Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File:                     hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier:          p253WupZU6CvaPD+jZVHV44WsoJq3BjEGLL2YHNZ90A=
Subject key identifier:   61:8C:33:3D:46:16:B3:67:F6:1B:26:73:7A:76:D2:A5:9F:A5:97:65
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer:       /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial:       019E1DFE9946B1D53B73BD2BC89A7E20D93E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number:          0581
Signing time:             Tue 12 May 2026 21:01:25 +0000
Manifest this update:     Tue 12 May 2026 21:01:25 +0000
Manifest next update:     Wed 13 May 2026 21:01:25 +0000
Files and hashes:         1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
                          2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: 7uEk80CsJm7Uc2sA9X43t+pNI7/OxEOm5fog0zBk4pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:99:46:b1:d5:3b:73:bd:2b:c8:9a:7e:20:d9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
        Validity
            Not Before: May 12 21:01:25 2026 GMT
            Not After : May 13 21:01:25 2026 GMT
        Subject: CN=618c333d4616b367f61b26737a76d2a59fa59765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:d7:5b:c5:52:92:17:c6:6b:9d:50:95:3a:
                    fd:8f:f5:ef:f7:c2:23:e0:1f:27:8e:65:58:88:e0:
                    91:83:77:b4:2a:8b:f1:4b:96:a0:75:e9:c4:e0:97:
                    9e:10:4d:ee:8a:d9:fa:09:28:20:85:53:d2:da:b4:
                    07:7b:23:f2:4f:8b:3a:d9:49:31:15:ba:ff:ec:b2:
                    f5:53:d2:cf:58:a3:99:97:01:de:e1:9e:54:84:72:
                    fb:ee:83:f2:9f:aa:24:02:15:98:d1:4f:80:b9:68:
                    f0:b3:2d:09:9a:1a:8e:16:a0:7a:ab:80:9e:4c:10:
                    c8:3b:2f:32:f1:30:5d:21:fc:7a:d3:b6:06:50:81:
                    6a:8a:34:c5:67:32:ce:27:27:a1:3f:0a:ba:b7:c5:
                    04:87:5c:88:48:82:4b:7a:ac:0f:59:42:1d:69:25:
                    05:54:b5:c7:27:f3:a3:52:3a:88:e8:36:08:b3:6b:
                    ee:7f:3c:a7:91:8d:8c:2b:7e:36:52:55:67:9c:72:
                    73:c0:54:a8:4c:8c:d0:7c:ed:57:c6:22:d1:98:2c:
                    11:5d:8a:b1:3b:40:ff:02:f2:fe:c9:b1:80:59:09:
                    93:3d:46:ba:d7:1c:91:99:c5:f0:fe:ef:06:31:e0:
                    66:86:33:29:b0:2c:2f:61:d9:a5:8a:00:ac:ba:97:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8C:33:3D:46:16:B3:67:F6:1B:26:73:7A:76:D2:A5:9F:A5:97:65
            X509v3 Authority Key Identifier:
                keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:77:5b:25:db:d4:66:f7:24:b3:31:e2:d5:de:60:52:bb:
         4e:96:67:fc:cf:c3:36:90:ca:89:9b:56:be:99:fc:e2:3c:2c:
         e7:a7:4f:f8:c1:2f:72:a3:62:f0:ec:c6:d7:39:e0:26:71:2c:
         61:35:a7:c3:d0:dc:7c:d2:87:cb:16:4e:6d:5d:9a:c9:99:88:
         dd:fb:18:2a:dc:1e:4e:24:f7:d9:a6:cb:68:ef:91:64:88:0e:
         87:96:27:f1:08:17:5f:aa:03:20:48:3c:2b:44:8a:de:6b:1a:
         6a:39:ab:92:07:23:8a:fa:1d:ae:e6:6c:79:60:70:51:71:e5:
         f3:0c:53:4b:d2:3a:d4:14:6e:62:4b:ed:76:2c:4f:c9:84:46:
         ad:bf:db:d5:a2:41:a2:c2:b7:85:d6:34:bf:c0:15:fc:1f:dc:
         14:9e:d2:9f:16:88:15:bd:f4:1b:ec:f2:8f:f0:ed:59:5d:8e:
         96:99:d0:53:9d:c8:b0:64:ba:15:37:7c:b0:4b:5c:55:9a:d2:
         59:ab:66:37:54:d7:24:d8:0f:4f:08:13:09:c2:1d:2e:50:3e:
         44:e0:17:9a:68:73:5e:6d:d4:0b:7a:1d:f1:72:ab:49:bb:a8:
         80:c7:37:48:aa:22:e7:6b:d3:41:f9:5b:10:24:2c:6a:73:f1:
         11:38:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:02 2026 by rpki-client