Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File:                     hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier:          BVmOEeDIALDkC//ayRhoO9+6YL1Kg8WgwQuOvyf9iXA=
Subject key identifier:   90:77:26:C9:FF:9D:2E:E7:2B:8D:F0:3B:4B:92:EF:62:55:51:4A:C6
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer:       /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial:       019F8ED9D64C1E0EE7A0C8E0B431EC5AA594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 12:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 12:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 12:01:08 +0000
Files and hashes:         1: 3iVHpX-aI-uO_RI8pv6ypgQCjZo.roa (hash: OKIRtCTmfn3CX5OuE5iLMX8UqmpBTkzwx6j0pTi8lPo=)
                          2: 4Y83xopR719SxF-9mkYVsuZPdvU.asa (hash: /BV9IR8XDZzpSpeeWi2TROvl4WlMh3YhpQRzOXZVJPc=)
                          3: 55OoBUFOM9TPPI-OW3WxlpfgGa0.roa (hash: ou1iN6OdQpzMZzlgWVrt2SECYX2pZ/j1SqKBwaQnptk=)
                          4: Ke8dRoJirH5sttFYCwiO0qmo8d8.asa (hash: 9z4rwbkYRmg1s501aTWgWzIblUDGnI/cKBSZyE4AZAU=)
                          5: fPxq3Rnthn9rgllCccsebneIsEY.roa (hash: sOGcnnv7kw9rDNmrJkZHKgFMOL9XnFiQ5b2sRJoEIFc=)
                          6: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: S4Gx6RL3yIgvYIdGhyjyGYkH5FZghmeFLEYroDZlUPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:d6:4c:1e:0e:e7:a0:c8:e0:b4:31:ec:5a:a5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
        Validity
            Not Before: Jul 23 12:01:08 2026 GMT
            Not After : Jul 24 12:01:08 2026 GMT
        Subject: CN=907726c9ff9d2ee72b8df03b4b92ef6255514ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:77:27:d4:50:18:8f:6c:60:ee:44:63:aa:
                    31:32:56:7c:94:a6:c3:f0:da:24:bc:d9:79:ce:0c:
                    b7:fb:5c:5b:15:7f:f9:4b:ef:e8:f9:5f:a9:e1:52:
                    a4:3b:71:d1:2a:46:0c:d7:55:52:8c:6c:44:c6:9b:
                    93:45:0a:f2:51:7b:86:21:92:f3:2c:d4:0f:ad:e6:
                    b7:f8:47:86:fb:f8:00:66:b8:13:2c:4b:b7:0a:a6:
                    f5:64:b2:99:ec:f7:e5:74:45:89:06:df:d4:a0:22:
                    7f:e3:98:a6:c3:66:e3:35:0a:6a:b8:22:1d:18:c6:
                    01:1a:0c:e7:f1:76:4b:c1:75:21:0b:72:7f:1d:84:
                    61:06:86:79:53:53:df:42:cb:e1:ab:d6:6a:82:64:
                    c1:85:36:73:50:f7:24:f4:d0:87:b4:05:53:c1:a5:
                    96:b6:67:45:4f:aa:e1:8f:6a:7f:73:94:ad:c7:64:
                    c5:ab:99:00:99:aa:58:b7:d1:73:33:c6:e3:74:09:
                    42:ca:4b:16:22:4a:53:97:67:be:24:67:95:91:f9:
                    a8:7c:6e:86:ec:e4:e5:bd:7d:4e:c1:c2:b5:a6:7c:
                    c1:0a:6c:bb:04:c6:f5:54:75:96:ad:1a:54:d7:9a:
                    0c:e7:93:76:81:24:00:59:c2:8d:60:3c:70:8b:47:
                    f3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:77:26:C9:FF:9D:2E:E7:2B:8D:F0:3B:4B:92:EF:62:55:51:4A:C6
            X509v3 Authority Key Identifier:
                keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:56:ed:13:20:bc:05:bb:08:df:c8:c8:93:9f:d7:93:60:6a:
         36:59:a2:67:bd:5b:0c:53:6a:e5:21:b7:91:e9:82:4f:59:05:
         dd:69:72:3e:69:59:4f:d8:7c:ae:0d:39:50:e3:f8:d7:79:5e:
         d4:38:c3:90:42:31:e0:f2:7b:99:95:bb:8b:98:2f:87:5a:6f:
         24:e6:fa:20:6c:fc:71:66:6c:2e:4b:a8:4b:5c:42:9f:39:88:
         09:83:55:5b:20:5d:82:d2:99:37:26:fd:05:2b:4f:87:95:3a:
         cb:3f:e9:66:01:64:d1:33:b4:7f:b0:8e:cd:5d:59:07:33:33:
         14:26:be:7b:76:1c:eb:84:60:35:1e:ef:e1:b5:20:38:a3:32:
         d9:60:fc:c3:6b:6c:ee:4a:64:1b:36:20:f2:60:5f:e1:2c:92:
         ac:d8:6a:bc:b4:bf:e9:41:03:f5:e6:e4:2b:29:9a:82:77:51:
         53:a5:f2:ec:01:82:78:33:43:53:d7:f6:97:93:cf:c7:79:dd:
         ab:c7:1d:cc:37:1c:aa:30:ea:f9:e3:ac:85:69:67:a3:57:24:
         b2:3d:d4:a6:ec:6c:0b:06:2a:8f:16:bd:7e:4c:32:c4:46:56:
         d6:f7:35:c2:2f:87:03:0f:45:64:3e:14:fe:36:43:51:e5:6f:
         2a:47:52:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2dZMHg7noMjgtDHsWqWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjkxOWEzZmViMGVjOTY2Mjk5ZmYwZmFlOGRlZmNiNDE1
ZTIyZmUwHhcNMjYwNzIzMTIwMTA4WhcNMjYwNzI0MTIwMTA4WjAzMTEwLwYDVQQD
Eyg5MDc3MjZjOWZmOWQyZWU3MmI4ZGYwM2I0YjkyZWY2MjU1NTE0YWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkt3J9RQGI9sYO5EY6oxMlZ8lKbD
8NokvNl5zgy3+1xbFX/5S+/o+V+p4VKkO3HRKkYM11VSjGxExpuTRQryUXuGIZLz
LNQPrea3+EeG+/gAZrgTLEu3Cqb1ZLKZ7PfldEWJBt/UoCJ/45imw2bjNQpquCId
GMYBGgzn8XZLwXUhC3J/HYRhBoZ5U1PfQsvhq9ZqgmTBhTZzUPck9NCHtAVTwaWW
tmdFT6rhj2p/c5Stx2TFq5kAmapYt9FzM8bjdAlCyksWIkpTl2e+JGeVkfmofG6G
7OTlvX1OwcK1pnzBCmy7BMb1VHWWrRpU15oM55N2gSQAWcKNYDxwi0fzMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJB3Jsn/nS7nK43wO0uS72JVUUrGMB8GA1UdIwQY
MBaAFIW5GaP+sOyWYpn/D66N78tBXiL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEt
NDdkYzA4ZDdlM2JhLzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEtNDdkYzA4ZDdlM2Jh
LzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1btEyC8
BbsI38jIk5/Xk2BqNlmiZ71bDFNq5SG3kemCT1kF3WlyPmlZT9h8rg05UOP413le
1DjDkEIx4PJ7mZW7i5gvh1pvJOb6IGz8cWZsLkuoS1xCnzmICYNVWyBdgtKZNyb9
BStPh5U6yz/pZgFk0TO0f7COzV1ZBzMzFCa+e3Yc64RgNR7v4bUgOKMy2WD8w2ts
7kpkGzYg8mBf4SySrNhqvLS/6UED9ebkKymagndRU6Xy7AGCeDNDU9f2l5PPx3nd
q8cdzDccqjDq+eOshWlno1cksj3UpuxsCwYqjxa9fkwyxEZW1vc1wi+HAw9FZD4U
/jZDUeVvKkdSkQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:48 2026 by rpki-client