Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File:                     HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier:          +Emu4sXGOZB3NiAXXTssSToDn0I282+EZTTRJEX7sy0=
Subject key identifier:   9F:C4:4F:7F:4F:61:75:35:93:0B:03:E3:02:4D:D2:89:87:C1:12:55
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer:       /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial:       019F90917409F8EBF84DA2CC71A18B35D4A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number:          1333
Signing time:             Thu 23 Jul 2026 20:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:19 +0000
Files and hashes:         1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: w9b2/o57UaJXHFCgqaI64tEpUj22N2PEU6T6ktf1J1M=)
                          2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:74:09:f8:eb:f8:4d:a2:cc:71:a1:8b:35:d4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
        Validity
            Not Before: Jul 23 20:01:19 2026 GMT
            Not After : Jul 24 20:01:19 2026 GMT
        Subject: CN=9fc44f7f4f617535930b03e3024dd28987c11255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ac:13:dc:ed:3c:4b:1a:e3:4b:45:91:e7:94:
                    c3:28:b0:a5:71:a1:ef:52:d6:af:f5:7f:33:90:f5:
                    9d:8d:44:2a:54:e6:0c:d1:bc:9d:56:f1:56:c7:88:
                    65:cc:ac:52:ca:ab:69:b4:34:ff:83:de:a3:11:c4:
                    93:a2:1c:88:5a:38:d4:6e:50:1b:46:0d:23:3e:5d:
                    8e:b6:26:c1:6e:cb:c0:ee:40:28:a1:6c:d0:87:a6:
                    f7:c3:fd:f0:e7:41:2e:3a:43:c0:a7:72:5b:d6:4e:
                    c1:28:8d:01:b3:0f:78:d4:ff:8f:73:96:c5:5b:fd:
                    78:64:f8:1f:df:90:ca:ba:f6:53:4b:62:ab:31:ed:
                    01:28:20:63:55:82:9f:81:c8:9f:a2:f7:cd:4b:b6:
                    3c:c6:08:6e:96:d1:ba:d3:ae:1e:38:e4:ed:b9:53:
                    53:55:ad:c2:15:68:a2:c9:45:4d:aa:3e:99:97:d1:
                    cc:46:a6:9b:26:af:36:d4:a1:40:f4:f0:0e:34:5b:
                    4f:52:64:15:d9:bd:a0:2b:da:8a:d8:1c:2b:9c:53:
                    27:cb:91:d9:10:31:38:61:89:54:39:dd:1c:d4:47:
                    ae:bc:16:d6:e1:df:8f:ac:9b:3d:a5:46:2f:40:89:
                    98:34:03:24:b2:2c:bd:87:4a:8c:df:5d:ec:9d:da:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C4:4F:7F:4F:61:75:35:93:0B:03:E3:02:4D:D2:89:87:C1:12:55
            X509v3 Authority Key Identifier:
                keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:81:a1:97:d6:58:66:70:8a:b7:49:2c:bb:93:f2:d3:d2:
         e7:0f:64:58:0d:7a:9d:31:bd:e0:68:d0:b3:ef:a9:a8:89:fb:
         77:b7:06:42:66:14:97:85:46:26:76:26:69:75:d3:df:69:90:
         63:b9:55:cb:16:68:b8:9f:d9:35:66:45:86:a5:3a:a7:2d:a5:
         90:2a:cb:9e:90:a1:23:50:1e:35:eb:7a:f5:ef:f0:11:c3:43:
         19:79:8a:2c:55:8f:85:7b:1d:24:7a:5c:84:19:4d:44:0d:a9:
         a1:d5:d9:b6:4a:67:42:12:37:cf:01:d2:ad:65:32:b2:0b:4a:
         4f:94:56:27:09:6a:b0:08:e6:c2:b2:20:c7:95:df:83:b9:99:
         b1:ba:15:20:4e:6d:99:d1:91:f5:dd:2c:7e:c4:42:1e:ce:af:
         a7:cc:5c:7c:6a:64:35:a3:b5:50:0f:1e:2e:0a:52:09:40:b3:
         3e:26:fa:77:4b:70:d0:3d:d2:78:b5:1c:90:93:c3:c5:88:d5:
         39:59:cf:79:20:77:a8:ac:b8:5f:45:2f:6e:fb:40:52:df:87:
         71:3c:71:22:ef:c3:16:73:03:3d:d4:37:30:1e:79:71:91:31:
         bc:28:4b:28:73:15:59:d2:d3:8c:fe:23:78:6c:4d:a6:d4:d5:
         62:57:74:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkXQJ+Ov4TaLMcaGLNdSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmIyYjM2ZmI3MjI1MDk0NjVlZDlkOTQ4YzJiZjg5MTE2
MGNkMGUwHhcNMjYwNzIzMjAwMTE5WhcNMjYwNzI0MjAwMTE5WjAzMTEwLwYDVQQD
Eyg5ZmM0NGY3ZjRmNjE3NTM1OTMwYjAzZTMwMjRkZDI4OTg3YzExMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9awT3O08SxrjS0WR55TDKLClcaHv
Utav9X8zkPWdjUQqVOYM0bydVvFWx4hlzKxSyqtptDT/g96jEcSTohyIWjjUblAb
Rg0jPl2OtibBbsvA7kAooWzQh6b3w/3w50EuOkPAp3Jb1k7BKI0Bsw941P+Pc5bF
W/14ZPgf35DKuvZTS2KrMe0BKCBjVYKfgcifovfNS7Y8xghultG6064eOOTtuVNT
Va3CFWiiyUVNqj6Zl9HMRqabJq821KFA9PAONFtPUmQV2b2gK9qK2BwrnFMny5HZ
EDE4YYlUOd0c1EeuvBbW4d+PrJs9pUYvQImYNAMksiy9h0qM313sndr0HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/ET39PYXU1kwsD4wJN0omHwRJVMB8GA1UdIwQY
MBaAFBwrKzb7ciUJRl7Z2UjCv4kRYM0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUt
YzIwMmY3MTdkNDQ3LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUtYzIwMmY3MTdkNDQ3
LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl2BoZfW
WGZwirdJLLuT8tPS5w9kWA16nTG94GjQs++pqIn7d7cGQmYUl4VGJnYmaXXT32mQ
Y7lVyxZouJ/ZNWZFhqU6py2lkCrLnpChI1AeNet69e/wEcNDGXmKLFWPhXsdJHpc
hBlNRA2podXZtkpnQhI3zwHSrWUysgtKT5RWJwlqsAjmwrIgx5Xfg7mZsboVIE5t
mdGR9d0sfsRCHs6vp8xcfGpkNaO1UA8eLgpSCUCzPib6d0tw0D3SeLUckJPDxYjV
OVnPeSB3qKy4X0UvbvtAUt+HcTxxIu/DFnMDPdQ3MB55cZExvChLKHMVWdLTjP4j
eGxNptTVYld07A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:15 2026 by rpki-client