Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          DxpKbxBQ/CAfEehiKdZzQxEjfXeOQlDxPYHw7cBtdss=
Subject key identifier:   AB:ED:D3:BD:86:AE:B8:C8:DE:B1:AD:30:53:3A:1B:23:4E:C8:08:6C
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       019F91360782B81A8A63F729F8C1D5E3E1B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          0F76
Signing time:             Thu 23 Jul 2026 23:01:04 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:04 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:04 +0000
Files and hashes:         1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
                          2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
                          3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: BVNEOHL+S6FRvJVqemXMmJtN92Hov2PfCaRW+6rTm7U=)
                          4: Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa (hash: TYDH5coqqN7vBlTwIJM37WvbHu4Y3+YdwZk0vCbc/PI=)
                          5: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
                          6: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
                          7: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
                          8: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
                          9: rn8xh7KrE-noCmPuIuBIyrHAPJA.roa (hash: aNnfk/W5R104AFRFIhyK+d9zBIZCQDKxCBG6unxwHJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:36:07:82:b8:1a:8a:63:f7:29:f8:c1:d5:e3:e1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Jul 23 23:01:04 2026 GMT
            Not After : Jul 24 23:01:04 2026 GMT
        Subject: CN=abedd3bd86aeb8c8deb1ad30533a1b234ec8086c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7e:08:fd:e5:eb:6b:35:8a:ab:b4:ea:5d:5d:
                    6e:47:a0:99:c5:2a:d0:86:c4:b7:c5:47:6f:1c:8d:
                    08:21:9b:2f:b5:a5:0f:30:83:2f:c5:5e:e3:20:de:
                    11:09:9f:81:3e:6c:31:ae:b5:25:ac:a7:ba:26:37:
                    bb:3a:da:0b:92:da:f2:85:d5:a7:c3:bd:eb:1f:cb:
                    3a:79:1e:e2:46:1d:ec:ab:5e:f5:55:76:24:25:cf:
                    24:85:7f:cb:39:11:b8:b3:81:9c:f4:c5:57:10:c5:
                    11:a7:50:ff:30:24:d2:2b:e2:5f:10:97:21:5e:0c:
                    d6:1c:4a:22:1c:ad:54:28:1d:7d:d4:e4:64:ac:74:
                    32:86:1e:86:a6:4c:46:ed:4e:04:87:70:d2:9e:3e:
                    19:62:45:9e:3d:e9:b0:a9:04:2f:fb:09:73:48:b2:
                    de:38:f9:da:8d:d4:7e:06:80:4e:1e:47:5f:c6:83:
                    71:22:aa:8c:97:9c:b5:02:ee:08:9f:e7:a0:dd:de:
                    82:b2:ac:06:67:eb:4f:84:18:75:fe:e6:87:56:78:
                    65:f1:1c:cb:5e:92:87:26:8f:e5:92:55:78:52:83:
                    2d:6f:8e:f5:97:c3:01:83:4d:4d:35:15:0e:3d:b2:
                    63:4a:71:f8:0f:05:de:f7:b3:da:6b:fb:9e:de:7a:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:ED:D3:BD:86:AE:B8:C8:DE:B1:AD:30:53:3A:1B:23:4E:C8:08:6C
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:54:bf:a1:fd:4c:1c:a4:79:44:1f:5f:93:78:56:00:a4:5e:
         59:b6:83:4d:50:f0:d0:50:54:90:3f:b9:a4:18:a5:22:ff:90:
         7b:ae:89:2c:26:9b:2a:75:ab:03:d4:aa:f5:ee:ac:9f:0c:0c:
         81:cc:82:5e:be:bb:38:a6:c1:ca:a1:c0:a0:1f:8a:40:bc:e0:
         f3:82:05:f2:80:d5:67:0d:04:fd:35:e2:64:3d:9b:9c:17:7e:
         57:3b:39:a0:4b:6e:c4:33:ba:38:e6:24:4d:6b:68:5b:ac:fc:
         57:0e:6d:9c:a8:61:9c:1c:c4:2a:d4:a7:13:07:c5:09:53:fc:
         a7:d4:97:08:be:28:7c:e1:a1:59:f3:c3:19:65:6c:42:9e:66:
         50:7c:b4:57:ea:f2:45:35:d5:ff:75:6b:3b:23:4d:88:70:4d:
         16:f5:a3:2f:34:9b:15:38:b2:e4:4a:1b:f9:77:3a:19:08:c6:
         f3:9b:b1:91:66:26:08:12:e9:3e:e7:01:c7:32:8d:0f:08:64:
         c8:21:13:fa:52:52:60:ab:07:1a:1f:29:50:9e:06:8d:6d:47:
         e9:ec:d6:6d:1d:db:3a:29:3d:12:d7:ae:b2:7a:05:10:e3:2b:
         81:4c:78:01:9f:eb:b5:ad:3e:72:1e:bb:d9:50:34:5e:10:b9:
         2d:dc:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:36:35 2026 by rpki-client