Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File:                     P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier:          WzcM9UKm5JfOb1OE3ArlN0iRi/49T22qrp3KhoVF1PQ=
Subject key identifier:   23:6F:92:44:6A:FD:22:7A:A8:59:90:A3:E6:16:CE:21:1F:CD:B3:ED
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer:       /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial:       01A0032659ED14129B6DF85AE071FEE1A7AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number:          1A01
Signing time:             Sat 15 Aug 2026 02:00:40 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:40 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:40 +0000
Files and hashes:         1: OsxR7yFdFRenycaE_q8hld1AbUQ.roa (hash: Fufnasj3vyQ/2zEL9UqegZtuU29Utyi2U8r5NLTadZk=)
                          2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: AqF2TSiP5vN7ccEjenGxkAhaA3EvHRFNCbBGmgdFjnc=)
                          3: q1MdFgrztAHRD55dweODJfa4RK4.roa (hash: aZ5l1yMm02BT+qNFooS+z/TzrtnqLkZdfbJDBupopYk=)
                          4: v09tww-7oHxZ6sHFn1E1sm8TLy8.roa (hash: b5FXRSJZMeoKM16WUIwE96LX1QoLUNfwWW43UIqRREE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:59:ed:14:12:9b:6d:f8:5a:e0:71:fe:e1:a7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
        Validity
            Not Before: Aug 15 02:00:40 2026 GMT
            Not After : Aug 16 02:00:40 2026 GMT
        Subject: CN=236f92446afd227aa85990a3e616ce211fcdb3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:11:32:99:56:f2:d3:d5:75:0c:53:44:a2:
                    cf:05:c9:e5:a1:74:5c:8b:df:a1:61:8f:10:7a:a0:
                    66:46:23:18:78:a1:69:60:a2:1b:3b:c8:4d:05:63:
                    15:12:2b:1e:a5:ab:ff:c1:34:85:6b:88:25:7f:f0:
                    1b:97:b4:46:18:5b:08:6a:46:cc:9a:e4:c1:ff:47:
                    73:c1:52:e5:c8:f0:07:75:7e:96:23:b6:59:c4:89:
                    c0:1f:74:e9:04:97:4c:4b:14:0b:2b:8b:54:09:12:
                    77:11:fc:a4:ba:f4:65:8f:84:b9:a2:a6:09:b0:16:
                    88:8c:9b:d9:fc:1f:69:46:44:f9:b2:b0:cc:cd:9c:
                    3e:51:c9:fa:04:a6:da:7e:00:c4:90:66:61:67:27:
                    09:0a:db:2a:61:42:73:1e:3a:59:57:54:fb:26:42:
                    df:d8:09:6c:64:9d:cf:fc:66:7a:90:e3:a7:e8:26:
                    a0:8b:78:98:71:75:88:12:02:c3:d9:ef:ed:8e:5c:
                    00:b7:a2:37:65:36:c9:bd:12:00:fc:79:6e:74:f8:
                    46:69:76:d4:82:1c:68:44:df:f5:d3:db:e9:01:fd:
                    72:17:41:1e:9c:23:05:41:30:5b:c0:83:3b:43:84:
                    53:18:b9:92:e0:22:69:21:8c:21:da:e3:25:6e:33:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:92:44:6A:FD:22:7A:A8:59:90:A3:E6:16:CE:21:1F:CD:B3:ED
            X509v3 Authority Key Identifier:
                keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:64:9e:02:c3:19:fd:6e:01:c0:89:f2:e1:3b:fd:31:3a:41:
         83:c2:6a:56:8d:3f:49:ca:a4:6c:ee:92:f1:4e:d4:87:09:50:
         d3:41:8f:5d:6a:72:45:99:c0:4d:76:2c:cb:4d:81:4b:ea:54:
         59:48:af:e7:e3:d6:be:a6:24:a4:d2:8d:28:4f:38:ac:a6:07:
         68:67:49:a9:45:d9:04:c5:83:28:62:7a:84:fb:38:a9:17:38:
         cb:3c:16:2f:95:28:a9:73:d4:20:6b:2e:f5:82:40:ea:f8:0a:
         70:e2:14:68:6a:72:f7:2e:e8:0d:c5:74:8b:f4:41:fc:db:c5:
         e3:c0:a1:87:3f:fd:49:a0:38:c2:2d:24:54:98:50:85:a7:2d:
         aa:9a:7a:9d:b9:b9:3f:2f:f0:48:15:72:56:df:9d:b3:66:43:
         23:e5:f5:9e:bc:0e:30:6b:17:8c:08:18:67:74:9f:0b:d0:12:
         fa:a0:c6:ab:54:ea:55:8c:2d:f8:b9:bb:89:f2:d5:40:81:c8:
         48:84:b7:8c:54:05:c5:0a:39:eb:ab:59:fe:93:18:e9:92:7c:
         f3:b2:12:e5:48:71:6f:1c:51:81:e0:80:fb:21:76:48:a8:1f:
         49:62:e1:c9:a9:60:ee:f3:00:78:71:4e:b1:02:c4:a9:95:d2:
         d0:36:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:51 2026 by rpki-client