Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File:                     hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier:          aZfIp5VX71EQ4dL+VDX+jnijrSdaru7SsvkhjDgqzwI=
Subject key identifier:   3F:D7:E6:DB:99:33:E6:5A:3F:4E:78:B3:4C:D5:5F:3A:81:F7:50:4C
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer:       /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial:       019F93FF74C76914123729120F6B06E795C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number:          185C
Signing time:             Fri 24 Jul 2026 12:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:19 +0000
Files and hashes:         1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
                          2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: jvJy3NcJnsqcN0itxbcnc3grqSXDUObbaJRgreUjllQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:74:c7:69:14:12:37:29:12:0f:6b:06:e7:95:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
        Validity
            Not Before: Jul 24 12:00:19 2026 GMT
            Not After : Jul 25 12:00:19 2026 GMT
        Subject: CN=3fd7e6db9933e65a3f4e78b34cd55f3a81f7504c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:c0:ea:46:ce:02:5d:8b:ef:a0:5d:38:05:
                    a1:f8:1c:16:fc:39:65:b2:7b:6a:1b:75:5b:14:03:
                    f1:23:fd:5f:a7:0d:99:35:c6:a1:61:78:cc:f5:3a:
                    d3:bf:6c:93:ad:c2:40:9f:88:70:d6:3b:f4:55:54:
                    31:6d:df:8b:20:a5:f3:10:d0:24:64:83:29:c9:1c:
                    25:bb:9b:bc:3d:b6:46:1a:58:30:6a:42:0d:32:71:
                    fe:0d:70:bb:9d:a6:46:1b:69:1d:fa:b5:46:e2:34:
                    2f:d3:df:90:c0:e1:cd:ad:a1:8e:ba:da:48:58:1f:
                    62:fe:2d:4b:36:27:28:e1:80:fe:e2:7d:1d:45:19:
                    c7:a3:52:32:56:2a:54:cc:28:07:cf:24:3c:4a:41:
                    8d:f7:ac:2c:a5:83:dd:c3:23:fc:8d:5f:f9:9a:65:
                    b7:81:7d:b5:26:6e:cd:69:96:4f:df:4b:01:50:7f:
                    59:13:84:c2:98:25:f8:ed:43:dd:d8:cf:ef:06:e4:
                    ad:9e:f2:b4:5f:c7:9d:1e:61:e8:c9:c3:a9:5e:03:
                    50:04:b6:3a:80:e3:ad:72:0b:fe:b2:b2:71:8c:26:
                    77:4c:85:1f:c0:bc:1d:a9:4d:18:de:48:d9:e8:84:
                    2e:09:c5:59:ea:52:4d:0b:c5:af:c4:2f:6b:aa:15:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D7:E6:DB:99:33:E6:5A:3F:4E:78:B3:4C:D5:5F:3A:81:F7:50:4C
            X509v3 Authority Key Identifier:
                keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:33:04:fd:05:73:c2:92:6b:98:10:66:cf:5e:d2:05:41:2f:
         e8:ed:c0:a9:5e:c6:b4:a5:37:9f:7d:88:1e:df:f2:3a:89:6c:
         e1:72:86:50:cc:7d:93:a6:5d:83:fa:a5:b2:7d:6d:46:05:60:
         f5:6a:4e:08:a3:d8:1a:d0:96:43:14:e5:f3:f5:80:14:a9:dd:
         ae:68:0d:92:11:94:ca:7f:95:34:8a:8b:fb:9b:ac:13:c6:f9:
         af:8e:f1:e4:28:01:76:30:54:94:16:06:22:1f:b4:85:96:d4:
         9a:8e:72:e3:e3:56:ed:14:e9:9f:d4:62:ab:9d:c8:c4:7b:06:
         cc:ef:31:d7:8b:ca:45:bb:90:c4:92:29:aa:41:80:af:05:68:
         89:af:99:c2:6f:9e:e2:46:82:54:71:75:d5:95:7a:0a:97:13:
         ca:24:d1:ae:d8:f2:b6:c4:89:4d:3b:2f:f2:de:40:2b:77:a1:
         21:83:5f:44:26:14:3c:2c:65:ac:29:75:a5:6d:83:e0:a5:e0:
         b7:19:1c:d0:cf:30:ba:21:29:a4:6f:72:d5:a8:91:3b:4c:4f:
         3a:04:22:f3:b7:0b:97:cf:23:6f:c2:81:ef:fa:82:b3:c6:4e:
         a1:94:bc:79:cd:55:15:90:46:0b:41:3b:10:e4:fc:8a:c4:71:
         6d:09:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:23 2026 by rpki-client