZ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzdSO/YDRwCuLf+3K/92didpNRsMB8GA1UdIwQY
MBaAFKM81ieeOtwZnM7RRI+AiBhClZ27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTkt
YWE1YmIwYWJhYzIzLzEvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTktYWE1YmIwYWJhYzIz
LzEvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0mr4S7zJ
vdjwlynr0NcvLK/KOrUzub9H1iHXJglrTUD4a9DMysbrnOxge1mmuVW47oDEcZH1
ldEX7bTW2eEuNDb7TLBZFM2Le7fimMZlg26sRrDLUy9LMk/Nw4wQHc5kXM99NyeC
n2UgbnTA5xDWXDP2FlRYQJlB5CyPbaIYIMDZxvwjFptEjP2wVVBItxqq1yjElUnI
LBqSDC5XAmxyBd4ZTR6+/YMEFbYE2LvPnNiGmwWKaD73cS6IalBWf3sfaeg4Utqv
aNPcQUTlh9VNOYR0kvhANqPzimMmxNruD0VL7KhSmYyEdP2M8E0PsH128GNqwO3+
Nxu2CalPnaF9gg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:55:03 2026 by rpki-client