Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File:                     hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier:          S/JT5y53Ehjtuc0pcmrF8gkh62jUaVoqIKTp+yeKiiE=
Subject key identifier:   62:09:C3:FF:E3:A2:D8:BA:8D:46:93:4D:4C:23:D6:F2:EF:B6:B9:AE
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer:       /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial:       019E1F114D5DC115618444DD87D12BA1214D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number:          01FC
Signing time:             Wed 13 May 2026 02:01:28 +0000
Manifest this update:     Wed 13 May 2026 02:01:28 +0000
Manifest next update:     Thu 14 May 2026 02:01:28 +0000
Files and hashes:         1: 1yp-CyfvXxAtTkk4tSDataHyfwY.roa (hash: SqgokM9PS1NitFY8bOJBDDBU8EreribWl+tjcbzmpfc=)
                          2: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=)
                          3: IGonrweKcV3pBiFmxgMN0Hhq74c.roa (hash: YkHvQYVpbz1V6t76f23kYkJHWGSnZkMw7J+Y7FV0iWY=)
                          4: SMiyXrAPCyN75bhmFTdLi2GwlAk.roa (hash: OWn6AVqzgfgw0x7vjLeI7fNAaN8eSRtfVsyb4Z33PEs=)
                          5: SVUjKuzZ_ORsIdZ9huGbzPV9buQ.roa (hash: Nvnw35bKd31dDdLFTiIRL9x4aYLcyT04hwpnW9gAJbM=)
                          6: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: UVlkcNqpHVH2a3YQn5g15tgbDDG6FHaaju52cZs7/V8=)
                          7: opdAPP4XfkWYA7yU3ItVjBZuv-c.roa (hash: 0Hfm1qyjd3lUos1jStXhOtEuhh/ZjqT6H9OzWUho5SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:4d:5d:c1:15:61:84:44:dd:87:d1:2b:a1:21:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
        Validity
            Not Before: May 13 02:01:28 2026 GMT
            Not After : May 14 02:01:28 2026 GMT
        Subject: CN=6209c3ffe3a2d8ba8d46934d4c23d6f2efb6b9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:37:51:0f:0f:0e:57:3c:0c:e6:e3:8d:70:
                    d5:ae:e4:12:20:67:e7:35:2e:7a:3c:a3:a6:43:60:
                    bd:63:38:62:76:10:21:82:b6:d5:83:c9:57:cb:55:
                    e3:b7:06:11:54:7c:f8:9c:ea:f1:fd:92:f3:fc:3e:
                    99:8f:a6:e3:08:6d:75:f8:e6:85:24:2f:c6:31:4a:
                    d2:8d:85:ae:c3:86:ce:f1:d3:b0:60:e3:f4:5f:41:
                    5b:8d:5d:e8:81:cb:a8:c1:75:d5:8a:06:6b:3f:28:
                    7a:77:17:53:e5:f3:03:45:b4:7c:f5:3a:b8:23:f2:
                    f5:be:45:3a:0b:77:4d:31:e1:a2:68:c4:86:a1:9e:
                    41:9a:a4:0a:23:c3:0f:50:6d:5f:72:0e:26:ea:c4:
                    95:31:20:ee:d5:79:59:fc:d2:1e:7f:59:c9:f7:9e:
                    4e:bd:73:3f:cf:b2:34:e5:8e:78:2a:09:6e:d0:94:
                    27:95:ef:ab:0b:5f:09:e5:72:d8:fa:de:2a:5b:4b:
                    c8:64:2d:97:2e:c2:41:47:5f:c9:ea:a7:5c:cc:07:
                    b0:6a:d0:48:11:ee:82:fc:8e:c2:6a:d9:c8:ac:c5:
                    cc:f9:4c:71:1e:a9:5e:8d:fe:20:4b:33:68:3d:c8:
                    13:54:93:b7:7f:b6:33:36:32:6c:74:e6:12:7f:9a:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:09:C3:FF:E3:A2:D8:BA:8D:46:93:4D:4C:23:D6:F2:EF:B6:B9:AE
            X509v3 Authority Key Identifier:
                keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ab:e3:bc:d4:85:e5:91:a1:0e:38:f2:b3:e1:a1:d2:ad:f8:
         70:55:0d:5a:b3:d1:75:5c:6b:d4:93:b7:08:02:1c:c5:12:27:
         ac:ad:75:e7:3d:9d:cf:9f:93:a6:07:52:3b:db:b1:46:6e:7a:
         e7:b0:7f:d7:93:d7:14:f8:66:a6:05:bf:6e:08:43:94:b9:d1:
         ac:7d:69:c6:bf:9b:21:92:02:f3:dc:c4:a8:f1:3c:95:58:b2:
         4e:14:40:bf:93:a3:87:b3:75:8f:1b:86:97:ad:66:76:e3:15:
         c0:ea:0a:77:c7:58:8a:aa:44:eb:01:1e:ab:0b:ee:9f:82:83:
         1c:3d:68:c7:00:56:0c:03:04:a8:f1:0b:00:f5:2d:33:9c:e5:
         ed:11:3d:68:ca:92:0a:06:e7:33:ca:7c:2b:5b:7e:38:51:75:
         2a:25:28:2f:17:ce:02:b1:20:5b:22:fd:0c:0d:20:e9:be:8d:
         b2:32:35:37:67:c7:cb:25:40:e9:cb:51:7a:03:f8:bc:d6:f2:
         e4:ed:34:bf:76:a8:f8:a9:7b:d5:f0:28:24:97:e8:48:3c:b4:
         ff:75:01:2a:02:e3:f5:9f:09:cc:ce:27:88:9c:03:8f:67:6a:
         31:4e:82:f2:ec:25:66:51:4a:03:8b:03:77:e6:f0:21:3f:be:
         d4:a2:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:36 2026 by rpki-client