Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File:                     aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier:          kKpxo7k+k4dvI65pJ5koMPbcZ/gNtSd18ZmIgbJJGk4=
Subject key identifier:   75:22:F3:0E:53:38:C8:2E:46:A6:12:3A:3A:02:59:DF:65:C1:99:45
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer:       /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial:       019F90FF0B287A8AFD8B0B0C53F9269BEE10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number:          14F9
Signing time:             Thu 23 Jul 2026 22:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:01 +0000
Files and hashes:         1: H3BcLlLdlK5OktIlKB08CLOJceQ.roa (hash: gCov3Lq4RydmSmoM9Ym4TkvogcYAidCIuxal3h4GAM8=)
                          2: K01hEvp_oFx3qc2-IUwd8VFE1hI.roa (hash: cm5jfcRdjk0yhdi3HnxUE7FN1POO9527wRj/2D2vjMs=)
                          3: P6dX7w5DhwlzNU979iFd9YDU0uI.roa (hash: UBskImMtpaHQaupcjp821thacxNepjpaa64/vY6YASM=)
                          4: UTSVX3B31qE6acA-2M3EInvqjqs.roa (hash: 2V2E0vmwbEv4vLiGDwB2fco3T0rwdLt7wl4GPwkBEC8=)
                          5: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: GEuZYexDVePoUbVs+VBCeX9Lkz3Z0mlb6SYdACFSjrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:0b:28:7a:8a:fd:8b:0b:0c:53:f9:26:9b:ee:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
        Validity
            Not Before: Jul 23 22:01:01 2026 GMT
            Not After : Jul 24 22:01:01 2026 GMT
        Subject: CN=7522f30e5338c82e46a6123a3a0259df65c19945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:12:91:9e:ee:3d:65:73:6f:fc:51:5b:d2:
                    ef:56:be:c3:6d:ed:b9:bb:c4:b8:0e:59:bd:02:81:
                    90:ec:2c:53:8f:23:a4:7d:32:4b:6a:40:22:4b:e5:
                    89:d9:3a:95:de:10:a8:17:93:31:e2:19:4f:14:9a:
                    7d:c7:1e:1b:6d:19:e4:99:a6:a0:9d:4b:9b:04:14:
                    00:ff:50:e8:a3:fa:b2:25:7a:17:df:e8:42:02:7f:
                    d9:25:77:4b:c9:5e:41:64:f7:c3:64:dc:9d:e2:15:
                    2d:92:2e:a6:9e:58:72:d9:e0:95:18:dd:58:aa:b9:
                    51:cb:0c:af:00:f2:41:4c:aa:de:2a:73:1a:22:32:
                    a9:6f:ed:4f:82:c7:b8:1b:03:b5:10:7a:97:46:6e:
                    91:09:76:4a:5f:e8:ca:c4:7a:87:58:aa:2e:a2:73:
                    1e:47:14:ff:a6:40:5b:ee:98:b8:82:93:86:a4:64:
                    81:c6:1b:94:d0:04:d2:3e:e8:2f:d9:25:53:9a:21:
                    74:5b:b5:73:c1:09:82:8e:c5:bd:60:62:af:46:6c:
                    c4:eb:70:48:89:4e:52:c4:24:9c:f9:4a:30:69:63:
                    ae:81:83:12:12:29:54:15:6e:71:de:42:b0:66:17:
                    35:f3:aa:dd:06:7e:53:7e:b7:aa:ba:10:0d:1c:8e:
                    3e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:F3:0E:53:38:C8:2E:46:A6:12:3A:3A:02:59:DF:65:C1:99:45
            X509v3 Authority Key Identifier:
                keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:09:c7:9c:a4:4b:91:a1:f2:96:3d:ff:45:56:6d:92:7e:
         46:24:39:30:e8:41:d7:86:57:6e:42:dc:57:cf:1c:c7:ec:f7:
         d2:d2:16:00:1f:d1:40:03:47:bf:f7:8d:9d:c1:23:5e:59:00:
         5f:42:90:34:db:bb:5a:8a:24:0b:c4:1e:6a:1c:40:66:5a:b0:
         4e:15:a8:66:8f:e1:2a:88:3d:e6:c8:22:88:91:c7:36:c7:22:
         a3:29:28:80:35:67:35:75:7b:61:87:58:5f:1e:db:28:e9:c2:
         2f:f7:97:f4:4a:61:37:09:4d:bc:65:38:1a:e0:34:c7:b9:f7:
         e6:05:0d:6c:44:00:02:7d:c8:1e:2a:1f:65:58:36:41:9d:5d:
         7a:6d:5a:f9:a9:81:9b:a8:83:74:d5:9c:c7:d9:42:78:37:64:
         70:c0:5d:a0:76:1f:1b:1d:78:5a:7f:33:44:1d:9c:8d:3d:2c:
         4d:4b:43:9c:2e:b9:27:7b:db:1d:4c:4a:a5:70:98:c4:64:04:
         4e:f6:3c:d5:b3:a8:29:62:12:ae:69:6d:00:e4:c4:cd:81:e5:
         0b:0a:a3:95:15:6f:ce:d5:65:56:96:0d:b3:4a:a9:38:a6:e7:
         a9:62:c8:10:70:33:c3:b4:39:d0:55:fe:8e:44:cd:a3:d4:dc:
         fe:34:01:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/wsoeor9iwsMU/kmm+4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NzcyNmQzOGZjZjJhN2ZiYmI3YmZjMjhkNjNmZTM1Nzll
ZDIxMWQwHhcNMjYwNzIzMjIwMTAxWhcNMjYwNzI0MjIwMTAxWjAzMTEwLwYDVQQD
Eyg3NTIyZjMwZTUzMzhjODJlNDZhNjEyM2EzYTAyNTlkZjY1YzE5OTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIESkZ7uPWVzb/xRW9LvVr7Dbe25
u8S4Dlm9AoGQ7CxTjyOkfTJLakAiS+WJ2TqV3hCoF5Mx4hlPFJp9xx4bbRnkmaag
nUubBBQA/1Doo/qyJXoX3+hCAn/ZJXdLyV5BZPfDZNyd4hUtki6mnlhy2eCVGN1Y
qrlRywyvAPJBTKreKnMaIjKpb+1Pgse4GwO1EHqXRm6RCXZKX+jKxHqHWKouonMe
RxT/pkBb7pi4gpOGpGSBxhuU0ATSPugv2SVTmiF0W7VzwQmCjsW9YGKvRmzE63BI
iU5SxCSc+UowaWOugYMSEilUFW5x3kKwZhc186rdBn5TfrequhANHI4+vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUi8w5TOMguRqYSOjoCWd9lwZlFMB8GA1UdIwQY
MBaAFGh3JtOPzyp/u7e/wo1j/jV57SEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAt
NGIyZGExOTdhN2U2LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAtNGIyZGExOTdhN2U2
LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtMJx5yk
S5Gh8pY9/0VWbZJ+RiQ5MOhB14ZXbkLcV88cx+z30tIWAB/RQANHv/eNncEjXlkA
X0KQNNu7WookC8QeahxAZlqwThWoZo/hKog95sgiiJHHNscioykogDVnNXV7YYdY
Xx7bKOnCL/eX9EphNwlNvGU4GuA0x7n35gUNbEQAAn3IHiofZVg2QZ1dem1a+amB
m6iDdNWcx9lCeDdkcMBdoHYfGx14Wn8zRB2cjT0sTUtDnC65J3vbHUxKpXCYxGQE
TvY81bOoKWISrmltAOTEzYHlCwqjlRVvztVlVpYNs0qpOKbnqWLIEHAzw7Q50FX+
jkTNo9Tc/jQBAg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:15 2026 by rpki-client