Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File:                     Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier:          zDfQaM0SDPf9EaephdXYqL6JiSGx24Fmmo3qD+Rwj+8=
Subject key identifier:   ED:F0:60:03:15:26:7A:E5:9F:67:7D:56:51:2E:04:AD:A5:2D:EB:34
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer:       /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial:       019F9247FFBD014339B8B09CD7E8B04E3CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number:          0844
Signing time:             Fri 24 Jul 2026 04:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:19 +0000
Files and hashes:         1: G-LosfPXxnZLjoawTLkLFlJf6Uo.roa (hash: 222el1T6oNBycXKI0rskbTnyDdqNQ8vPbLot/EwZDqs=)
                          2: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: ZjHI6Si0nsUs4VXpwUE0gXBKrTx1oqjv6ul9tFpTBK0=)
                          3: QlBIuHXJV34-HRgZJecpCSsUU10.roa (hash: 4zPQ9GZzH+rReoGUvyDkVlboTCPsAVjyxr06dsvIUCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:47:ff:bd:01:43:39:b8:b0:9c:d7:e8:b0:4e:3c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
        Validity
            Not Before: Jul 24 04:00:19 2026 GMT
            Not After : Jul 25 04:00:19 2026 GMT
        Subject: CN=edf0600315267ae59f677d56512e04ada52deb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:8c:7a:73:e5:27:e2:07:78:b6:23:b4:47:
                    26:b5:4f:0b:00:1f:48:b7:45:22:59:5d:7a:68:8d:
                    fa:c8:74:4d:fa:f4:1c:6a:ec:96:b9:20:11:86:a4:
                    fc:a6:97:82:68:e0:bb:f6:7e:22:01:db:9f:6b:ea:
                    01:75:e7:0e:ea:7d:d5:bb:d6:e6:d1:40:5e:d9:1a:
                    ae:a0:45:78:18:d5:8f:a3:5e:0e:34:39:fa:87:fc:
                    dd:08:05:41:77:2f:37:54:d2:5b:49:a4:b2:fc:07:
                    07:9b:6f:ee:3d:33:a6:43:a5:39:73:53:ce:f9:9d:
                    53:7f:82:2e:5e:ea:1a:31:1a:f8:7e:0f:c4:61:ac:
                    cd:63:86:98:bb:1b:ff:f1:90:15:3c:0b:86:e8:28:
                    0c:7f:e5:bc:b5:f0:eb:bc:77:57:51:19:f1:9e:79:
                    de:eb:a8:d5:9c:40:5b:8e:8f:fc:d1:ee:cc:07:32:
                    ce:15:75:f5:9f:ca:99:47:34:e1:f4:7a:01:06:d2:
                    56:e1:ae:79:d0:bc:2d:84:77:82:29:1a:bf:a9:a4:
                    01:12:47:64:05:11:1d:6e:5c:9d:5c:bb:fb:64:6c:
                    93:de:49:c0:1e:d4:b9:61:d0:fd:57:88:1d:09:b2:
                    80:2c:72:5e:91:36:ea:f5:84:e0:66:73:f6:98:61:
                    7a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F0:60:03:15:26:7A:E5:9F:67:7D:56:51:2E:04:AD:A5:2D:EB:34
            X509v3 Authority Key Identifier:
                keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:20:96:dc:8a:8e:d9:79:3f:9e:07:44:85:d5:bc:24:7b:a5:
         ab:3c:04:a7:e9:c9:ce:a0:d1:dd:07:f0:22:e9:69:eb:9a:f1:
         c9:60:d5:ff:77:69:1f:43:bc:61:74:64:77:70:4a:ab:1e:9a:
         9d:7f:1b:03:94:3a:e3:11:83:57:41:dc:f0:36:24:e3:20:9f:
         bb:67:ad:29:99:b9:76:66:26:65:25:10:4e:e3:5b:7b:2f:ee:
         fa:ac:88:bc:c3:07:5b:6d:89:7b:f0:ec:24:80:46:47:c8:0c:
         fc:62:93:7a:47:54:bf:2d:a0:78:6f:40:ac:31:7d:84:5a:ad:
         bf:5d:d0:3f:7c:9e:b5:57:5e:c9:7f:71:7f:bd:1d:0f:90:f1:
         05:0e:ea:4e:bd:38:21:25:34:71:f9:4e:21:c9:0e:1f:c9:a4:
         bc:8e:4a:4c:8e:76:70:f9:fe:3e:0c:98:ad:e3:b2:15:ba:96:
         af:d5:5b:2e:15:b2:bd:e2:fa:4c:06:a1:f2:c6:88:b4:ee:92:
         84:14:2d:82:fb:b6:1c:ac:c6:8f:a2:a4:ad:74:ed:2a:a7:f4:
         93:21:68:76:8c:01:a2:0b:2c:99:af:d0:05:58:ed:38:b3:93:
         0b:85:e9:97:4c:51:ad:c9:ee:58:16:b8:bd:df:34:af:27:ab:
         4d:12:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:52:02 2026 by rpki-client