Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
File:                     Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft (raw, json)
Hash identifier:          eq+ur+dreqC081YjLLlLq6XqGG8Q644LCAYB3wqGDIk=
Subject key identifier:   F6:1B:20:01:96:38:42:55:96:E9:3C:3E:ED:E2:79:78:ED:C9:CD:C1
Authority key identifier: 1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
Certificate issuer:       /CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Certificate serial:       019F916DCE4AB5E2F28890D4E0FE961B539A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:02:00 +0000
Manifest this update:     Fri 24 Jul 2026 00:02:00 +0000
Manifest next update:     Sat 25 Jul 2026 00:02:00 +0000
Files and hashes:         1: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl (hash: FHkGKvY9cQwGP+jbrXIRrbPjGZfH8Wy/m0ydu6Ep4Dw=)
                          2: nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa (hash: 6zSk/eu9Fh0Y0k4njwXKHhSTfWBnk84TWmm0U218WXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:ce:4a:b5:e2:f2:88:90:d4:e0:fe:96:1b:53:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ede33150c1d268dae3b04d2aa69e30430816f61
        Validity
            Not Before: Jul 24 00:02:00 2026 GMT
            Not After : Jul 25 00:02:00 2026 GMT
        Subject: CN=f61b20019638425596e93c3eede27978edc9cdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:70:26:ca:8a:64:b0:d3:7c:54:6d:fb:e2:
                    1a:32:18:dd:0e:ef:98:5f:e2:70:44:f3:aa:a3:3d:
                    c6:84:bb:50:bd:b7:b4:72:ea:7e:3c:a8:fd:bb:d7:
                    fc:5c:54:24:c3:34:48:2a:be:e3:ce:1e:72:1b:ee:
                    ce:a5:55:dd:3b:c1:16:49:79:ed:f3:32:14:50:cd:
                    57:c4:83:95:dc:59:2d:ac:77:1e:b5:ae:b0:db:05:
                    94:b0:09:a4:c0:7a:d1:ed:ac:8a:7f:ef:91:ae:fa:
                    b4:37:bf:a8:a1:cf:ab:a0:b6:8a:11:c8:1c:2a:35:
                    c8:90:b2:78:c4:8d:7e:05:95:86:92:05:d8:ea:1a:
                    12:ff:b1:ba:d4:41:fd:9d:25:79:01:c4:75:01:5c:
                    79:da:49:be:08:dd:e6:39:2e:3a:d7:6d:5d:60:44:
                    bd:6a:b7:8c:5d:cc:ff:4d:0b:12:24:77:51:05:5f:
                    10:4f:16:68:5d:c1:c9:13:5f:b0:2e:6a:5b:64:07:
                    e4:d5:81:be:b9:b4:60:c6:80:dc:fe:68:b6:d4:73:
                    36:c9:03:ca:05:15:7d:46:05:cf:2d:fb:29:39:62:
                    46:1d:0c:4f:e9:97:b3:8e:94:5e:34:a6:e5:28:ef:
                    a1:d4:fc:5b:33:b7:bb:65:69:67:47:08:ba:78:77:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:20:01:96:38:42:55:96:E9:3C:3E:ED:E2:79:78:ED:C9:CD:C1
            X509v3 Authority Key Identifier:
                keyid:1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c1:16:f9:cd:75:67:76:3f:80:38:9b:d2:d8:07:9e:0b:71:
         9e:d8:dc:d6:a1:45:1b:ef:f2:56:b9:9c:71:a2:1a:99:d8:4c:
         1e:0c:ce:cb:8a:70:d6:de:5e:ba:9f:27:d2:39:ca:31:b9:c2:
         a9:de:3a:5d:55:e5:45:f3:8a:43:2e:4d:7e:cf:e1:bb:11:e4:
         78:88:3d:d9:46:d5:2a:07:c1:47:30:dc:8d:ab:cc:1e:c5:e5:
         60:5c:a9:bb:29:0e:2a:c6:e5:92:57:cb:e7:8a:de:9c:17:ce:
         b9:e6:35:eb:9d:21:f7:95:0e:e5:87:0e:b8:aa:c1:19:cc:ec:
         41:5b:c5:9e:0e:92:df:cd:0a:b9:f8:ea:48:4a:02:fd:79:f1:
         f5:66:81:2b:ca:a8:ed:41:f6:cc:ba:a7:d6:79:a0:1c:9f:09:
         22:b0:ab:c6:8e:9f:5d:16:07:74:0a:31:89:b5:b6:b6:d9:d9:
         6a:0e:ef:4b:4a:3f:fe:ed:28:d1:59:37:5d:df:65:80:e5:df:
         9f:20:3c:80:2e:0d:54:3b:63:34:90:50:f0:dd:a1:2b:46:86:
         fb:36:64:ac:c1:32:5a:6d:e5:05:d2:02:a7:f7:9c:bf:01:a6:
         29:66:0f:2e:3c:af:15:7f:24:71:85:34:ca:50:aa:b9:90:30:
         c2:82:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:56 2026 by rpki-client