Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File:                     OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier:          /OIPYb9YKb8zJvGO/OENkPx+Qu73KYGOL1dOofHE2Fo=
Subject key identifier:   6D:12:11:B6:EC:AF:3A:85:B4:6C:03:1A:5B:43:8B:FF:5C:98:60:60
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer:       /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial:       019D9BF5C077FBB701F8B955ECADC4CAFE39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 15:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 15:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 15:01:07 +0000
Files and hashes:         1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: fVm/RIzdknF6MDLs3A3/pJ480tzLnPiNlXhMXbJUpzg=)
                          2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:c0:77:fb:b7:01:f8:b9:55:ec:ad:c4:ca:fe:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
        Validity
            Not Before: Apr 17 15:01:07 2026 GMT
            Not After : Apr 18 15:01:07 2026 GMT
        Subject: CN=6d1211b6ecaf3a85b46c031a5b438bff5c986060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:6e:f0:eb:4f:4c:6f:3a:61:d7:e6:0e:50:
                    e4:88:fa:93:0b:9b:d3:3f:b6:aa:46:ae:26:47:f0:
                    ff:1a:ec:12:28:4f:81:f7:27:cd:26:b0:fe:c4:15:
                    c8:8a:d8:2c:1e:7a:95:a1:4f:5a:f5:83:1a:7e:23:
                    48:70:4e:f5:c6:62:63:6b:a7:ec:b1:b5:b1:e6:dc:
                    a2:a8:00:45:d7:c4:65:16:b1:45:55:38:ca:eb:57:
                    97:bc:d8:d3:2d:44:7e:48:34:a5:8b:ea:cb:03:5a:
                    b9:0b:45:b7:8e:02:04:1e:bd:36:35:f7:7a:63:5d:
                    e0:2e:2a:b8:b1:b3:60:4a:72:55:1e:22:ac:71:36:
                    99:cb:f2:cc:e6:c3:1e:a2:a8:bd:ab:80:4c:3e:6d:
                    08:96:2b:07:4a:7f:31:41:95:fa:60:c4:83:d2:3d:
                    b5:9c:d4:5e:4f:27:6f:0f:fd:09:46:a2:95:ea:fc:
                    ab:45:28:6f:af:6f:cb:b7:96:8a:53:2a:8d:06:00:
                    d7:c0:3b:37:b6:b3:07:83:62:da:c0:0b:f9:cc:ab:
                    ca:d8:ba:a7:ee:4a:20:c3:e4:f2:59:5b:30:82:30:
                    3f:aa:be:57:d9:1c:17:97:06:92:a8:5a:3a:87:fc:
                    ba:88:4b:b7:9b:25:0b:bb:8c:16:df:87:95:cb:7a:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:11:B6:EC:AF:3A:85:B4:6C:03:1A:5B:43:8B:FF:5C:98:60:60
            X509v3 Authority Key Identifier:
                keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:2a:9d:ee:97:c4:59:71:00:70:c2:f4:59:8e:89:0c:08:f7:
         66:4f:cd:56:da:13:c6:fe:73:92:f3:58:b6:81:8d:c3:95:6f:
         e1:df:fc:55:a3:cf:14:1b:ba:f2:68:e7:f4:ce:e4:2c:b4:93:
         fa:b6:c1:cb:9e:79:4e:b1:02:e1:21:02:b2:75:97:ba:25:4c:
         84:f3:ef:45:44:37:56:c1:31:4c:27:b1:6f:04:9c:b3:fd:7e:
         d6:98:35:e3:17:68:0c:72:28:f1:1d:2a:8e:dd:28:6b:ee:04:
         8e:02:3b:4b:eb:33:5a:90:a8:0f:d2:bd:89:12:7e:af:20:30:
         1e:2a:76:72:cd:01:98:59:75:54:27:34:1d:64:5c:b5:2b:a4:
         56:7d:a0:9f:a2:1d:b6:c8:17:9a:4d:54:fb:b2:13:da:80:25:
         6b:1e:a0:50:d0:5b:36:7b:53:90:e2:7d:3f:a8:c6:de:a6:5f:
         aa:ac:2e:66:a3:20:f1:8a:58:56:e6:ef:03:da:43:3e:6c:e1:
         2f:08:54:42:b9:fb:6c:60:f8:da:29:da:28:95:fa:b7:27:df:
         70:e4:a9:c3:96:3e:1c:0d:91:cf:ac:58:8f:77:0b:7b:1e:5e:
         15:8a:47:ce:46:f5:88:dc:ac:cb:91:d2:7a:32:d8:03:64:d1:
         d4:94:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:14:56 2026 by rpki-client