Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File:                     OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier:          61nPFXPxDO1bs+o3MxWCfBX/8nVzn4QT+7kt19b/uto=
Subject key identifier:   1E:91:37:62:08:55:70:BB:D3:A6:AC:2D:AB:38:BA:F4:3F:92:E0:82
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer:       /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial:       01A0EA409E9284FB32A2381B074E2B829A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number:          1A80
Signing time:             Mon 28 Sep 2026 23:01:38 +0000
Manifest this update:     Mon 28 Sep 2026 23:01:38 +0000
Manifest next update:     Tue 29 Sep 2026 23:01:38 +0000
Files and hashes:         1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
                          2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=)
                          3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
                          4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: ciOj+lunbF7/Z7/uRvdvmXXm70GjP3848xh6GxCk7AE=)
                          5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
                          6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
                          7: kWJsfOPSFq_jhRUPK95fJnFQ6gQ.asa (hash: kjZzNLymA0q763NzFlPQRMaG1f9jPqoiNbS2FEJsFnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:40:9e:92:84:fb:32:a2:38:1b:07:4e:2b:82:9a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
        Validity
            Not Before: Sep 28 23:01:38 2026 GMT
            Not After : Sep 29 23:01:38 2026 GMT
        Subject: CN=1e913762085570bbd3a6ac2dab38baf43f92e082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:9c:5c:ca:e9:22:87:5c:e4:13:c7:dc:e0:
                    b7:c6:5f:e2:cd:58:6a:99:1d:f0:48:7a:72:b3:e4:
                    72:34:85:e8:a5:67:3b:28:0b:8d:21:74:08:21:b6:
                    c3:00:4a:53:9d:aa:76:13:01:16:1d:35:76:35:0b:
                    e2:96:c6:2c:dd:81:8e:7e:20:6b:94:62:df:b6:3a:
                    65:8d:a4:00:85:ef:ed:ae:42:d2:3c:0c:ce:f8:6c:
                    9d:e3:20:37:78:51:05:e2:30:10:e3:5d:ed:24:b8:
                    78:c8:94:fb:88:1c:02:a5:15:c8:37:f3:d7:34:aa:
                    ff:cc:22:8a:2d:4c:ac:09:f2:b0:32:ec:ec:64:ad:
                    ba:5c:e7:3e:a5:b4:c0:21:8a:50:96:a0:62:14:db:
                    0b:4a:42:39:95:2a:b5:8f:54:ce:56:c2:25:4c:1d:
                    cd:84:f7:ac:49:12:7e:f8:2a:c7:92:78:e4:41:f5:
                    2c:4d:7d:8f:f2:5e:32:86:41:01:52:18:82:aa:01:
                    8d:60:26:03:7d:aa:67:4e:f1:be:aa:4a:1a:28:8b:
                    26:0a:c0:1b:e4:57:a1:d5:b6:9a:50:1b:c2:b2:9a:
                    e2:70:a1:7c:08:10:ff:8c:6c:26:54:a9:54:d8:7e:
                    55:9f:a6:e2:55:c9:36:a6:f3:b4:2d:6d:ec:29:c3:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:91:37:62:08:55:70:BB:D3:A6:AC:2D:AB:38:BA:F4:3F:92:E0:82
            X509v3 Authority Key Identifier:
                keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:26:a9:5a:8b:3c:01:a6:75:c2:77:08:60:08:18:85:ad:d2:
         b0:7f:14:8b:8f:56:8c:8f:d6:2d:6d:64:05:44:f0:01:8b:3f:
         76:a6:e3:c4:48:de:f4:9f:d4:3b:a7:57:ef:a4:8c:1a:8d:cf:
         d7:7d:d6:79:d5:e6:b1:47:b9:4c:bd:6f:37:d0:8e:09:67:99:
         cd:c6:40:d3:2b:f9:87:e6:9a:b2:5b:33:8c:1d:f1:05:eb:e9:
         c4:14:c3:2a:0c:cf:48:d8:91:88:76:03:74:51:fb:2b:83:c3:
         76:79:bf:ec:41:ab:c7:fb:ab:a7:ce:2a:9c:e7:5e:de:0b:e1:
         4d:d4:ec:f9:c8:f2:bc:3a:9f:e5:d1:51:94:a5:a6:73:de:90:
         3c:41:eb:e2:02:fc:6f:fc:93:3e:13:a9:03:3c:0d:ac:f0:52:
         f9:cd:09:6c:46:de:8f:6b:13:d2:fd:d5:79:76:f6:a4:f1:1f:
         6b:b5:7f:21:44:4c:ab:76:cc:a5:13:94:ca:07:d9:57:86:6f:
         4e:4d:2f:cd:66:39:fa:0f:8d:3f:05:ca:61:4b:43:31:07:ff:
         02:60:87:b0:bf:47:28:ee:0d:31:91:b0:55:70:da:16:5c:30:
         8e:65:02:3f:a1:66:43:f4:3f:bc:ef:b7:71:08:bf:c2:15:be:
         30:ce:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:52:12 2026 by rpki-client