Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File:                     hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier:          hA5nkyfp2FwMkQzPtcpqLoackbdcVADa/djjkmVe/pA=
Subject key identifier:   0F:D6:30:88:99:82:6E:14:B7:1B:55:0C:ED:3C:1B:39:CC:90:2A:3C
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       019F91A36E3ABE578B61A7805DCB7D696BA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number:          191F
Signing time:             Fri 24 Jul 2026 01:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:34 +0000
Files and hashes:         1: DRi6gZm2ApJ9zWvuSIffTh_44j0.roa (hash: NDQ8jCUezYMaYn3NL3pjn/AqInQQgH2COtpVWhCKawg=)
                          2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: n1HXoUqbo84VSrK/DlxW3VwuApPxvaag/KsV8hA2qhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:6e:3a:be:57:8b:61:a7:80:5d:cb:7d:69:6b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: Jul 24 01:00:34 2026 GMT
            Not After : Jul 25 01:00:34 2026 GMT
        Subject: CN=0fd6308899826e14b71b550ced3c1b39cc902a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:55:62:50:81:67:1c:ab:9a:44:ad:95:14:
                    8b:7a:75:38:3a:61:1c:6e:43:ee:6f:91:45:16:5f:
                    6c:99:d0:26:71:0e:83:d8:49:ea:49:c1:a5:59:aa:
                    84:75:e9:6e:9d:50:dd:75:b7:dc:a2:df:23:4f:4e:
                    6d:f3:92:7c:2a:07:2c:d9:26:72:4c:be:1b:4a:97:
                    de:00:f8:42:e9:07:49:c0:a6:73:73:b2:7f:1a:3a:
                    22:12:be:6d:70:a9:d4:7f:dd:6e:d9:eb:e9:2a:c1:
                    b8:a4:84:b8:d0:70:8c:57:c3:b7:3e:2c:eb:6b:c6:
                    ef:b7:2d:ba:1a:4c:da:21:d0:2e:4e:34:69:07:cb:
                    52:b6:f4:e6:f6:76:5a:52:f8:8a:c8:b7:ac:7a:8e:
                    a5:fe:a1:16:ff:b9:35:40:cd:58:c8:f0:e8:04:44:
                    6e:9c:8a:18:08:4e:66:4b:4e:2e:22:90:39:63:ca:
                    b1:d7:d0:85:3a:27:9b:94:17:fc:93:7c:88:b4:f6:
                    58:55:e7:9a:0f:13:ef:ad:8d:78:08:38:89:12:b9:
                    90:6f:dc:f3:d2:db:cf:4a:55:f2:74:0d:4b:98:44:
                    8f:c4:bc:e3:69:cf:1c:c3:2c:52:bd:84:69:ac:40:
                    f9:75:50:eb:d7:4d:e2:d3:5c:59:38:a5:cf:71:4f:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D6:30:88:99:82:6E:14:B7:1B:55:0C:ED:3C:1B:39:CC:90:2A:3C
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:1d:8c:86:c5:82:fa:51:d3:50:51:71:35:86:01:28:d4:
         2c:8f:78:06:be:e1:24:f0:38:da:ee:27:01:fd:4c:85:bc:d6:
         31:ff:e3:55:11:04:b2:26:64:41:c1:46:df:73:da:67:47:1c:
         41:5b:f1:7d:63:b6:26:08:81:a0:8c:f5:ea:6e:96:c3:83:73:
         b1:38:eb:f9:30:c3:ad:ea:05:a7:bd:ea:f1:28:0d:e7:bf:48:
         56:7f:5e:a1:55:0b:44:85:64:21:e6:e5:ce:37:1e:92:68:e0:
         06:76:74:82:76:d5:9a:26:e4:61:d0:0e:2c:0a:6c:17:be:0e:
         cf:03:7a:17:56:0b:86:ce:d4:0c:af:3f:72:5e:0b:08:97:b3:
         0c:f7:98:20:1f:13:e8:96:6a:1e:cf:30:06:f6:1f:65:01:6d:
         e2:43:59:fa:74:f5:e7:7d:cb:a9:dc:0d:3c:68:c8:b6:18:e2:
         23:2b:64:16:52:85:33:d9:c6:0a:fe:28:0e:f4:4e:cf:78:3e:
         00:0a:76:ad:f5:d9:f5:b0:2a:15:db:3e:f4:09:b2:84:91:c0:
         c4:7a:21:bd:05:8a:9d:a1:a3:28:56:ee:2f:a3:28:d8:8b:2e:
         fc:d3:bd:b6:78:fd:dd:43:6e:d3:91:ee:47:79:5e:f9:92:04:
         c6:c1:12:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:18:42 2026 by rpki-client