Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File:                     hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier:          T4gC4dSkZwcVvp3sdRbAoAZk/u7+i1LiIma4J4MWiTQ=
Subject key identifier:   91:CA:AE:B9:C8:6F:CC:3D:AD:58:83:D2:7F:E5:B5:B8:BA:AD:20:AB
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer:       /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial:       019F92B6205CC244F91EDD7AA414825B36F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number:          0642
Signing time:             Fri 24 Jul 2026 06:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:37 +0000
Files and hashes:         1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
                          2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: Vn+RvQ1qSEKPXLull9mvjpwcCwgO0QthXEa0ZRfNwZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:20:5c:c2:44:f9:1e:dd:7a:a4:14:82:5b:36:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
        Validity
            Not Before: Jul 24 06:00:37 2026 GMT
            Not After : Jul 25 06:00:37 2026 GMT
        Subject: CN=91caaeb9c86fcc3dad5883d27fe5b5b8baad20ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:08:2b:a9:5d:95:7e:06:67:1c:c1:aa:fd:
                    b8:92:8c:3b:79:bd:94:e4:8e:4e:6f:e1:0d:c9:82:
                    fb:5d:be:82:9e:c9:bb:77:6c:6a:68:96:6a:e2:f6:
                    09:5e:ed:50:ff:6e:7b:a6:f8:25:a2:11:b4:8c:eb:
                    06:c5:33:68:5d:5d:5d:42:33:5e:89:0d:bb:c5:47:
                    bb:a6:76:21:0e:b5:e7:a6:76:51:82:57:6e:a3:5d:
                    99:8b:19:67:cf:d6:d3:a9:c6:5d:c7:15:b4:4d:e5:
                    28:88:e4:bb:6f:08:14:a8:07:b6:5b:d2:21:97:25:
                    21:46:ea:1f:57:13:42:ba:69:f3:7a:bb:4b:b7:9b:
                    a4:f2:8e:e7:b3:00:16:f3:f5:69:4b:b6:c4:96:d3:
                    f9:ad:14:59:c6:5d:b1:39:d0:f2:e2:e0:e7:3a:11:
                    31:11:1b:27:d7:e9:ec:43:af:f4:03:e0:dc:fa:1e:
                    e9:42:17:24:71:6e:79:be:07:d7:6a:17:9c:28:64:
                    69:19:28:0d:09:cc:48:94:5f:4f:e3:98:b2:48:64:
                    0e:6b:33:07:78:ee:3c:15:48:b6:1c:41:eb:eb:de:
                    dd:66:3f:e3:e6:da:39:42:dd:1a:1a:4a:1c:29:2f:
                    13:3d:26:f8:3b:0a:4b:15:28:67:c4:aa:e4:47:5b:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CA:AE:B9:C8:6F:CC:3D:AD:58:83:D2:7F:E5:B5:B8:BA:AD:20:AB
            X509v3 Authority Key Identifier:
                keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:06:7e:e7:08:56:f9:6f:c0:17:26:ea:db:38:cc:13:8c:f2:
         34:7b:0a:77:0e:13:ca:de:03:76:bd:1b:e6:b9:5f:fc:66:9d:
         d6:69:5b:d4:12:ab:57:4b:27:28:bc:6b:6a:f5:f4:4f:cd:f7:
         6a:57:bc:91:bb:cb:b0:dd:bb:36:7e:ee:70:49:a2:76:3b:79:
         7c:83:d3:ca:1c:1a:2a:c3:9a:6a:ea:07:e8:4e:f2:3f:af:e4:
         7b:ab:ad:fd:2b:13:87:69:5b:dd:f4:4c:c0:5d:f3:d0:8f:49:
         57:62:f1:4e:00:0a:c3:7c:63:7b:2a:91:39:fb:e8:59:78:a3:
         17:b0:e8:9a:f4:13:2c:e4:e2:cf:f2:6c:94:b5:0d:d6:4a:db:
         5e:ef:ba:74:9d:0d:7e:c8:b2:0d:8c:a5:98:73:ba:fb:44:13:
         61:43:e0:27:d4:67:de:a8:b2:9f:a4:28:ff:e9:f4:d7:4c:e7:
         5a:33:d1:15:f3:24:22:37:ca:f5:7f:08:09:60:b9:0d:ab:48:
         4a:4b:d7:79:a5:45:cb:20:09:3e:33:aa:89:b0:f4:b5:20:8f:
         fa:a1:53:5c:7e:03:e5:88:a7:8e:0a:ca:e2:1c:2c:9e:92:df:
         9a:6c:06:8d:48:d0:44:ab:ac:bf:92:ca:0c:09:f2:6b:b4:79:
         c1:78:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:04 2026 by rpki-client