Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File:                     H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier:          r0WuLk4QB+69rFlW5G+YTfwK35pwI5GVAcNkhMZv1oA=
Subject key identifier:   F7:DA:30:58:3B:3D:9D:5B:39:15:0F:A7:39:11:F4:88:E6:83:45:DF
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer:       /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial:       019F93919F16C1057F03FC8BF6D507723E40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number:          0AE1
Signing time:             Fri 24 Jul 2026 10:00:21 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:21 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:21 +0000
Files and hashes:         1: 3lrznUDu_RYJXoCA6T2-RqC6f2U.roa (hash: hPVXT+slJzISzm2tkyQwcR1eVSvzD3ViRToSxorCndY=)
                          2: C_5yyZCFvKCe1q25gF_5oZ_pygY.roa (hash: blUVsXaM11h0aXpR0/ZhyzARymiUeJDD6sZq8PuA4SY=)
                          3: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: ikMrGFZ0VD/xpX2x80PbowmAPzL1UiGmwChcijppdrI=)
                          4: U7dOPr8aIxZqqFvoN6CicfjLnZI.roa (hash: va8TN3ROTz1PexP26HjmTHBuqhoh3cPlg+O3J7QZ94E=)
                          5: qoYEAqhri4bUdYVpI1skjqF8iFo.roa (hash: XRgJrR2oLoLBzNI7/ZXQmYkUAt4y3ZosqwuZaOVv078=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:9f:16:c1:05:7f:03:fc:8b:f6:d5:07:72:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
        Validity
            Not Before: Jul 24 10:00:21 2026 GMT
            Not After : Jul 25 10:00:21 2026 GMT
        Subject: CN=f7da30583b3d9d5b39150fa73911f488e68345df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:35:1b:b2:bb:46:23:da:69:49:ac:ae:44:
                    d7:2a:10:9d:45:4c:b8:d4:27:a3:56:c6:e8:ee:8e:
                    8b:a6:e3:a7:8a:2f:cf:aa:69:2e:70:1d:ab:3f:3e:
                    41:5a:9c:a0:e4:b3:58:45:0e:02:06:6b:70:bf:22:
                    70:75:0d:3e:e7:4f:bf:e2:7d:c9:76:dd:67:51:6c:
                    60:32:2b:3a:e1:8c:92:a9:46:e1:8f:3b:fa:0d:54:
                    54:20:66:41:76:e3:58:93:ab:48:b5:b8:9f:16:bf:
                    5b:83:12:a1:fd:ce:59:48:9b:be:a9:2c:b4:eb:30:
                    de:f7:df:7b:20:a3:77:92:49:28:d8:1d:d3:ae:60:
                    f4:7f:97:82:a5:17:b9:8a:13:db:e5:a0:68:32:fa:
                    64:5a:0f:65:05:d5:2b:76:d4:15:dc:05:54:f6:00:
                    ff:6f:f4:f1:aa:bf:53:b4:29:ae:bf:c6:96:95:92:
                    ca:f8:79:af:b8:9c:7b:dd:4c:5d:ee:81:fe:47:d9:
                    03:64:58:44:cf:e8:ca:11:1d:1b:8a:ae:e0:19:17:
                    33:00:d3:58:e9:c1:c0:95:eb:9c:31:f4:c1:b5:8a:
                    3a:8c:0f:f1:3c:fb:c4:27:65:ac:f9:c5:f2:98:0d:
                    3c:23:2a:06:c8:91:d0:af:e3:fa:5c:d0:e2:da:d4:
                    33:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DA:30:58:3B:3D:9D:5B:39:15:0F:A7:39:11:F4:88:E6:83:45:DF
            X509v3 Authority Key Identifier:
                keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:55:68:44:e8:55:e5:f7:25:c7:2b:f9:bd:f2:48:da:ef:12:
         f8:ac:34:12:1a:fd:68:86:2f:99:12:66:cf:32:b7:be:d4:d0:
         e3:1f:83:f6:8c:f9:b2:e7:17:ae:ce:a6:82:d3:ec:62:e7:8b:
         56:3d:08:2a:54:8a:dc:c5:e7:51:e5:22:55:be:bd:9a:50:c6:
         dc:b1:12:36:43:85:7c:8f:5e:d5:3a:ea:16:e0:bb:92:c3:fc:
         10:d7:a0:39:42:59:af:5d:8c:d6:ec:65:b0:33:45:eb:a7:ee:
         b8:17:ff:93:f1:1e:ca:6c:3f:a7:30:61:d8:89:03:b5:c2:55:
         a6:26:18:a3:08:fb:5d:d8:eb:31:48:36:b0:d8:53:34:2b:83:
         97:f1:6d:bd:8b:9d:cc:df:03:d8:f9:af:52:e5:aa:c8:81:d1:
         58:36:f4:3e:aa:15:de:54:b8:c7:a1:3c:39:bf:36:7f:be:26:
         dc:b9:d0:8e:e2:9d:03:4b:ee:80:ba:8c:7c:a1:d2:f2:d1:f3:
         f1:c9:65:84:3a:84:e1:28:01:9f:3b:cd:65:cd:33:59:d9:96:
         98:6d:26:45:24:93:60:86:e3:1a:c1:38:21:b1:e0:b5:25:c9:
         85:c9:70:0b:8e:4c:96:54:03:13:26:82:eb:83:51:83:63:42:
         24:a3:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:39 2026 by rpki-client