Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
File:                     1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json)
Hash identifier:          JA8asSMPIc2bFIlscE5+5xilZGyKJ7zDEUUb7QQFCFk=
Subject key identifier:   70:CF:67:5E:FD:7A:3E:6D:2F:9D:ED:E4:43:79:8A:C4:99:F8:01:FC
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       019F8FEC5D0D86D50B7DD18BED745729987B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
Manifest number:          158E
Signing time:             Thu 23 Jul 2026 17:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:59 +0000
Files and hashes:         1: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: iqV+EIF5gRBOHvlezMObZcAk2+hKLyt36zNWIYD2mQI=)
                          2: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (hash: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q=)
                          3: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (hash: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ=)
                          4: UcCqMTHisbto-8lkUT_tLgAeR84.roa (hash: MKKos7zvQxC3AHlxEIyIz2TorbEhj+M5Gg1Z5qYM5Vw=)
                          5: dKrxZh5eXZLlr4ulHUj3rX7iLKw.roa (hash: 3Y0TgUH+fONslolgRyWTVgCSVHlc4/LZlKQTJy+uJA8=)
                          6: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (hash: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc=)
                          7: zNwZgS-KWr_tdZQlJYw7r-bncj4.roa (hash: bFzYQzvtRgyI5Sf4GLvJJ0QPWEhrGxWF/aPyki12aFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:5d:0d:86:d5:0b:7d:d1:8b:ed:74:57:29:98:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Jul 23 17:00:59 2026 GMT
            Not After : Jul 24 17:00:59 2026 GMT
        Subject: CN=70cf675efd7a3e6d2f9dede443798ac499f801fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:8e:93:09:84:56:2b:f9:73:b9:26:82:c0:
                    0f:b0:fe:d5:3f:74:96:01:5f:ba:99:ee:1c:b9:19:
                    c7:5e:59:b0:cd:41:f9:77:f8:70:e0:da:82:b0:bb:
                    a2:cd:3b:5d:27:7c:8e:22:ec:0a:2e:20:fc:de:37:
                    bd:8a:fe:d9:13:4a:fe:17:95:9c:d7:23:6b:20:e4:
                    48:7f:cb:c8:a7:a0:75:b6:de:c6:a3:0c:d5:48:56:
                    3a:be:93:33:ac:38:73:7c:bd:fd:81:60:40:02:4c:
                    ae:11:35:58:26:ee:6d:11:32:c6:e4:45:07:c8:8f:
                    ac:02:b0:14:94:d0:05:0d:ec:e2:2c:05:e2:0e:1c:
                    8a:b8:50:af:9c:e7:5b:c8:b7:67:e7:0f:7c:b2:0c:
                    6b:d1:12:16:7d:4d:7f:76:36:67:a2:72:25:7a:84:
                    28:83:b0:2f:2a:f1:70:d5:e3:09:05:e7:c2:6a:63:
                    49:79:bc:73:b0:95:39:5e:6e:c6:a0:9c:44:64:a3:
                    bc:16:5e:4e:11:e2:45:91:25:2a:79:5f:ad:58:2e:
                    19:da:7b:a5:90:e4:3c:12:51:8f:03:7b:3e:7a:aa:
                    08:db:03:19:16:e8:e5:90:5d:bd:a0:ea:00:ff:1f:
                    ab:89:c9:7b:98:07:d4:ba:5b:49:83:f6:bb:63:12:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CF:67:5E:FD:7A:3E:6D:2F:9D:ED:E4:43:79:8A:C4:99:F8:01:FC
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:2e:ab:f2:da:39:60:14:8a:f5:39:72:82:da:48:b2:2d:
         a5:32:6e:0a:8b:0c:64:5f:9f:07:fd:fe:bd:83:c1:e8:ae:96:
         ad:c7:75:15:c6:03:af:1b:9e:f4:3e:b9:b3:3d:e5:1e:08:0e:
         8f:c2:2d:ec:c2:8a:7d:97:a1:1f:b9:e7:03:3b:8f:24:4d:c0:
         bf:6e:74:b4:d5:90:b8:de:81:f4:82:c2:a7:cf:f4:db:12:09:
         96:16:c2:32:b7:b9:10:f9:8b:79:86:0e:89:7c:c1:36:f3:08:
         a1:86:3e:88:75:0c:16:45:97:89:df:24:da:7d:60:fb:7b:06:
         8e:91:35:1f:0d:3d:60:1f:7a:b0:d7:a4:90:09:0b:2b:06:a0:
         e8:8f:85:83:b2:05:3c:24:1f:d4:3f:2a:36:ab:b5:03:8e:81:
         eb:ba:b9:43:3c:97:4d:51:b2:a7:90:d7:bc:3e:3a:46:f9:d0:
         07:21:e2:5b:06:61:98:b4:1d:dd:b0:c7:75:33:ac:18:b4:fb:
         c8:3c:f5:db:a5:3f:90:9e:13:1d:94:3f:4c:15:28:cd:19:e1:
         f2:3b:0e:1c:d3:73:67:dd:e7:13:73:f8:9b:d9:4f:0e:4f:66:
         21:b4:46:fa:73:e5:1e:a1:c3:ed:29:1b:9e:73:b5:6a:74:8c:
         b5:af:f0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----