Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
File:                     OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json)
Hash identifier:          nztkd+SfbVmq4EZs6skcaEPUmnCFtqHpQHJLH1ETNvo=
Subject key identifier:   22:7F:4B:A4:8E:06:B1:1F:D4:33:61:ED:3C:DC:00:DE:C3:74:EA:ED
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Certificate issuer:       /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial:       019D98F48D86A0407D2DF360382300E23831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
Manifest number:          0CF6
Signing time:             Fri 17 Apr 2026 01:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:56 +0000
Files and hashes:         1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: IWJ2PbPQBiEe5KipLadaBsW2UA6MAVlke1pHkEydmHw=)
                          2: h9uxXItcVMUhyEnd-qfo0NworEk.roa (hash: cN3aXRc8HLSRjs8+K7/jdo4PEzNiyVUr1h8Z9QW7HmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:8d:86:a0:40:7d:2d:f3:60:38:23:00:e2:38:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
        Validity
            Not Before: Apr 17 01:00:56 2026 GMT
            Not After : Apr 18 01:00:56 2026 GMT
        Subject: CN=227f4ba48e06b11fd43361ed3cdc00dec374eaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:74:f7:ba:cc:3e:3f:5d:84:9d:ab:f6:0d:
                    73:29:57:4d:c3:84:19:e6:47:82:04:e8:7d:b0:1f:
                    5b:b5:10:2d:d0:27:1d:51:e5:6a:85:a9:a4:3c:66:
                    33:4d:a6:79:24:9e:0e:45:7d:bb:50:03:ea:60:a2:
                    de:a9:0f:74:56:d0:c2:6f:54:c8:79:01:51:2c:9a:
                    d8:34:40:de:b1:30:06:d0:c8:14:9b:df:10:d1:3d:
                    f5:50:f0:65:5c:0c:0d:91:b8:20:eb:d7:fd:53:d0:
                    8d:3e:31:d1:90:1d:98:2d:53:9c:3a:a7:b8:2f:cc:
                    a3:ba:ad:7d:60:ef:54:e1:ca:6d:a8:ff:08:2d:54:
                    02:29:b3:e1:22:5d:c3:41:00:2f:80:e2:aa:48:99:
                    ec:d2:ea:59:c4:3a:8a:5c:db:cf:82:c2:09:b4:0c:
                    92:99:33:36:00:b8:f2:30:69:02:92:84:7d:87:bc:
                    23:36:50:7e:5b:d6:66:1c:77:0f:98:81:d7:4e:04:
                    ce:ba:78:81:2b:56:3c:18:5b:b3:25:0f:13:ab:66:
                    12:88:bb:c3:14:bd:28:6a:d6:37:71:f0:91:65:24:
                    83:a7:52:d0:f4:15:91:65:06:84:09:c8:10:02:32:
                    33:08:bc:7a:88:a5:bb:20:73:2a:64:f8:df:ec:7a:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7F:4B:A4:8E:06:B1:1F:D4:33:61:ED:3C:DC:00:DE:C3:74:EA:ED
            X509v3 Authority Key Identifier:
                keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:bc:54:e7:2d:99:33:e4:4c:e4:81:f0:29:6c:12:9b:d4:1e:
         80:c2:b1:b7:d4:97:6a:7d:dc:7c:ff:dd:79:01:15:ec:e0:24:
         11:34:d7:7d:3c:8d:89:85:de:3f:d5:6e:78:73:a6:ad:12:4f:
         59:9f:5e:34:00:e4:b6:8a:37:65:55:9f:4a:cb:1e:6d:67:91:
         7f:1a:02:f0:16:dd:53:0f:75:88:1f:32:f9:80:9d:d2:24:14:
         ed:14:35:70:e3:a2:44:57:94:77:f4:37:00:b5:b8:75:b3:36:
         c4:68:db:36:09:b6:2b:ca:1c:4d:9b:0c:36:02:fa:88:df:6e:
         e4:8b:50:43:b2:46:21:3b:ef:19:76:5d:72:6b:09:e2:09:b6:
         4a:12:17:86:29:0f:86:f3:3e:32:3e:b2:21:7c:4f:d8:3c:95:
         2f:ff:e6:bb:8b:a1:c5:44:88:69:dd:26:e3:bb:d8:72:d6:b9:
         ea:59:28:04:49:39:c3:be:cf:a7:f5:66:06:fe:fd:ac:94:27:
         bb:90:7f:73:99:dd:17:01:90:47:b5:1a:ce:31:b5:68:e4:44:
         1d:28:e1:12:6e:be:88:c4:74:f0:4e:5b:43:a1:30:85:99:b1:
         a1:68:71:8c:9a:75:17:da:9a:ec:d6:15:82:ef:41:75:28:cd:
         12:48:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:30 2026 by rpki-client