Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File:                     OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier:          sA909VS9y9+ef7TeNUY+wBe3g6SLufXKf9NF97Ux07g=
Subject key identifier:   82:2B:0E:13:5A:94:D4:21:4C:8A:46:03:F7:02:A1:F8:95:4E:29:1C
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer:       /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial:       01984AE60156283AA24A746412F7A831CC61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number:          1607
Signing time:             Sun 27 Jul 2025 08:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:44 +0000
Files and hashes:         1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=)
                          2: AI-T3-zIp1DMrSXD4vBKYCDZBV4.roa (hash: KlOk/fF1w7EKHSk+04TQtjgBWQMEvMF/JZ8yxyO3hC4=)
                          3: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=)
                          4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: 36SI99Xyp5N0SyHFNYG2rKVoZEVuqnWiXwp7o4PVIEg=)
                          5: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=)
                          6: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e6:01:56:28:3a:a2:4a:74:64:12:f7:a8:31:cc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
        Validity
            Not Before: Jul 27 08:00:44 2025 GMT
            Not After : Jul 28 08:00:44 2025 GMT
        Subject: CN=822b0e135a94d4214c8a4603f702a1f8954e291c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:22:7b:d0:22:2b:7a:0a:ab:75:b0:df:24:
                    11:aa:e0:d1:b5:02:8c:2f:b8:7b:e0:b4:10:52:eb:
                    64:38:f0:68:9b:9b:1e:db:58:cc:6f:91:ae:62:ea:
                    4c:cd:3c:6f:38:14:1a:42:06:64:83:31:13:fa:b2:
                    c9:42:8c:b9:39:06:78:f9:0a:33:03:18:b4:97:4a:
                    2a:a0:be:7e:74:23:11:89:22:f8:60:f7:43:a6:a1:
                    05:29:8f:51:59:1e:4f:dc:58:12:10:89:a0:44:30:
                    86:69:9f:c6:e9:80:ec:f7:de:c0:ab:6f:15:76:a3:
                    c4:36:3b:13:a4:7d:85:50:5e:0e:8d:63:d9:a9:2f:
                    aa:7f:66:e4:ef:2a:6c:c3:4a:ae:de:26:cf:79:d6:
                    c9:57:b3:ba:c5:03:eb:19:ff:92:c9:b8:31:af:5a:
                    8d:38:a5:4f:ce:30:ce:58:3a:bb:c6:f0:69:2f:b4:
                    f9:f4:a6:18:ee:45:c6:0e:9c:ca:aa:8f:3f:c5:bb:
                    5f:17:a6:10:a3:f3:72:e0:c1:da:dd:4b:23:a9:f7:
                    dc:8e:1d:ec:a4:d3:ab:4d:cc:bc:05:89:75:a9:d3:
                    b3:c9:17:2d:32:2e:63:c1:83:f1:f7:f0:65:1b:ea:
                    21:4a:d8:0b:1d:1d:67:02:73:63:63:e8:54:05:e8:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2B:0E:13:5A:94:D4:21:4C:8A:46:03:F7:02:A1:F8:95:4E:29:1C
            X509v3 Authority Key Identifier:
                keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e3:03:64:49:ea:83:79:2e:84:95:41:79:b1:c6:3c:17:8b:
         63:1a:2d:89:4e:99:7c:c0:ca:40:66:fa:2e:de:7e:be:f5:96:
         9c:c0:fa:93:07:a3:11:38:54:d8:6e:0f:83:0e:67:7f:07:76:
         87:b2:ac:f8:31:1a:f1:4c:07:a2:20:de:93:bf:a7:84:14:d0:
         a1:10:74:29:16:79:08:bb:16:d8:21:98:a7:dd:bb:6a:65:a8:
         a1:4e:3b:8b:a6:e6:83:20:1a:80:30:6f:d3:01:94:97:2a:8a:
         84:36:08:f1:bf:e0:d6:9e:08:ee:4d:7c:40:35:9f:fe:a2:0e:
         1e:ef:b9:95:ff:ad:c1:54:21:b5:e4:16:74:d2:27:68:38:58:
         8b:f7:70:15:a2:32:1e:8f:df:e3:f3:6d:2f:1b:e6:7d:69:b9:
         0d:cd:29:54:2c:1d:81:c5:dd:97:94:50:4f:97:66:cc:0e:02:
         3c:8f:f5:c0:ab:8c:22:73:f1:a0:58:4d:cf:f0:ee:72:1c:f4:
         aa:6a:4f:73:bf:82:24:5a:d0:d7:49:41:7b:34:dd:7e:3a:d4:
         6c:82:4f:17:d3:6f:98:c7:1c:49:ee:14:5c:56:3c:28:e6:21:
         34:44:6f:4b:ef:e4:f6:d7:c5:b1:b3:87:9f:a5:da:db:d2:b4:
         32:78:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:22:56 2025 by rpki-client