Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File:                     OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier:          uvKcNFNSamDLvnPd9v71LE+WVxprwqcNPQ8dusu7RJY=
Subject key identifier:   8F:52:3C:1F:7B:08:E0:F9:84:8F:C4:D8:75:79:A6:BB:94:A3:F4:A3
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer:       /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial:       0198D5F1C6170265B1E542AED5D70DE3F603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 08:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:48 +0000
Files and hashes:         1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=)
                          2: AI-T3-zIp1DMrSXD4vBKYCDZBV4.roa (hash: KlOk/fF1w7EKHSk+04TQtjgBWQMEvMF/JZ8yxyO3hC4=)
                          3: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=)
                          4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: 7wLZBMoSNC4BQvIxyJ0Eg/QwDFXdmv2gDCdXUJIYSks=)
                          5: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=)
                          6: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:c6:17:02:65:b1:e5:42:ae:d5:d7:0d:e3:f6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
        Validity
            Not Before: Aug 23 08:00:48 2025 GMT
            Not After : Aug 24 08:00:48 2025 GMT
        Subject: CN=8f523c1f7b08e0f9848fc4d87579a6bb94a3f4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:b4:1f:ac:f3:46:3f:a4:5f:bf:5f:be:bf:
                    c7:b0:58:f5:5b:97:43:2e:21:02:dd:71:ed:16:43:
                    38:1f:42:d9:3a:8e:2a:cb:c9:04:63:26:1e:81:56:
                    a1:48:03:fa:4e:66:b0:e5:ee:48:53:fb:66:35:71:
                    33:63:df:8c:09:68:2f:91:76:7f:3d:cc:cd:47:67:
                    79:9e:ad:1c:db:9d:2e:e4:12:db:e4:21:6f:5d:1f:
                    e3:63:9d:27:d0:5c:71:7a:68:6f:ff:0d:c6:f6:15:
                    3d:6e:c0:ea:41:0a:2c:e9:d8:5e:ce:f5:21:55:c3:
                    56:8d:df:eb:e6:05:f3:d2:ae:ad:4a:36:45:0b:85:
                    67:38:e8:05:ec:9d:78:40:da:38:39:51:5c:1c:a6:
                    c6:df:d6:35:0e:2e:fa:64:4e:a7:24:54:50:7b:bf:
                    0b:78:e6:44:52:ed:fa:74:6c:83:78:03:3b:68:7e:
                    03:f3:e5:4b:2d:ad:de:ec:09:c6:d9:e0:91:fe:62:
                    b8:30:fa:5c:f5:53:f4:d8:5a:28:2c:16:9d:73:50:
                    d7:f7:dc:c0:76:61:99:c2:97:ca:c8:2b:96:96:cc:
                    5b:e0:65:af:30:42:39:f0:2d:a0:af:0e:8d:28:1b:
                    fd:ec:1f:5a:eb:4d:96:5d:89:94:4d:6f:6e:34:1d:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:52:3C:1F:7B:08:E0:F9:84:8F:C4:D8:75:79:A6:BB:94:A3:F4:A3
            X509v3 Authority Key Identifier:
                keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a0:22:ed:21:69:9b:15:fb:be:08:9a:72:a3:6b:a4:9e:fa:
         04:39:95:8f:34:b8:67:2c:a0:f9:4d:e0:59:68:de:af:13:d3:
         1f:58:c5:f8:7e:39:f7:35:f9:22:0b:ec:51:0c:be:60:f2:0d:
         62:79:1a:fc:64:e8:93:ab:b9:6f:16:8a:ea:14:47:be:af:c2:
         29:03:1b:57:b5:60:a5:c2:f0:30:f3:3f:e0:5c:31:4c:43:86:
         12:70:9f:2c:97:d4:49:ec:09:7e:62:7e:2d:f7:fc:90:01:b2:
         77:21:2b:aa:07:58:d5:1e:01:dc:fe:0e:76:2a:06:ca:d1:f1:
         a4:d7:f3:83:b0:16:ca:4c:26:10:de:fb:9a:07:31:aa:b9:d2:
         8d:8a:fa:d9:39:cc:79:55:69:51:3b:f4:44:f3:48:ff:43:a4:
         fa:ab:f8:6f:1b:9f:ea:86:1d:ed:11:40:5c:d4:e7:83:e3:db:
         63:9d:65:f3:3e:ed:37:bc:87:de:54:79:85:af:4f:8c:c4:52:
         e7:e0:3a:6a:e2:a0:e9:f7:b8:a0:4b:98:b9:08:2b:a8:99:97:
         75:07:3e:a1:4f:22:d9:be:d5:f5:97:dc:d1:33:77:e8:ba:94:
         53:72:73:cb:b9:4e:4d:1f:df:cb:d7:3f:41:2e:87:3c:9f:b1:
         e6:45:d2:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8cYXAmWx5UKu1dcN4/YDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4
YmZiYjUwHhcNMjUwODIzMDgwMDQ4WhcNMjUwODI0MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZjUyM2MxZjdiMDhlMGY5ODQ4ZmM0ZDg3NTc5YTZiYjk0YTNmNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5+0H6zzRj+kX79fvr/HsFj1W5dD
LiEC3XHtFkM4H0LZOo4qy8kEYyYegVahSAP6Tmaw5e5IU/tmNXEzY9+MCWgvkXZ/
PczNR2d5nq0c250u5BLb5CFvXR/jY50n0Fxxemhv/w3G9hU9bsDqQQos6dhezvUh
VcNWjd/r5gXz0q6tSjZFC4VnOOgF7J14QNo4OVFcHKbG39Y1Di76ZE6nJFRQe78L
eOZEUu36dGyDeAM7aH4D8+VLLa3e7AnG2eCR/mK4MPpc9VP02FooLBadc1DX99zA
dmGZwpfKyCuWlsxb4GWvMEI58C2grw6NKBv97B9a602WXYmUTW9uNB1q1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9SPB97COD5hI/E2HV5pruUo/SjMB8GA1UdIwQY
MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt
NzI0OTQ5YjQ2MGU5LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5
LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqAi7SFp
mxX7vgiacqNrpJ76BDmVjzS4Zyyg+U3gWWjerxPTH1jF+H459zX5IgvsUQy+YPIN
Ynka/GTok6u5bxaK6hRHvq/CKQMbV7VgpcLwMPM/4FwxTEOGEnCfLJfUSewJfmJ+
Lff8kAGydyErqgdY1R4B3P4OdioGytHxpNfzg7AWykwmEN77mgcxqrnSjYr62TnM
eVVpUTv0RPNI/0Ok+qv4bxuf6oYd7RFAXNTng+PbY51l8z7tN7yH3lR5ha9PjMRS
5+A6auKg6fe4oEuYuQgrqJmXdQc+oU8i2b7V9Zfc0TN36LqUU3Jzy7lOTR/fy9c/
QS6HPJ+x5kXSGA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:50 2025 by rpki-client