Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File:                     hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier:          BKQBnl0eGRXh0pvwYjf8gnex4lbbUtw5hwRobWNZ+fY=
Subject key identifier:   36:C5:F4:A9:23:FD:6C:AC:53:D5:AA:A2:50:1E:D8:C7:23:CB:4B:3A
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       019F92EE199F9DCEB02453525F16594EF4EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 07:01:45 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:45 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:45 +0000
Files and hashes:         1: 6-MYWUgNN_QLhajw01TPQypu9qo.roa (hash: u38LNGCNm7hapDrGswDbeJazlaHgAyILiY9j6QwpBsg=)
                          2: E9zZAnLobJdxCJ_CMObNo6B0tg0.roa (hash: gKx/4RJ8SdZlVgi0Sh6XpvjZo+kkGJvfp88hpXTMS3s=)
                          3: Gj_KMBJbJSrcc2TVvL9u56hzgdM.roa (hash: otqXS+JeceT68wkSJPWrG1/A/vyc30taCbvfR1CTCrc=)
                          4: Is4ZsOkA4ognMGIQHzhjm6hHarA.roa (hash: EQqUs3Tbbc3EDtczOgdmk5Vx/6Xxwbf61H1i0BVYet0=)
                          5: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: VzbIiS7l1n77z5N2qH66D91o2+J+FUdDP5COBjM3eHs=)
                          6: piqonsXFBrG6rXRd3eemw24RFpc.roa (hash: nKq7t9jFZ72mSjyumQVPsGsNkyCxwxThmoOAWXTbJcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ee:19:9f:9d:ce:b0:24:53:52:5f:16:59:4e:f4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Jul 24 07:01:45 2026 GMT
            Not After : Jul 25 07:01:45 2026 GMT
        Subject: CN=36c5f4a923fd6cac53d5aaa2501ed8c723cb4b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:a0:29:eb:12:f3:94:f8:6f:1a:83:9d:a6:
                    04:61:35:c8:f2:1b:d7:38:db:51:dd:b4:c5:61:cb:
                    2c:37:85:26:70:b4:6b:e9:26:ed:dd:52:ce:7f:a6:
                    fc:54:34:8f:3d:40:89:23:90:ed:e7:3c:1f:8c:4b:
                    01:67:84:33:a8:ee:e5:c3:9c:ac:f1:95:0a:d8:fd:
                    45:e9:a7:2f:b2:bf:7e:1a:af:dc:73:39:df:26:74:
                    5b:de:34:bb:98:26:04:16:2c:77:3b:8e:32:72:ae:
                    a5:d5:f1:5e:0b:61:a4:43:7a:59:de:6c:c3:c3:6a:
                    30:0f:7d:90:19:3a:0c:81:d6:e9:3b:0f:88:66:d8:
                    d1:0f:dd:8d:ad:cb:f0:97:6d:68:93:f3:6d:a0:a7:
                    1f:f0:9b:fb:3c:ca:ea:27:19:c1:c6:f0:4f:77:32:
                    76:24:9a:20:09:81:ec:dd:73:55:e3:e4:e2:cf:fa:
                    4d:ba:99:f7:fc:78:e4:74:20:1d:25:29:ef:97:e5:
                    5b:35:73:6b:a4:e7:b7:78:39:1c:c0:05:ae:c0:b8:
                    63:88:31:38:7d:e7:a1:ba:51:d9:74:f2:1a:cf:76:
                    8c:c3:09:c3:a6:a4:a7:86:92:df:4f:d6:dc:47:6b:
                    2d:8c:14:1a:c3:a8:03:1f:b3:73:37:f2:ad:5e:fd:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C5:F4:A9:23:FD:6C:AC:53:D5:AA:A2:50:1E:D8:C7:23:CB:4B:3A
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:4f:da:cf:6e:31:a1:14:21:87:a2:ae:a7:db:26:c9:c5:
         df:f2:c1:e6:16:aa:17:76:85:68:07:b4:e8:44:eb:9c:8c:f0:
         97:48:78:e1:ac:04:1d:34:0c:68:bb:90:e0:59:a4:07:f3:7b:
         04:82:83:cb:a7:66:48:7d:eb:c1:ff:9f:ca:6e:89:df:33:fb:
         79:ec:5d:72:87:9a:94:46:d2:d2:a3:35:1a:aa:7e:05:29:7e:
         55:c2:45:ce:7f:37:1b:9a:da:d1:c4:61:1e:32:00:38:8f:0d:
         22:75:2f:f3:f5:1c:ac:8c:2a:9c:20:04:4f:d8:ff:ca:00:c8:
         b2:23:bc:7d:f9:4c:67:ed:37:6b:9a:5f:42:f7:23:b1:e5:fe:
         2b:2c:7e:30:cf:0b:5d:96:46:4a:5e:5b:b3:de:10:35:f7:60:
         0d:67:3e:d8:77:2e:c8:f2:89:cd:d5:c1:50:80:23:8a:e3:1f:
         b6:d7:d6:78:47:2a:4c:70:40:8e:63:28:46:0b:38:48:f2:55:
         11:2c:7d:61:91:33:59:92:2f:85:f4:7a:83:cc:58:93:d3:07:
         29:ff:26:b7:a3:a3:94:e4:ab:cc:d5:e9:8c:65:7a:17:90:54:
         ea:db:6d:ff:53:12:15:07:d4:0b:2d:4e:50:e4:b0:d6:46:1d:
         24:31:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:54 2026 by rpki-client