Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File:                     HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier:          cIFfLhRkuxFNpytISQRjic2WFFgoMEHwewsreVd8kQA=
Subject key identifier:   8B:F1:16:6D:11:34:6B:27:DF:25:03:42:37:A1:8A:FE:E1:19:4B:21
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer:       /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial:       019F92B5F8B6D0917C47A55D546BD7BD83C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 06:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:26 +0000
Files and hashes:         1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: VrzDl31Y7W/CVOcHEJIt9efJYD8OXHGvn6WwRyyg5ik=)
                          2: w0HfD9OyluQqly0Onm0X_I_L5yk.roa (hash: Z0gnGoagQr+uA1M5JDoWrnZSUOuqJJgP2N6rVdd6JcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:f8:b6:d0:91:7c:47:a5:5d:54:6b:d7:bd:83:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
        Validity
            Not Before: Jul 24 06:00:26 2026 GMT
            Not After : Jul 25 06:00:26 2026 GMT
        Subject: CN=8bf1166d11346b27df25034237a18afee1194b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:9e:08:21:2e:22:1b:51:e9:42:ea:af:0f:
                    36:e9:da:5f:2a:e2:8d:9a:3c:6b:25:c0:6d:07:f2:
                    86:60:72:06:6a:df:31:b0:46:65:be:63:b5:be:41:
                    6d:df:81:2d:4c:43:1c:66:03:bc:4c:22:ea:59:e5:
                    08:47:a9:b4:65:3d:9d:d3:17:51:6f:0d:94:df:db:
                    68:01:e0:06:6f:8e:14:1b:37:e6:8d:79:eb:65:93:
                    d7:9c:7b:11:ac:28:7c:c0:4d:bf:c4:9d:65:18:bb:
                    1e:46:08:b8:82:1d:b0:36:55:35:50:e1:05:7d:3e:
                    a9:c2:33:be:af:01:0d:6a:4d:7e:c3:45:1f:57:98:
                    1c:2b:84:f5:39:27:2e:1a:81:14:d8:7c:12:d3:0f:
                    9b:d3:59:84:3c:3a:a3:40:4b:42:b5:b6:68:80:1b:
                    99:3e:49:ce:ff:8a:8c:d2:8b:65:28:f1:40:3f:78:
                    7b:5f:17:09:35:9b:91:75:4a:0a:ab:74:cb:e5:2d:
                    71:45:26:9d:10:e3:a5:52:19:08:84:88:81:00:16:
                    a2:87:43:b2:bb:04:6d:f9:53:ad:1f:b9:b5:1a:80:
                    4f:21:ba:de:5d:6c:36:0a:02:89:45:0d:3a:10:b2:
                    2d:1b:24:e4:fd:7e:0f:88:53:fa:31:d5:22:6b:e2:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F1:16:6D:11:34:6B:27:DF:25:03:42:37:A1:8A:FE:E1:19:4B:21
            X509v3 Authority Key Identifier:
                keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:30:d2:66:23:ae:88:18:b2:cb:ca:0a:df:5d:18:71:67:
         23:d7:f9:51:30:9e:7f:34:94:f7:76:78:08:09:05:ac:ce:43:
         04:d1:af:d3:f8:f8:8c:1d:99:5f:9a:82:dc:a4:2f:2a:29:6d:
         9f:d1:14:84:f0:ab:f4:6b:87:a9:d2:d5:25:b0:11:3d:4d:96:
         b6:8a:42:1d:37:e5:4f:2d:3c:e8:7f:a6:10:3e:66:d9:cb:70:
         a3:ad:0f:b3:fa:6b:e7:33:b1:74:02:9c:9b:82:c3:a3:a2:5e:
         ca:99:c8:c7:d8:d4:a9:81:3a:46:5f:63:3e:b5:b0:5f:1d:c2:
         61:4a:6a:3f:4a:82:f0:af:a7:a1:5d:cc:92:76:0a:7a:da:c8:
         52:0b:0b:c9:c3:59:d4:22:48:60:bf:87:7f:de:3e:a3:68:a5:
         6d:ef:b6:73:c0:3b:da:24:27:cc:a6:b0:ba:8d:b3:c3:45:b0:
         b5:8b:7c:25:6b:41:c5:f7:ab:bb:3a:37:22:21:6c:dd:2e:bf:
         60:a0:3d:73:8f:72:1f:3b:d2:8f:06:08:11:50:22:23:29:d7:
         70:e4:3e:c5:3a:de:ab:e1:4d:55:de:df:c4:1d:04:1d:55:9b:
         f7:da:61:43:2e:fc:8e:e4:8d:b2:5e:9d:21:07:44:ad:2c:ed:
         2f:cd:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:03 2026 by rpki-client