Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File:                     OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier:          Dgt1rzfRbpzuZ0hDj91je78yoCvHQ/LZnvBGXwEsQQE=
Subject key identifier:   72:3E:48:B7:9C:E1:0D:A1:1A:EF:FB:9D:C0:C7:68:ED:56:6C:25:8B
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer:       /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial:       019F11531E7015AC4576EAE5B827DDB48878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number:          198B
Signing time:             Mon 29 Jun 2026 03:01:27 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:27 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:27 +0000
Files and hashes:         1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
                          2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=)
                          3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
                          4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: JI6uKTXb5ZT9YTNkqZhhe3E6DneinYAqbmp82EpG4cs=)
                          5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
                          6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
                          7: fw0YP162WW2RmauK0r76hCJq7FI.asa (hash: gBQWVbDzHTXqbw6Lz9qGJDwJuoShYEIdho/K7qMK5b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:53:1e:70:15:ac:45:76:ea:e5:b8:27:dd:b4:88:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
        Validity
            Not Before: Jun 29 03:01:27 2026 GMT
            Not After : Jun 30 03:01:27 2026 GMT
        Subject: CN=723e48b79ce10da11aeffb9dc0c768ed566c258b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:9e:c5:c7:23:ea:08:dd:32:06:4d:ce:d3:
                    4b:e9:f8:16:a6:12:16:cb:da:ba:d7:db:6a:90:25:
                    0c:65:52:b6:63:ff:cb:ad:6f:ed:fe:4d:41:4f:01:
                    13:50:21:a8:52:36:9b:80:ee:25:ed:13:48:35:74:
                    c8:df:2f:87:fd:de:8b:77:06:ae:07:de:98:fa:29:
                    2f:94:63:5d:32:34:9a:0f:98:25:4d:dd:1a:88:f9:
                    af:7e:e2:4e:4b:37:88:5a:4c:e4:b6:25:ab:c6:b4:
                    5f:09:95:32:06:d2:0c:02:d2:c4:17:62:81:bf:c5:
                    49:df:9f:d7:c9:fb:ab:78:cf:92:4b:6f:97:9c:bd:
                    ad:8c:03:9b:d4:26:a5:7a:ea:03:39:a4:d1:1c:ad:
                    48:e2:ad:bf:b7:7f:ab:fe:54:ef:69:e0:d1:21:31:
                    86:27:d2:fc:36:47:06:70:c7:df:7f:b8:5b:2d:33:
                    6c:6c:24:cf:c6:11:04:e2:d6:27:90:3b:30:0d:d1:
                    d4:d4:60:ab:b7:e9:86:6c:5f:69:b6:d7:7b:13:47:
                    89:4b:11:f3:94:b4:18:4d:9a:ca:24:4f:41:6f:76:
                    31:5b:94:1b:ce:df:31:d4:3d:97:5a:e7:7f:89:d9:
                    00:d6:af:52:13:d0:c3:63:e4:fe:8d:e0:94:20:46:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3E:48:B7:9C:E1:0D:A1:1A:EF:FB:9D:C0:C7:68:ED:56:6C:25:8B
            X509v3 Authority Key Identifier:
                keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:d9:d5:bd:a7:1c:b7:78:78:31:4c:16:4c:54:07:a3:82:
         20:67:59:26:81:52:36:95:14:a8:cd:c8:50:50:b9:2e:b1:bf:
         56:01:b0:04:8e:b0:53:f9:d2:a8:40:3b:2f:f9:ca:7f:d9:85:
         e7:ec:8e:79:16:59:2f:c6:84:77:87:8a:e1:b7:b0:11:8f:cb:
         ca:67:82:14:0f:6a:58:b8:7e:d1:6e:6c:58:7d:f6:ab:ff:42:
         f0:f8:11:23:af:c7:52:3f:ce:fd:21:02:59:34:1a:c5:a0:02:
         5c:58:f4:42:81:20:5e:c5:31:e5:5b:55:d8:ed:24:e8:e4:ab:
         54:c6:84:6e:39:2b:8f:37:dd:ad:83:2e:fd:26:51:fd:cc:ab:
         d4:bc:f0:8b:c5:bf:e4:91:69:94:e2:09:11:11:ae:58:d3:f3:
         71:ff:33:92:d2:8c:c7:49:b9:22:5a:19:f4:eb:a8:e6:d0:3e:
         46:7c:9c:5e:1b:61:09:07:39:d9:d7:02:94:b1:66:0d:64:52:
         f7:22:39:e6:87:07:f8:3c:f1:af:a2:9c:30:91:4d:94:8d:62:
         55:87:86:c6:26:7c:9f:45:60:f5:20:a9:0e:ce:19:de:bd:ce:
         76:61:80:0a:49:92:69:2e:ae:50:d1:3d:79:f7:d2:5e:63:13:
         9a:ae:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:26 2026 by rpki-client