Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File:                     HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier:          ecnU8sQVbb3hNqKEdsevD2ts4otrQ0fxzctMXt04Qwg=
Subject key identifier:   9F:07:30:04:C8:A0:17:DA:38:67:20:43:59:68:3C:F3:05:1A:85:B3
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer:       /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial:       019F92B66A60826E8CEDF2F4ACA481F97B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 06:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:55 +0000
Files and hashes:         1: GzWcoTtAUqi5IHJ21cRxIUTLGpc.roa (hash: AGr5HxX1J7ElW4g5zJTR1ojXT/07CVW4IMiNxRldrY4=)
                          2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: /ibbiOk1uRpZyy1SxzcKnFxaOswvnou7cFmfQIhBCJU=)
                          3: LcM90VNnvvV-Cm1OaIsrEHhQa8g.roa (hash: xXnlrcw8FbAmWQ6ks2MamfhjxI8QiO91NWqPRN/S9Bw=)
                          4: eHc6pv_nsOEvOj1b6H0UUy3Hz5g.roa (hash: 0jFiwjosF+a+C3GZzSfiQX91cGdMln4C3x+2DMdzk0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:6a:60:82:6e:8c:ed:f2:f4:ac:a4:81:f9:7b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
        Validity
            Not Before: Jul 24 06:00:55 2026 GMT
            Not After : Jul 25 06:00:55 2026 GMT
        Subject: CN=9f073004c8a017da3867204359683cf3051a85b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:d9:7c:69:a9:38:56:08:b9:ef:b2:20:85:
                    ed:e3:b9:80:02:9f:e3:f2:c1:5e:28:40:0c:bf:07:
                    c4:82:9a:e7:c8:6f:46:30:18:b6:1d:6d:08:2d:cd:
                    d2:8b:53:44:fa:9d:c7:e2:43:f9:fb:0c:49:98:3c:
                    13:ab:79:ac:33:a4:73:4a:78:27:42:18:11:bf:83:
                    d9:8e:2f:45:ce:05:07:7b:e7:93:b1:16:b2:20:f1:
                    2d:ee:0a:66:54:3f:a7:55:5c:22:3b:28:30:32:b7:
                    05:a0:48:01:10:7f:49:8d:d0:55:f3:07:c5:f7:5d:
                    d1:f9:a4:e5:08:fa:54:cb:9a:ee:4a:e4:3e:f3:d0:
                    ae:48:cb:59:b1:8c:98:92:e3:a1:ae:f6:40:17:28:
                    59:97:c8:7c:53:ff:1c:8d:e7:9e:a3:a4:98:0a:4e:
                    54:ab:72:12:a7:37:1d:13:0c:66:af:39:61:ea:d7:
                    fd:67:e6:d2:28:9b:ab:b8:ee:a8:b8:bb:5b:d6:50:
                    69:9d:9e:d3:97:d1:3f:33:93:26:6d:58:c3:b0:12:
                    77:be:b1:ba:22:89:54:bf:c7:cd:74:3f:6c:1d:1b:
                    d9:9d:3e:5e:a1:19:ab:29:3c:3a:f3:a8:5b:77:e3:
                    ca:0e:ff:22:25:e4:79:56:49:c7:a0:13:5e:1b:2a:
                    c4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:07:30:04:C8:A0:17:DA:38:67:20:43:59:68:3C:F3:05:1A:85:B3
            X509v3 Authority Key Identifier:
                keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:9a:da:75:18:22:76:6d:5a:fc:2f:c8:74:11:12:e4:29:
         58:c8:5f:78:bf:8a:e6:be:12:86:f0:0e:5b:09:a9:5d:9a:ab:
         b4:5d:ac:52:72:a7:20:ad:ef:7f:15:6a:b8:3f:e7:96:8d:46:
         8c:3c:c5:36:1a:fb:03:c8:26:09:b5:6f:fb:f7:f8:d8:fe:5c:
         0f:a4:22:2c:8b:89:2b:03:54:0d:12:c6:67:9a:60:6e:06:a2:
         f4:aa:da:c1:82:99:d7:de:54:7f:1b:e6:9d:cc:45:58:2b:69:
         1a:78:ee:83:99:c1:b5:99:9b:4a:7f:22:32:e2:f3:25:3d:25:
         35:dc:8c:d2:7f:f0:3c:10:bb:bb:5b:a0:ca:38:e5:8a:22:62:
         73:dc:29:d4:45:78:78:f4:88:c7:31:e6:dc:98:76:66:b8:57:
         d6:12:06:61:90:e4:58:9f:9f:a2:f8:9a:d9:84:c1:50:3a:c6:
         a8:5f:e0:3e:bd:d9:af:c6:fc:a8:97:34:a3:a4:07:46:eb:d7:
         e6:85:71:26:d6:b3:99:cc:2c:13:a3:0c:a2:e7:8d:97:a1:91:
         53:22:e3:d1:e0:dc:c4:4c:1a:b0:ce:89:b9:a1:50:a8:29:92:
         1c:21:ac:f4:b5:f3:01:39:2c:c5:86:74:be:d0:af:af:a4:59:
         53:89:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:08 2026 by rpki-client