Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File:                     Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier:          OkM9Hlm453g12CvFWxt/0GrqRVijrQqP2Ie39S/wUGw=
Subject key identifier:   0F:69:05:06:68:8A:5F:D8:34:A3:11:3B:BA:64:51:49:E0:F7:5C:3E
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer:       /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial:       019F90C7E31C59C11C114A7D4F1A6B68892F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number:          1958
Signing time:             Thu 23 Jul 2026 21:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:46 +0000
Files and hashes:         1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: IwSbqf5WlW8mi2INawusg+llkui74APiy5weOwxDzJE=)
                          2: idejEcxXsr16g2wp9V8Tc_3IUpE.roa (hash: 2R6v+WJgumF5jKo8h1riFb9sUElHbeJIrHYFIS833YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:e3:1c:59:c1:1c:11:4a:7d:4f:1a:6b:68:89:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
        Validity
            Not Before: Jul 23 21:00:46 2026 GMT
            Not After : Jul 24 21:00:46 2026 GMT
        Subject: CN=0f690506688a5fd834a3113bba645149e0f75c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:9f:a4:4c:24:e0:0a:1b:7a:65:37:34:85:
                    1f:43:d6:87:34:dc:58:7e:c0:7c:a7:d5:b7:5c:18:
                    a9:41:67:11:93:13:35:5c:9e:86:c4:e5:05:8e:f6:
                    ea:56:3d:e3:3e:d2:f8:5b:ec:69:c7:38:62:1a:3d:
                    b7:12:a6:d6:37:fe:0e:b5:23:38:e6:f8:a3:cc:50:
                    0f:fb:af:23:28:35:d5:66:74:47:30:64:54:55:83:
                    02:16:da:59:45:fd:5c:29:4b:3f:fe:a1:ec:ca:c3:
                    d4:19:7c:07:b3:66:21:9e:cf:72:4e:d2:97:26:3b:
                    56:07:94:65:73:ed:76:e8:0e:92:60:86:50:4c:46:
                    00:58:2c:1f:9d:d9:0a:a4:a3:b4:73:b5:93:0b:ba:
                    c1:af:2f:e7:32:0f:d4:44:dd:b4:42:e3:0a:72:76:
                    50:e2:70:ba:ab:91:a4:8c:00:1b:2a:4d:c3:54:b5:
                    11:7b:73:e7:09:bb:a0:1d:b8:fa:71:ba:a2:84:78:
                    dc:a8:22:79:9f:27:0b:7f:4b:3c:e9:a1:31:6f:e1:
                    ee:9a:cc:d1:7a:28:d6:cb:1a:7f:5b:fb:71:dd:a7:
                    42:d9:f3:42:2b:45:ef:23:cf:fb:12:61:4d:fd:28:
                    f9:4d:05:36:db:8b:a5:fb:d5:51:ef:c0:32:51:1a:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:69:05:06:68:8A:5F:D8:34:A3:11:3B:BA:64:51:49:E0:F7:5C:3E
            X509v3 Authority Key Identifier:
                keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7f:f8:20:c2:6e:34:b4:1d:ab:0f:c4:98:2e:d9:15:64:94:
         40:b8:4d:82:e9:e9:55:42:b1:95:d2:35:37:c9:3a:63:44:4d:
         77:c0:4d:91:71:3b:62:c9:4d:73:45:b7:f4:d0:ef:17:30:32:
         c8:c4:fd:6e:92:4e:27:69:8e:06:d7:1d:5e:8e:19:ae:79:2a:
         41:a8:84:42:03:f2:ce:d9:a3:8c:a2:85:a8:68:87:d1:24:fa:
         5e:7d:1e:68:c6:dc:3d:c0:9f:88:07:df:7d:e0:46:ed:01:4d:
         9e:0d:e6:a6:1f:a1:25:9e:7e:02:69:6f:39:22:8f:c3:ee:84:
         71:f4:f3:5b:a3:b8:0f:21:c5:87:d3:71:ed:de:2e:05:19:eb:
         8f:7c:33:0e:84:4b:c0:8d:0a:44:41:91:37:22:a1:7e:bd:75:
         e9:59:78:2b:c8:55:b7:32:a6:b0:b8:1c:46:49:29:9c:98:43:
         63:38:0a:ca:74:17:0f:93:2f:fb:76:2d:a2:94:4e:07:bc:5a:
         5b:c8:15:92:da:d3:e7:0d:45:7a:b8:da:3e:c1:78:3a:b7:02:
         c7:5c:16:c9:35:fc:d4:84:f4:e2:5b:52:8a:dc:f8:1b:27:66:
         09:e1:8a:09:44:c4:1a:cd:3e:b6:73:7f:30:89:0c:6b:ad:de:
         25:3f:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:15:34 2026 by rpki-client