Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          vSqFG4sDnbx/wmHaS1zeGrg44uWb9UbSiOFcrd4LZio=
Subject key identifier:   8B:51:BE:2B:45:16:8E:18:3B:48:F7:4A:6B:08:56:AC:DA:54:15:BD
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       019F92B62DBAA6CAAA107BD8CC8916E3FF4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 06:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:40 +0000
Files and hashes:         1: 3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa (hash: iEhzHIRnRxzpQUWkwXpH8+wLuqzBi2WgNixBv2cWr5c=)
                          2: 4dtT2zpOkX0M7815CYFyhrrEj7w.roa (hash: pUvuTTzJiPGDI0tk56sxaLiwIp0+DLwoX1SaGdq6b1Q=)
                          3: DPEXaJsdpwunEHWISAhP8hFXOUI.roa (hash: +8xOQY/MLqFDz3F9RapHgwM88JkcxWRhi/gr4+Z5Fes=)
                          4: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: JPcnOC8d8PG+DaX2aFeqTJJt4wbG2ngHMRV9262ifJY=)
                          5: nJNnJik0D06rHfwp0JH-RW1i8d4.roa (hash: PZkJCh1a5eNPEm8fstSBrrfjyNUedpDjFwbI97jj8c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:2d:ba:a6:ca:aa:10:7b:d8:cc:89:16:e3:ff:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Jul 24 06:00:40 2026 GMT
            Not After : Jul 25 06:00:40 2026 GMT
        Subject: CN=8b51be2b45168e183b48f74a6b0856acda5415bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:53:33:5b:d5:d8:3f:56:e2:b3:d8:c6:49:
                    e5:d6:c0:56:75:e8:6a:18:ba:f7:6d:45:27:2a:b4:
                    51:4c:66:fb:24:25:2d:37:d1:a3:5e:14:3f:66:7c:
                    92:2e:00:d0:f0:f3:13:45:a5:f4:e2:b7:1e:b6:c3:
                    cf:86:0e:de:33:bf:0f:f0:05:7c:32:1a:71:83:f4:
                    7a:c1:b0:e4:6f:44:06:44:04:83:b3:a7:d2:a5:d0:
                    9e:e8:e9:93:f9:b9:2d:5f:c6:1b:e7:9c:a5:c0:4e:
                    a2:ce:a2:12:a3:76:4a:f3:cd:47:9c:97:49:1e:31:
                    e2:0c:45:47:c0:94:b4:32:6f:88:5d:de:f0:2a:d4:
                    25:40:ac:60:96:2b:e4:cd:ba:7c:f1:97:56:e6:3f:
                    34:87:ab:26:d0:3c:7c:fa:29:e2:9c:4d:33:4a:3e:
                    a2:bf:9e:05:6a:5e:1a:07:5c:f8:90:24:92:9a:56:
                    f1:83:8b:40:54:37:16:05:80:99:44:0c:37:fe:9e:
                    d4:b5:e2:5e:85:0d:49:d1:5f:9a:72:36:fe:5c:f7:
                    f5:0f:21:5c:26:49:bc:6e:ec:8d:0a:27:cd:a1:1c:
                    df:2a:ba:56:10:54:e4:be:4e:2f:cb:6f:01:1e:af:
                    d2:d9:0a:07:77:8f:86:7c:d2:9c:7a:de:d4:23:30:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:51:BE:2B:45:16:8E:18:3B:48:F7:4A:6B:08:56:AC:DA:54:15:BD
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b1:0a:db:f9:9e:bc:7f:11:77:f4:5d:95:51:ee:dc:b3:e2:
         29:e6:d2:88:1c:d1:4d:ad:fe:a7:f8:1a:c3:e0:bc:11:40:77:
         55:8b:cd:37:e6:9f:2e:ea:1e:08:a6:e7:cc:12:9d:c3:85:bf:
         72:22:51:d8:88:97:13:07:18:c2:fd:bf:53:09:a1:64:7f:55:
         4e:9f:ee:36:0a:89:68:4d:0c:4b:c5:0e:3f:0e:83:76:2e:be:
         12:e4:4e:6d:6b:0e:ea:fc:28:4c:0e:d3:78:52:f9:78:d8:5f:
         3c:55:a9:2a:21:06:16:17:c6:91:d8:c8:a5:1c:ed:ae:6c:84:
         7e:1b:e6:41:93:51:d6:6f:7b:8c:9c:27:3e:31:8d:b7:ba:19:
         44:4c:fa:b1:7f:44:1e:6e:dc:0e:c5:1b:f9:ae:a4:3b:77:d8:
         cc:37:1d:79:7b:6e:14:1d:bd:36:2d:1c:51:6e:cd:4e:7f:3a:
         38:2b:c4:00:25:48:e2:2a:da:75:f6:de:24:aa:d7:41:69:71:
         15:7d:6d:a8:1e:d6:a3:71:3d:78:a4:b2:ca:43:29:01:8f:46:
         09:a0:b1:72:f9:f4:aa:1e:e7:81:87:80:60:eb:29:79:87:a1:
         94:4c:f1:49:7a:16:a2:42:03:f2:29:eb:25:d9:ae:b1:2b:9c:
         88:b9:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:31 2026 by rpki-client