Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File:                     HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier:          eKPmcJ8sPH6KQ7vUupl+H41p9RL0f9PV32MFY1Y9jDU=
Subject key identifier:   99:4E:EA:0D:05:8C:BE:16:48:1D:96:8D:C2:78:FC:00:03:3C:76:FF
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer:       /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial:       019F954919EC31DB102F77C1C337E6B4C1F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number:          10FF
Signing time:             Fri 24 Jul 2026 18:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 18:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 18:00:23 +0000
Files and hashes:         1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: s0MbRU15ysfLwoRYsAoFUe5eWGBiy++arCzt2vu0Hfc=)
                          2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:19:ec:31:db:10:2f:77:c1:c3:37:e6:b4:c1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
        Validity
            Not Before: Jul 24 18:00:23 2026 GMT
            Not After : Jul 25 18:00:23 2026 GMT
        Subject: CN=994eea0d058cbe16481d968dc278fc00033c76ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9a:40:14:26:fe:cf:24:54:0b:c9:cf:27:56:
                    87:bb:a0:d4:7f:41:ee:a8:d1:d8:31:29:d6:d2:8e:
                    b3:97:3c:e7:34:55:90:d7:c8:64:4b:3b:9d:1b:fe:
                    9d:20:70:a9:be:c1:ef:1f:40:57:3d:c4:70:2b:0c:
                    60:5b:43:f2:eb:88:32:55:d2:44:46:85:57:d9:f9:
                    87:7f:86:60:cc:96:df:3a:03:07:98:31:60:04:ee:
                    9a:aa:45:7b:bd:bb:17:e9:f5:e5:d1:47:79:30:55:
                    e4:d7:9d:ca:5b:08:99:d6:3a:85:50:d9:7c:0d:fa:
                    fe:48:5b:5e:35:38:55:0d:37:99:c1:ad:e0:e0:eb:
                    5d:3f:f6:b0:73:a4:07:85:bd:a0:d4:50:7c:58:e3:
                    b8:76:c8:eb:e1:84:61:75:70:88:db:d3:eb:c0:f4:
                    aa:33:dc:b4:dc:3d:14:af:03:a3:f6:0f:69:32:a1:
                    c2:4e:08:6b:96:be:5d:99:71:e3:50:82:b8:f1:17:
                    2f:6e:77:b8:b5:f8:fb:10:c6:f5:e7:ca:35:37:02:
                    d1:57:4f:4b:e6:8d:8d:0d:76:7e:9c:b3:0d:80:86:
                    bf:7f:67:0c:76:e1:06:b3:93:ed:b7:1e:b5:bc:da:
                    81:94:04:c7:6d:b5:4c:53:84:43:ae:9a:c4:6e:aa:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4E:EA:0D:05:8C:BE:16:48:1D:96:8D:C2:78:FC:00:03:3C:76:FF
            X509v3 Authority Key Identifier:
                keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2a:c4:64:5e:e2:54:8a:05:26:06:41:72:42:32:4f:a2:c7:
         3f:bc:c5:b9:b5:5c:1c:8c:43:99:65:c8:be:43:d7:11:a1:d8:
         b4:55:c5:dd:1f:fe:bf:99:a3:12:4d:01:1b:64:d9:8b:bf:96:
         87:a7:17:ec:ae:36:64:90:14:32:d7:54:04:6e:c6:b6:59:d9:
         cc:3e:b7:a6:ce:64:e7:e2:e0:62:fb:c9:28:60:b2:e9:e8:12:
         f0:6f:8d:01:e0:ae:44:ca:8a:34:d8:36:ad:1c:66:a0:09:8d:
         d5:3f:f2:c1:df:6b:0c:be:b6:49:d3:e1:27:f7:bc:ac:36:fc:
         61:34:88:3c:35:ca:44:d7:6d:81:fd:23:d6:56:00:0d:03:bb:
         a4:d1:77:40:96:6c:30:9c:3d:f0:58:05:54:5b:4a:00:69:30:
         40:b1:84:ce:9c:ef:79:45:9f:98:9b:46:fe:be:04:70:b3:37:
         cb:a7:eb:81:30:ae:a7:13:2a:60:bb:9e:a9:21:b4:24:7b:31:
         44:4a:89:1d:05:26:95:b6:1d:a3:42:ec:f7:2b:19:be:2e:b4:
         ef:50:c7:46:cb:d1:6e:ec:fd:07:ab:37:3f:d3:bc:6f:a7:8d:
         0c:3d:28:ae:12:bf:88:06:d2:9e:23:47:78:a3:d0:af:19:e6:
         34:8a:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:02 2026 by rpki-client