Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File:                     HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier:          AJyXUOMSAAaquLUsB9H4O3uazPKLpYLt4YYXMrR1OAk=
Subject key identifier:   E9:BB:42:D4:04:C8:5F:18:C3:39:AF:C7:99:42:AE:D4:18:39:3F:18
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       019F91A39CC883F5F1225388EA9D3C309214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number:          16DE
Signing time:             Fri 24 Jul 2026 01:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:46 +0000
Files and hashes:         1: 6pBv9rKYxwjjKOpT9lg6FT4kUQA.roa (hash: IB3HEiPAgwZs0ZTzyeRwb6dl6LY+fOatj7OxrAXQUsE=)
                          2: Cw5n-PWT2I1DxgK5DhwcrBsPkdE.roa (hash: mUvGxOekgoK3xHrsniH+HyllAGZivMOYDnmq6KeKBXw=)
                          3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: tfb5IYwTy3sUQqAmI+ODFN5Sg1x6jML1OkTFx3sXz0M=)
                          4: jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa (hash: qxuliQjoknAXmEjclXw7gD+kEmDxgV1U5FrECOviQhg=)
                          5: xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa (hash: EELHcZVf2cz0S4yWN9gbTUNVwaT1jOiA4YdDZsp4DqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:9c:c8:83:f5:f1:22:53:88:ea:9d:3c:30:92:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Jul 24 01:00:46 2026 GMT
            Not After : Jul 25 01:00:46 2026 GMT
        Subject: CN=e9bb42d404c85f18c339afc79942aed418393f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:1e:7f:ec:eb:42:ad:aa:ac:b4:5f:cf:b5:
                    0e:65:80:2d:a9:da:d9:f6:df:91:33:e7:df:70:ad:
                    a0:8c:06:d3:41:47:5d:da:73:c4:07:5f:22:02:0d:
                    6e:09:1a:b4:3a:24:dc:29:9f:aa:f0:71:b6:e7:30:
                    d1:6d:c1:a4:b7:c9:70:00:24:6e:c3:8e:c6:8d:d2:
                    fd:76:7f:1a:ac:82:1c:c0:81:19:b3:b5:6a:65:ea:
                    ea:c7:80:cd:33:98:a3:bc:9d:c3:d2:af:54:5f:65:
                    25:1c:cc:d9:b5:d1:6b:8c:a6:de:a9:0e:a0:a2:53:
                    ca:2b:d0:5d:79:7c:50:de:5e:99:b8:7b:c4:55:e2:
                    68:60:6a:dd:89:8e:c6:f4:99:a4:70:39:fa:38:b7:
                    ed:ef:86:0f:05:56:b3:2e:a9:9d:df:b1:a3:91:af:
                    ac:a3:c7:d8:c0:c9:f0:ef:ca:b1:4b:fb:92:09:11:
                    07:90:57:a5:c0:31:85:0a:48:5c:38:8b:13:e1:64:
                    a4:b6:16:9c:3b:2b:13:eb:a4:df:88:f8:68:18:14:
                    8e:da:30:2b:58:11:3a:9d:48:7a:14:38:4f:f4:96:
                    97:71:ba:ec:2b:19:b3:b7:63:43:ea:b1:0b:39:9d:
                    ff:67:f1:4d:59:66:0f:d2:64:88:c1:61:de:34:7f:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BB:42:D4:04:C8:5F:18:C3:39:AF:C7:99:42:AE:D4:18:39:3F:18
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:e6:e3:b0:d9:6a:3f:62:55:63:43:0e:97:25:28:11:91:
         33:b3:62:4b:a8:43:68:f0:17:2c:83:ca:d1:91:34:c1:cc:0e:
         8a:aa:b8:b1:ca:3c:9c:5e:0d:8a:51:d9:3e:55:f8:b0:bc:d7:
         c1:31:cb:84:ec:ab:4e:eb:1b:38:8f:e4:b6:8d:b7:b0:d1:47:
         1c:30:8a:0e:f5:e7:bb:ab:77:f3:b7:d2:1f:c9:e5:7c:88:19:
         c0:c6:ed:68:d0:7e:31:4a:bd:e8:40:0c:26:8b:51:ae:a4:df:
         4c:23:cb:a0:0d:b3:96:d6:33:d4:98:cf:9f:70:67:5b:92:25:
         2b:51:9b:00:4a:fa:c1:a0:7a:3b:30:5a:6a:24:6d:f0:65:3c:
         f9:93:24:13:45:66:9b:7c:48:8a:3b:ed:56:64:e3:19:0b:90:
         96:a0:e4:fa:d1:25:af:31:c7:5a:55:74:bd:53:7c:dc:f5:0f:
         53:2b:47:b1:ab:8e:dc:3c:63:45:57:7e:f6:d9:f6:d4:02:02:
         9b:8c:c3:6a:63:73:50:fd:29:78:c9:c1:51:26:15:de:d8:b6:
         57:54:98:8f:46:07:49:5f:29:70:2a:ef:5c:48:b9:5c:49:ad:
         dc:83:ef:86:ba:41:69:bc:53:33:2f:61:74:ae:d3:27:ab:57:
         81:b0:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:03:17 2026 by rpki-client