Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
File:                     opu5R2dQ7A4mIqUF5RUS729aW7Q.mft (raw, json)
Hash identifier:          aVOTATwBhHyXO6hUSgbAScfE/Xms2sJlhOKoZxPECEU=
Subject key identifier:   CC:EE:A0:26:9C:A9:6B:F5:AF:6F:69:80:79:16:D3:97:07:82:4B:AC
Authority key identifier: A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
Certificate issuer:       /CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Certificate serial:       01A06EA7D93361C800BD859889D0EB5B327C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
Manifest number:          022B
Signing time:             Fri 04 Sep 2026 23:01:28 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:28 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:28 +0000
Files and hashes:         1: gSw2I7cSynhsa1v5yL1GK2liJV0.roa (hash: OgZIv5antAo192tWCR26SC8ruKYKpzX9vhQDQJpKYWw=)
                          2: j3tFGt__mjBy6A4laCBtTNakkR0.asa (hash: Ya4LiyF5bRj+tvHg5hNrH2HeLbopOCsjFcZajvf8SKE=)
                          3: opu5R2dQ7A4mIqUF5RUS729aW7Q.crl (hash: /7CR5nAvA5R/dLOBvwdAEcjX1RiYe7jRBmp/EZ2W9j0=)
                          4: x3mNd6D6usA5k_7l-emYO2TtcmI.roa (hash: kwiTjzAM2+mXC68INamqfljbqxN1Ud0ltCywsiZuaEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:d9:33:61:c8:00:bd:85:98:89:d0:eb:5b:32:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
        Validity
            Not Before: Sep  4 23:01:28 2026 GMT
            Not After : Sep  5 23:01:28 2026 GMT
        Subject: CN=cceea0269ca96bf5af6f69807916d39707824bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:b7:c9:d6:d7:4c:a5:a4:79:16:26:b5:06:
                    a8:7d:a7:74:81:d2:9e:a7:04:d5:5c:4c:e6:c4:9c:
                    64:fe:2d:2c:4a:fb:ce:17:9b:c4:c1:8c:b1:41:8b:
                    1c:cd:b2:cd:b4:09:53:44:a4:ea:02:89:12:d1:80:
                    61:49:3e:18:3d:a9:a9:2f:01:08:2c:98:84:10:20:
                    8d:5c:b1:58:43:02:c4:15:28:6e:e2:6f:d2:f4:60:
                    69:80:5e:8c:98:1b:04:07:de:5d:f3:e7:31:49:65:
                    64:bd:80:b0:02:31:a1:4e:04:7e:21:f2:19:d1:4b:
                    98:99:10:aa:f0:ae:8b:51:f8:35:33:d4:de:79:a4:
                    8e:a1:74:ea:36:2e:aa:58:5e:51:03:81:6f:4b:c7:
                    b0:7b:5c:d7:75:9f:ae:de:9b:72:2b:00:70:ac:75:
                    88:12:32:66:d2:f1:ff:cd:63:c2:10:24:e2:13:7d:
                    dc:51:08:f3:fb:f2:e2:9e:c9:a0:77:b4:15:dc:54:
                    27:53:50:5a:c3:b7:15:ec:ed:98:06:b2:33:a1:55:
                    14:9f:90:f4:ef:83:3f:14:f1:79:15:26:fe:8f:f7:
                    f1:80:b0:ae:d1:f8:ae:7a:8d:68:29:bd:82:ad:d8:
                    36:da:e2:05:60:1d:c2:1a:2e:7f:90:c8:ce:38:b6:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EE:A0:26:9C:A9:6B:F5:AF:6F:69:80:79:16:D3:97:07:82:4B:AC
            X509v3 Authority Key Identifier:
                keyid:A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:78:27:01:07:65:91:e0:d5:0e:98:56:98:3e:43:07:d9:e4:
         a2:1c:97:67:15:ab:53:e7:dc:e7:ca:03:cc:bc:8f:30:86:24:
         a6:84:3b:23:72:30:e9:8e:9f:f1:b1:a7:0e:5f:cf:54:4c:d5:
         36:82:3f:e4:2a:8d:82:0e:4e:1c:cb:3b:a2:80:80:94:64:60:
         4c:4c:81:9f:42:12:6c:02:83:da:ac:62:94:6d:59:c9:a2:9f:
         e3:68:97:63:92:df:d8:29:f6:d4:0b:3a:9f:89:27:53:77:71:
         54:16:89:7e:8d:ae:75:7d:45:87:15:da:d3:41:8f:35:78:cb:
         7f:47:1e:b7:87:2e:89:ae:7b:d5:f5:f6:87:b6:a8:07:7c:0b:
         59:36:6d:db:53:27:26:67:0c:f6:73:86:88:7d:ec:59:95:22:
         d3:de:07:da:3a:02:84:87:aa:5b:d5:b8:bc:c5:e0:0c:c8:a6:
         ce:c7:9f:80:a8:92:6e:7d:9a:ae:56:34:fd:1b:b7:15:7a:2b:
         eb:9a:2c:44:d1:4d:78:40:c6:27:35:d7:7c:6f:b8:9f:73:6a:
         4c:b8:84:e3:bf:b6:12:f9:1a:eb:c4:44:b0:26:e1:d3:db:05:
         3a:cc:98:50:99:6b:8b:d6:44:c0:dc:2e:44:5b:71:55:00:de:
         eb:45:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:12:18 2026 by rpki-client