Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File:                     HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier:          CoqpF73wiO4x5pPZhzWXZEOLCNwmjByfRbqTueYxI88=
Subject key identifier:   78:23:38:52:B2:51:37:E0:F4:33:6B:AF:18:6D:1A:E0:98:40:7D:24
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer:       /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial:       019F92B60AD7B8FEB6538FCF8794E7237732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number:          0612
Signing time:             Fri 24 Jul 2026 06:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:31 +0000
Files and hashes:         1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: rY3qp3VUgi92iaD1tHDQ7baVtvkZLofHB9fJJOo/UmI=)
                          2: WU3PqHe7IArJ57SO8_-72jZ4vgQ.roa (hash: kyYbbInYeN/I+hJfjzPW449FfnhjaOMYgCQZcySE4CI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:0a:d7:b8:fe:b6:53:8f:cf:87:94:e7:23:77:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
        Validity
            Not Before: Jul 24 06:00:31 2026 GMT
            Not After : Jul 25 06:00:31 2026 GMT
        Subject: CN=78233852b25137e0f4336baf186d1ae098407d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:d6:f1:c5:0e:57:a9:0a:0b:80:fd:f3:85:
                    d7:7f:1a:9a:dc:98:c7:9c:fb:f3:49:2f:e4:4a:2b:
                    e9:2c:b3:07:c3:40:cb:e5:48:64:6a:4c:c6:52:8b:
                    d0:8a:a1:f9:05:b6:3c:41:bc:74:b3:0c:b0:13:de:
                    19:11:4e:1e:aa:a6:73:45:29:2c:b5:32:d5:a8:3b:
                    22:a9:1d:c9:66:a6:58:5c:2a:da:bb:75:9c:f1:54:
                    2e:35:2e:e0:ed:ff:04:fe:04:65:b5:21:b4:4e:81:
                    0f:ab:4a:66:96:92:51:3d:c5:85:96:b2:b7:7c:a1:
                    4e:f8:af:9f:20:85:46:04:8e:b2:60:7f:ed:84:08:
                    1a:42:eb:c2:6b:de:56:1e:8c:4d:a3:b3:00:bf:c2:
                    4c:2d:84:00:1a:9b:d8:33:4a:9a:25:68:5f:5d:8b:
                    19:af:31:fe:a9:d3:f7:e7:ce:39:f8:c8:e2:f0:2c:
                    5d:6e:4b:40:94:95:35:98:a9:de:27:45:f3:b6:26:
                    3d:2e:5b:c9:50:c7:34:fd:6d:bb:3e:fd:fe:ff:4b:
                    dd:6a:bd:99:40:7a:69:ab:57:7b:02:65:dc:b7:00:
                    91:40:37:44:61:7b:c8:86:be:ff:e7:21:ee:1d:1e:
                    83:6e:19:3b:4d:da:68:64:9a:bc:8a:73:59:0e:00:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:23:38:52:B2:51:37:E0:F4:33:6B:AF:18:6D:1A:E0:98:40:7D:24
            X509v3 Authority Key Identifier:
                keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9f:b2:fd:04:b4:41:b7:58:94:9a:9f:08:0b:93:73:dd:b4:
         3d:11:aa:9c:29:5e:da:c0:af:f4:af:cb:01:02:30:a3:43:78:
         2b:40:31:db:38:39:57:e7:bc:98:a0:e7:ed:93:4c:85:92:6c:
         10:5e:bd:d9:62:59:e0:b3:04:93:6e:96:89:a5:36:a4:41:0b:
         5c:ec:2c:da:d8:69:02:0f:c5:84:b5:74:60:af:b2:8e:42:45:
         59:f4:22:3a:6d:16:46:71:58:02:43:76:96:17:5f:f6:6d:d9:
         61:17:91:cf:79:88:c8:cb:18:3a:81:f2:b3:8c:d4:db:12:22:
         93:ee:b4:39:33:e3:a5:bc:df:87:f9:57:93:fe:af:f4:71:c5:
         a3:bd:91:31:e0:80:7a:ff:59:d2:7f:4d:b0:52:28:04:93:df:
         18:7e:40:2c:6e:20:80:f8:46:94:16:77:5b:f5:74:99:0f:ed:
         de:5a:98:b7:43:42:2b:2c:80:94:a6:38:52:34:82:ff:9b:d3:
         c5:0c:ea:94:8d:4a:aa:a2:59:f9:5f:f4:68:e6:02:f7:cc:33:
         42:4d:49:58:99:44:c7:05:b8:a2:b3:6f:ad:bb:56:51:73:5f:
         08:ff:ed:6a:ae:1b:73:6d:bb:6d:6f:38:b1:56:ff:9a:8d:d1:
         88:29:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:37 2026 by rpki-client