Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File:                     1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier:          4sWvfNR1oaKzCAwUPSiqgoD6SFcbpFZSW/6ZPfy3n1Y=
Subject key identifier:   39:0A:06:22:85:BF:95:28:45:09:AA:AC:13:FE:80:97:BA:A7:CC:F6
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer:       /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial:       019F90C8014ED651C1CD34137FEEF0DA8413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number:          0AF0
Signing time:             Thu 23 Jul 2026 21:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:54 +0000
Files and hashes:         1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: VYfuk4tiBpesKE7+4p3G2nXtJv2zb+JO2xJaWQUtxOM=)
                          2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
                          3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
                          4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:01:4e:d6:51:c1:cd:34:13:7f:ee:f0:da:84:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
        Validity
            Not Before: Jul 23 21:00:54 2026 GMT
            Not After : Jul 24 21:00:54 2026 GMT
        Subject: CN=390a062285bf95284509aaac13fe8097baa7ccf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:4c:ce:0e:18:f6:89:9e:b0:6d:31:c0:3f:
                    b8:dc:de:d2:7b:0c:09:5b:2d:81:58:ee:7a:b6:e8:
                    4f:d1:ff:7d:2e:b5:3e:6f:20:64:11:c8:b0:21:9e:
                    ed:86:86:5d:c1:f8:90:7a:01:c3:cb:22:b2:57:47:
                    41:09:64:34:f7:92:fa:3d:13:1b:c3:f9:b9:66:51:
                    9b:f3:21:83:6c:1d:60:92:8f:96:68:44:f3:ea:c0:
                    00:16:7a:9e:fb:94:85:65:6d:0d:d1:09:34:44:f2:
                    de:50:bf:cf:63:78:17:50:6a:24:e0:fd:38:c1:b4:
                    3f:1f:2c:c5:b7:be:da:47:63:be:09:f0:05:50:e3:
                    ad:3f:98:63:4d:f4:e0:dd:ac:4b:67:01:fe:ff:45:
                    5e:bb:09:8c:1f:9d:b1:cb:12:4f:33:77:ad:ac:f7:
                    38:e2:7c:27:ab:6f:1c:22:f0:c0:0c:29:07:19:a4:
                    42:4b:1f:74:b2:fb:57:10:f8:02:96:1e:37:69:52:
                    7a:eb:d0:ec:76:af:4b:b7:14:11:69:5d:96:2c:77:
                    10:03:e5:65:95:ff:24:ca:7b:f6:b7:8b:cd:7d:a5:
                    09:b8:57:52:17:59:03:b3:a8:93:74:2d:ef:c0:03:
                    16:19:b9:57:ef:43:cb:9c:79:cf:e2:7c:b3:7a:0c:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0A:06:22:85:BF:95:28:45:09:AA:AC:13:FE:80:97:BA:A7:CC:F6
            X509v3 Authority Key Identifier:
                keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:83:6e:66:c7:b1:e2:65:50:de:f5:f8:18:fd:24:e1:47:
         bb:b7:de:b2:33:39:bd:8b:11:85:a2:82:7e:d2:8b:fc:24:fc:
         b7:83:93:b0:16:3a:e2:ff:fe:0a:81:99:27:fa:1d:3f:54:21:
         32:a5:ca:93:3b:e8:43:da:2a:79:b2:99:32:6e:e8:ce:88:f9:
         bc:c4:fa:31:c3:b2:f5:ea:16:53:65:02:bd:1e:95:06:dc:09:
         19:11:7b:12:dc:e0:42:5a:98:c6:bc:a9:2d:6b:80:7d:e4:aa:
         f0:c7:69:31:6f:47:9e:b9:74:05:c6:bf:a7:a5:62:33:e9:1c:
         23:d3:7d:83:c5:76:60:a6:33:5c:f0:4c:e2:a2:17:e7:db:3d:
         00:97:df:62:4a:7e:c7:5e:4b:10:b2:3d:37:49:95:3b:37:a3:
         0f:d8:8f:05:a0:67:ef:d9:e6:25:ef:8e:8b:53:03:5b:05:2a:
         0a:b7:5f:32:bd:da:3c:f2:cf:73:d1:be:81:a9:ce:5e:d9:8d:
         40:cf:bd:10:d9:1e:0c:32:0e:a8:bb:8a:ec:2b:49:84:70:20:
         ee:d8:5a:bc:2c:ce:f5:4e:5d:bb:58:15:51:35:76:bf:a5:8a:
         bb:c4:a1:67:bc:d8:5a:9e:77:71:73:26:94:f8:29:d8:2c:9e:
         cb:98:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:33 2026 by rpki-client