Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File:                     hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier:          Tydc/BQW/pPQxInWCGykei9BmUZQFqCdchINjC6Wk+8=
Subject key identifier:   57:D7:62:1E:64:65:88:A0:66:32:00:2F:5C:FE:AE:6F:2E:AD:52:5C
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer:       /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial:       019F90FF33A01A35934766BBF61DBD7406AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number:          19D9
Signing time:             Thu 23 Jul 2026 22:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:11 +0000
Files and hashes:         1: heKnF0nPw3navL7mvVdrP7ZenfE.roa (hash: SN8nxNReThCLTC+u68FN/Bqg6og3YUjtGA8xvnnpO7A=)
                          2: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: AqEyZC6AaeTiXOZCHagqnGLQgtAJXk87MGJ6EZcXiho=)
                          3: nWgcaCGHD4XLgJn8cNsTomvBn3c.roa (hash: 8nej7U1vnnmR/xVjVC+2uJAGyhhhDto8PTwFu5L8GtU=)
                          4: o_t0N0oazoSoRUIX38zmHacjpmI.roa (hash: 5Xwms+xTtZNdTeon1Aug9x31utWCflJ+A+WQraSsVuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:33:a0:1a:35:93:47:66:bb:f6:1d:bd:74:06:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
        Validity
            Not Before: Jul 23 22:01:11 2026 GMT
            Not After : Jul 24 22:01:11 2026 GMT
        Subject: CN=57d7621e646588a06632002f5cfeae6f2ead525c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:af:19:6f:0b:46:cb:65:89:fa:3e:6f:c1:
                    c4:1a:10:42:fe:2c:39:75:33:5c:c6:7a:aa:1c:82:
                    e9:4b:74:53:9c:38:1d:ea:b6:f0:d9:19:17:2a:56:
                    94:b5:ea:aa:53:22:52:4c:84:00:80:d0:fc:cc:5e:
                    2e:42:62:36:d0:52:6d:c9:4e:d7:39:03:a3:67:29:
                    bd:bd:d4:4a:39:8c:f6:a6:b6:46:d0:20:88:57:36:
                    42:9f:f5:c7:52:c4:18:c9:22:82:3a:ca:8c:ca:88:
                    14:75:2e:77:6c:80:59:ec:9b:5e:8c:a6:00:1b:5e:
                    ff:ad:43:61:b5:a4:13:dd:59:a6:8b:5d:6b:bc:f8:
                    dd:63:01:5b:3e:44:5c:85:15:11:32:cd:5b:ea:64:
                    ff:13:cf:fe:01:01:18:17:a9:f7:e5:6c:45:8c:45:
                    64:d6:67:2d:7b:7e:1f:20:a1:6d:e5:7b:c6:7e:97:
                    d0:f1:9b:64:70:1a:be:60:73:2a:9d:df:27:b5:11:
                    e5:f6:b9:df:c8:27:e0:3d:14:30:76:0f:19:ac:c7:
                    d7:b8:0a:46:3f:e2:27:fa:a3:64:c3:9d:ce:d1:44:
                    08:e9:a5:5f:7e:21:18:77:be:58:31:d9:ae:01:83:
                    b4:93:02:0c:a9:6d:2a:d1:19:0f:e6:fd:cd:8c:4d:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D7:62:1E:64:65:88:A0:66:32:00:2F:5C:FE:AE:6F:2E:AD:52:5C
            X509v3 Authority Key Identifier:
                keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:04:49:03:71:ea:8b:de:cc:81:d2:67:5d:ae:cb:b7:20:
         ca:c0:c9:62:8b:dc:96:34:5d:07:c3:b8:8f:12:58:6e:a1:81:
         f7:46:f9:ba:3d:e0:69:84:bd:90:6b:25:88:d3:7b:2e:df:e8:
         03:d2:bb:c1:e2:2e:4f:86:19:67:f0:3a:cf:6f:b8:0b:5b:35:
         83:e4:fa:c7:6c:55:f9:ce:d8:59:67:a0:a1:2c:ca:fb:48:d9:
         72:b0:84:0b:2d:6a:17:76:e3:50:c6:2e:10:3f:5b:8d:43:e7:
         84:62:e4:dd:06:a3:11:9d:5b:d7:2d:88:88:5d:aa:2b:3c:4a:
         df:e0:d5:58:5f:c7:fc:2e:0a:18:82:f6:30:db:14:44:3e:8a:
         5c:32:5e:f2:e5:40:97:df:25:5d:54:4e:0c:03:70:78:70:8f:
         d0:1c:19:65:d7:4e:48:63:6e:61:33:14:18:e5:f4:1e:7d:3a:
         98:3a:51:bb:a8:99:72:5c:2a:18:10:37:91:97:c1:94:52:00:
         11:a2:d6:35:32:f4:93:57:09:92:3a:f5:b6:78:1f:21:11:fa:
         74:42:88:72:96:4e:87:81:8a:bc:db:ae:33:52:5e:97:94:62:
         95:c4:1b:31:9e:8e:fb:25:5a:c7:40:d5:ba:5a:e0:37:51:f8:
         ef:e0:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:49 2026 by rpki-client