Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File:                     HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier:          g45RPP4CPF/l5uhzFM73/3ny+5pDnZ6Wl80gC5Ja0FQ=
Subject key identifier:   52:D0:C2:F8:3B:20:54:1A:7F:FD:99:82:30:3F:B8:C1:38:94:87:C9
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer:       /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial:       019F927F3888A21580F42FCD79058CF7A45D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number:          111C
Signing time:             Fri 24 Jul 2026 05:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:38 +0000
Files and hashes:         1: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: F9o69ABjDgsD3itLw+3TZKfiNXZqpEZu4YuRTm98i7Q=)
                          2: XWBsB_cZ5qidLCmlV0HYPquJmRY.roa (hash: K9lGKjaA0sTZUshIhYC2Vc0Nnn9645Zh7HW4fKMC9/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:38:88:a2:15:80:f4:2f:cd:79:05:8c:f7:a4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
        Validity
            Not Before: Jul 24 05:00:38 2026 GMT
            Not After : Jul 25 05:00:38 2026 GMT
        Subject: CN=52d0c2f83b20541a7ffd9982303fb8c1389487c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:4a:85:e5:59:7e:55:b6:54:dc:78:eb:29:
                    65:c4:66:6f:7e:e1:1f:74:ba:b6:2d:a5:fb:97:d8:
                    cb:da:1a:59:55:52:88:5b:36:33:0a:ab:59:ac:90:
                    67:c2:e3:22:87:74:cd:64:1d:dc:d8:ef:14:55:33:
                    64:20:3e:22:da:ff:00:2f:24:52:5b:23:77:77:5a:
                    4a:c7:b5:87:cd:24:86:39:fc:96:b4:11:4f:c6:bc:
                    bc:6d:17:26:ce:11:a0:2a:6f:7c:46:f8:46:84:87:
                    9b:e2:b4:48:49:8b:32:0a:be:87:98:0f:24:4f:99:
                    e2:d6:a5:65:b5:cb:69:08:15:44:15:32:30:1c:78:
                    b7:18:6e:32:d9:b3:a0:a9:0c:d3:10:c6:06:a0:d6:
                    51:5c:e2:92:ea:b4:e7:a5:52:79:9a:4f:86:ca:17:
                    40:6a:86:e5:5f:f8:6d:34:19:3c:a7:20:d8:b9:fb:
                    22:43:4c:bb:cf:be:25:82:d0:11:b5:c4:eb:f8:14:
                    a0:95:cc:95:f1:0d:43:42:85:9b:89:9a:56:e6:6e:
                    29:17:53:d4:50:29:f4:dd:e4:b7:d6:e0:32:41:c4:
                    e0:2a:3e:cd:29:f7:1e:65:fb:2e:37:ba:2b:d9:a7:
                    ff:ef:b7:29:92:c4:b9:1f:a0:66:70:c9:56:79:72:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:C2:F8:3B:20:54:1A:7F:FD:99:82:30:3F:B8:C1:38:94:87:C9
            X509v3 Authority Key Identifier:
                keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:96:96:60:81:b6:d6:e7:a5:5e:ee:91:c5:58:3c:ec:b1:21:
         e9:4e:ca:74:ea:88:ed:0c:fc:b9:52:15:82:f8:aa:91:40:81:
         67:f9:89:39:39:1e:5f:8b:79:95:9f:d2:88:15:57:68:b3:3c:
         ab:0e:1e:12:29:e7:fb:3a:ee:21:2c:f5:67:84:5d:78:ed:43:
         c8:13:65:8d:62:31:f5:d6:d8:c6:0d:96:96:88:ef:1f:38:ae:
         29:51:6b:5f:62:ef:54:e8:a3:f0:85:11:fa:ec:a2:52:b7:e3:
         79:dc:52:ce:aa:36:cd:a1:ae:97:9c:3e:de:dd:f8:20:af:ae:
         8b:fb:c9:0e:ed:1a:3c:d4:49:83:55:4a:39:33:45:ed:24:b4:
         2e:7b:24:74:58:9c:d4:af:53:ea:39:63:07:c3:7a:94:d1:63:
         71:84:7e:15:84:85:89:57:32:44:5c:f1:73:40:83:7e:d3:0d:
         b3:fc:6b:fa:af:b5:89:3d:85:08:bb:38:7b:37:3f:8c:07:a4:
         85:6e:d0:d8:70:f9:26:af:b5:41:ad:0d:0b:fe:58:07:3a:56:
         21:0d:65:55:5e:2a:d0:f5:10:5e:39:77:0b:32:54:ff:ce:a4:
         80:00:34:97:00:fc:2b:0e:06:30:f4:ef:45:98:f6:ec:0b:ed:
         cd:09:85:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfziIohWA9C/NeQWM96RdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODBjNWE3MGEyMzYzODQwNTRmMzU4NDkxNTA5MmM0MTcx
NGVlZDcwHhcNMjYwNzI0MDUwMDM4WhcNMjYwNzI1MDUwMDM4WjAzMTEwLwYDVQQD
Eyg1MmQwYzJmODNiMjA1NDFhN2ZmZDk5ODIzMDNmYjhjMTM4OTQ4N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAildKheVZflW2VNx46yllxGZvfuEf
dLq2LaX7l9jL2hpZVVKIWzYzCqtZrJBnwuMih3TNZB3c2O8UVTNkID4i2v8ALyRS
WyN3d1pKx7WHzSSGOfyWtBFPxry8bRcmzhGgKm98RvhGhIeb4rRISYsyCr6HmA8k
T5ni1qVltctpCBVEFTIwHHi3GG4y2bOgqQzTEMYGoNZRXOKS6rTnpVJ5mk+GyhdA
aoblX/htNBk8pyDYufsiQ0y7z74lgtARtcTr+BSglcyV8Q1DQoWbiZpW5m4pF1PU
UCn03eS31uAyQcTgKj7NKfceZfsuN7or2af/77cpksS5H6BmcMlWeXIC0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLQwvg7IFQaf/2ZgjA/uME4lIfJMB8GA1UdIwQY
MBaAFB6AxacKI2OEBU81hJFQksQXFO7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2Ut
NjYxNjMxYmJhOTUzLzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2UtNjYxNjMxYmJhOTUz
LzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZaWYIG2
1uelXu6RxVg87LEh6U7KdOqI7Qz8uVIVgviqkUCBZ/mJOTkeX4t5lZ/SiBVXaLM8
qw4eEinn+zruISz1Z4RdeO1DyBNljWIx9dbYxg2WlojvHziuKVFrX2LvVOij8IUR
+uyiUrfjedxSzqo2zaGul5w+3t34IK+ui/vJDu0aPNRJg1VKOTNF7SS0LnskdFic
1K9T6jljB8N6lNFjcYR+FYSFiVcyRFzxc0CDftMNs/xr+q+1iT2FCLs4ezc/jAek
hW7Q2HD5Jq+1Qa0NC/5YBzpWIQ1lVV4q0PUQXjl3CzJU/86kgAA0lwD8Kw4GMPTv
RZj27AvtzQmFNg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:52 2026 by rpki-client