Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File:                     Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier:          u52QOIEAx7gX23+zSrziPouiPSt533LuR8sZQLC6i3Y=
Subject key identifier:   3C:47:1A:2E:35:D9:8E:21:82:90:DC:DD:FE:F6:95:C5:B0:21:82:7B
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       019F91DAFDE8789E081DC59A9D2E96E4BB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number:          1424
Signing time:             Fri 24 Jul 2026 02:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:15 +0000
Files and hashes:         1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
                          2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
                          3: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
                          4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
                          5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: IUExfA4GPZGeOVPM8DzHNE8nVI1NAHTAMavzUnxUAGU=)
                          6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=)
                          7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
                          8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
                          9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
                          10: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
                          11: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
                          12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
                          13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
                          14: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
                          15: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
                          16: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=)
                          17: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
                          18: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:fd:e8:78:9e:08:1d:c5:9a:9d:2e:96:e4:bb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Jul 24 02:01:15 2026 GMT
            Not After : Jul 25 02:01:15 2026 GMT
        Subject: CN=3c471a2e35d98e218290dcddfef695c5b021827b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:23:bb:b3:6a:59:00:b7:c2:c5:35:45:09:
                    c6:0e:95:97:57:11:ff:2a:5c:13:84:0a:88:d5:68:
                    69:f4:28:e1:f6:85:e9:33:15:5a:e2:59:8a:65:84:
                    14:de:c5:41:05:89:1f:1d:3f:47:a3:76:5c:20:bc:
                    5e:1c:c9:6f:cb:7f:82:bb:16:1e:38:fb:b5:b1:f0:
                    49:38:33:98:5c:6c:f7:05:88:1a:a6:59:56:2a:b9:
                    88:b5:56:25:57:f8:73:82:40:00:7f:e5:a8:c0:ea:
                    55:9e:59:42:15:13:bb:ba:8a:aa:82:89:e0:9a:53:
                    d6:ba:e6:42:39:dc:74:a6:e6:13:a9:ba:62:ad:8e:
                    98:25:02:bf:d0:f6:72:24:0f:2d:e2:b3:ad:8b:58:
                    ec:6a:f6:10:50:f7:3a:72:d9:67:af:89:6b:f0:95:
                    fd:d1:83:fe:07:8a:57:d2:f3:e0:c8:ee:b9:8b:1c:
                    49:67:87:33:03:ac:52:8f:00:79:55:cb:d4:e8:68:
                    a0:93:a1:b9:68:c3:86:46:1d:75:bf:c2:e4:f9:9f:
                    d0:2f:31:b7:06:a5:29:61:b2:b4:1e:0d:0b:21:bc:
                    62:45:80:42:70:eb:47:e9:9a:40:66:1e:63:00:fb:
                    18:00:45:02:11:73:be:d8:38:7b:fa:aa:42:61:b2:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:47:1A:2E:35:D9:8E:21:82:90:DC:DD:FE:F6:95:C5:B0:21:82:7B
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:41:97:60:f5:61:1a:3c:f4:81:72:0b:ec:4e:d6:89:f2:10:
         3a:d4:ff:c8:13:1c:f4:8a:b0:24:65:56:bd:e6:6b:8f:5b:e2:
         1f:a8:bd:38:54:47:8d:7b:31:5d:c8:41:79:23:e8:c5:ec:ee:
         09:a8:12:99:73:5c:0c:93:d1:60:02:15:0b:2b:72:06:aa:e0:
         cf:16:68:49:8a:16:e8:eb:67:2b:c9:c9:26:26:ed:13:b8:7c:
         89:ec:b6:98:a0:64:46:e4:0f:47:ec:0d:81:e7:98:7b:14:c4:
         ad:af:8d:cb:7b:8f:d4:34:bb:93:ab:52:d3:6c:bc:c7:b7:65:
         24:05:ed:d1:1e:c0:4f:98:59:9d:e3:a8:3c:b3:bb:b8:0d:d0:
         a0:05:18:4c:4b:90:f7:de:a4:38:ce:aa:8c:b0:04:10:04:65:
         a8:05:f4:63:c4:7d:c6:bc:c0:57:a6:ea:c8:71:52:1a:4f:73:
         12:87:eb:fc:b1:f8:db:7e:4e:fb:23:ec:c2:e0:94:6d:d5:b1:
         ea:0b:4e:56:8e:c6:44:9c:b8:76:09:da:d7:c1:1f:1a:02:bb:
         69:ae:5f:14:ff:2a:3c:3d:42:d8:bc:7a:71:d6:2a:b1:18:6e:
         6f:27:d5:5e:c8:28:4e:03:85:38:e7:82:89:2a:81:8f:fc:b4:
         cb:7d:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:02 2026 by rpki-client