Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File:                     HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier:          PrlzqgD6usujZc92J1Rd/7pgtnEJbsMidfxSf/Jd92E=
Subject key identifier:   E0:74:61:79:67:62:2F:A1:92:2A:DF:97:AB:0A:DF:F2:89:11:14:2D
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer:       /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial:       019F8F7EAF969EF56BA2AD4C428367F97CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number:          1574
Signing time:             Thu 23 Jul 2026 15:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:12 +0000
Files and hashes:         1: 5bhy7eDbTF3iSMoLKUHBCIILj4E.roa (hash: 9YusEuoHgRDwFpuJ1B9xJzYQFifXAqM0fNdh2jgcmr0=)
                          2: D-r3D7TjflJW1amM5h7I8MR0oUk.asa (hash: z5fDIV8YawnmcSoSc/AVZ5e/iduZ1ZCGdbI+J/9nY3A=)
                          3: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: gv20eAzfMd7Cn2tRt2JwMt0Orpkt9XlXYs7P/t39IZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:af:96:9e:f5:6b:a2:ad:4c:42:83:67:f9:7c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
        Validity
            Not Before: Jul 23 15:01:12 2026 GMT
            Not After : Jul 24 15:01:12 2026 GMT
        Subject: CN=e074617967622fa1922adf97ab0adff28911142d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:fe:e9:12:82:56:1f:a8:dc:91:4d:60:da:
                    bd:39:19:80:be:d4:23:82:ea:3a:ac:3c:82:a0:cc:
                    4e:04:21:0b:28:ef:39:65:2d:56:0d:ce:27:21:d6:
                    ac:5a:f1:55:14:9c:3c:a7:ef:29:30:7f:42:6b:7a:
                    9e:3a:5c:07:6e:4e:1a:1d:b1:87:3c:c0:f9:15:15:
                    e7:a6:cf:cd:7b:74:39:84:f7:5a:5e:cd:34:74:65:
                    a3:87:d5:b8:b9:6e:69:ba:e5:6e:69:ce:51:ff:a9:
                    6f:09:5f:79:d4:04:86:81:72:70:ce:7c:c4:7d:3b:
                    2a:8b:f0:ce:c8:c4:6f:ee:ba:69:9c:ee:20:ce:3c:
                    c1:b6:3b:82:f1:81:f0:b8:ab:fe:ed:12:64:e0:d9:
                    4b:c7:4b:e8:4c:aa:bc:16:8e:98:0e:0e:57:cc:99:
                    cd:dc:b0:80:1b:86:7c:b4:1f:6b:96:30:5c:63:68:
                    83:1b:84:70:93:cc:28:e6:b6:5a:00:87:d9:e2:59:
                    ef:5c:81:e0:1c:14:89:c5:06:35:bc:f9:09:71:3d:
                    aa:ff:01:48:c9:3b:af:50:17:18:b3:ba:5e:a1:f5:
                    85:e2:c3:83:a2:ce:d7:23:84:1d:c1:35:04:48:df:
                    b4:32:52:8f:06:67:91:cd:96:24:ff:3c:04:d1:8e:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:74:61:79:67:62:2F:A1:92:2A:DF:97:AB:0A:DF:F2:89:11:14:2D
            X509v3 Authority Key Identifier:
                keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0b:54:81:4a:2e:6e:c5:9e:9f:e4:9f:e4:1c:93:2a:ec:5f:
         c3:22:3f:7b:1d:fb:03:a8:ee:e4:a9:ee:66:eb:32:d4:df:a3:
         00:3a:ad:85:f9:11:0d:80:40:9e:d4:f0:6a:7e:c4:55:f4:fb:
         db:42:5f:cf:b7:45:52:2c:4e:fa:7e:57:f2:6d:95:10:2f:1d:
         23:19:a6:da:6e:10:46:38:db:d0:51:94:23:07:99:60:bd:96:
         bf:c1:9e:aa:6a:04:2e:09:61:3d:4c:24:74:6b:0c:80:2a:60:
         a5:ae:ae:31:f3:cb:74:75:35:6b:66:5b:55:5f:4b:f6:81:52:
         41:78:4c:64:b9:e6:0b:e8:b8:8c:e1:cc:f2:2a:4e:c6:ff:e0:
         a7:ee:04:a7:fa:ec:a1:73:3c:0a:bd:9a:ce:c7:2e:35:67:4a:
         a9:a2:ab:18:5a:a0:49:94:bb:b4:64:fd:33:af:03:da:aa:49:
         56:05:a3:17:b1:35:99:9e:e7:71:94:08:ec:af:d6:df:4a:e2:
         44:23:53:96:c4:f5:8e:79:8f:1f:ef:ff:e8:ea:79:8c:f9:f6:
         1b:a1:2d:f4:3d:f3:85:8f:da:27:5a:88:1f:2c:d0:05:90:30:
         b8:7c:2f:35:2e:04:71:ae:db:32:f1:bb:2c:1a:92:ad:5f:8e:
         48:08:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:28 2026 by rpki-client