Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File:                     HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier:          ZC612cieZcPeS3/0y8dV2a61v7aaMmXM1Gn4y3AqnUQ=
Subject key identifier:   01:B8:45:69:AD:E6:8F:8F:73:A2:DE:F0:3D:88:2E:27:34:D3:15:81
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer:       /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial:       019F90599CE7FB20E3862E60DE3932050A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number:          19D1
Signing time:             Thu 23 Jul 2026 19:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:19 +0000
Files and hashes:         1: 7LiZcAkw1v9HF3VimUpAtdnu4Xw.roa (hash: 0RSj8hlfzfDA+UBOrNiz+0Nnhh1ogxhr8K0HRO0n7TM=)
                          2: D7ShHAHZU9Q1RPi-PZsNQEvMtsA.roa (hash: yb8JwTCokjpyT12p4uvxEpN6nrRF5qKq5j9OSf7cQ4M=)
                          3: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: 6H2kEhky3PgGGb8v3L7DPecQ5VuteByT7Fyjdw3WVC8=)
                          4: Tx69HmMEl-OD_2fomg4xYESCEDw.roa (hash: e9adL/NCOts/hcwANwzxhinlwjJUFzDD4VQlpoRq8gQ=)
                          5: UPHfwXfR02Th6cbsvtMgrgEJJL8.roa (hash: WMF5bJJEpf/rg7Q3u4NcJ3tDnBoKVVGAVUpTfvsuLBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:9c:e7:fb:20:e3:86:2e:60:de:39:32:05:0a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
        Validity
            Not Before: Jul 23 19:00:19 2026 GMT
            Not After : Jul 24 19:00:19 2026 GMT
        Subject: CN=01b84569ade68f8f73a2def03d882e2734d31581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:9c:5f:40:9c:a4:99:03:9a:5c:e4:64:83:
                    f6:e8:fd:53:da:dd:26:7e:9f:da:2a:ae:f3:4f:d3:
                    1f:b0:70:05:8a:76:ab:95:c7:63:05:79:ee:91:6b:
                    76:60:53:d4:4d:b4:b6:b6:b5:ce:2c:ab:bf:62:39:
                    c3:2e:7c:7c:02:2c:62:df:a9:5e:18:3c:5b:2e:d1:
                    f4:af:8d:a2:a9:ca:44:bb:67:f3:28:ab:29:f5:89:
                    12:00:eb:93:e3:f5:09:be:92:a1:82:c8:33:85:7d:
                    77:e7:0d:16:02:9e:65:65:6c:b1:cd:a7:23:93:c6:
                    ae:32:9a:5a:c1:1e:b5:7e:53:b1:c4:fa:05:8b:a3:
                    df:f4:52:39:36:cd:0e:8f:c8:29:02:4c:73:43:a0:
                    bd:67:21:57:65:0a:50:49:8d:10:73:c4:df:81:d8:
                    53:5e:e9:15:a1:ce:f4:b7:0d:b5:0a:8b:ff:e3:d9:
                    00:59:37:cb:cd:45:87:df:7a:91:a3:e6:02:5e:b9:
                    58:8b:e2:58:02:48:81:49:9d:e3:48:d0:74:fe:95:
                    3e:3f:90:89:0a:e3:b8:b7:c8:75:8f:23:35:46:80:
                    33:a3:38:40:88:76:07:18:0d:c8:4f:49:55:23:b4:
                    05:dc:4c:5b:4c:37:4a:d1:bb:60:21:ac:37:d6:8e:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B8:45:69:AD:E6:8F:8F:73:A2:DE:F0:3D:88:2E:27:34:D3:15:81
            X509v3 Authority Key Identifier:
                keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:61:1e:3c:d9:63:5e:85:5d:a2:b4:a2:0e:4b:cf:e5:7f:
         9c:0d:0c:68:d1:f7:34:8c:00:8a:52:6c:f3:8c:65:63:6e:34:
         c9:ce:bb:8a:34:8b:d4:6d:0f:fa:c3:86:3e:39:e8:7c:5b:5d:
         af:fb:fa:95:52:fa:67:68:4b:76:ed:a4:e9:cd:82:39:0e:80:
         40:12:73:4a:0a:c7:1b:a5:96:33:bd:d9:3c:ff:90:bf:f7:8f:
         89:14:2b:4c:22:3a:a6:77:42:83:ca:9f:72:d9:ea:56:bf:aa:
         2f:9b:c5:5b:e5:c1:8c:02:5b:d7:e4:12:36:17:80:63:cc:50:
         25:88:a4:55:f4:78:d5:50:e9:94:1e:b1:b9:4f:ca:eb:2e:67:
         8c:8b:2b:e1:ff:a9:61:b8:b9:62:10:04:66:36:3e:5e:d5:89:
         c3:bb:7e:02:2c:3e:b2:ac:96:14:ef:ed:23:f6:c6:32:7b:99:
         e9:08:fe:95:e3:39:15:4e:03:17:f1:e0:92:99:35:a7:5b:0c:
         3b:f4:67:91:72:48:85:f5:4c:db:f0:0f:03:95:98:5e:93:b3:
         e0:84:65:6b:3f:3e:cc:f3:a6:5d:0f:78:a1:13:3f:cc:00:98:
         ca:52:a8:c0:b4:26:5e:7f:ce:3a:a7:fb:ad:2f:96:27:17:a8:
         73:0c:f9:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWZzn+yDjhi5g3jkyBQqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWEyZjA4M2Y0NzFkZmI5NTA3YjRjOTczY2I1YzNhY2Q0
OTc1OWQwHhcNMjYwNzIzMTkwMDE5WhcNMjYwNzI0MTkwMDE5WjAzMTEwLwYDVQQD
EygwMWI4NDU2OWFkZTY4ZjhmNzNhMmRlZjAzZDg4MmUyNzM0ZDMxNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMScX0CcpJkDmlzkZIP26P1T2t0m
fp/aKq7zT9MfsHAFinarlcdjBXnukWt2YFPUTbS2trXOLKu/YjnDLnx8Aixi36le
GDxbLtH0r42iqcpEu2fzKKsp9YkSAOuT4/UJvpKhgsgzhX135w0WAp5lZWyxzacj
k8auMppawR61flOxxPoFi6Pf9FI5Ns0Oj8gpAkxzQ6C9ZyFXZQpQSY0Qc8TfgdhT
XukVoc70tw21Cov/49kAWTfLzUWH33qRo+YCXrlYi+JYAkiBSZ3jSNB0/pU+P5CJ
CuO4t8h1jyM1RoAzozhAiHYHGA3IT0lVI7QF3ExbTDdK0btgIaw31o4+TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAG4RWmt5o+Pc6Le8D2ILic00xWBMB8GA1UdIwQY
MBaAFB6aLwg/Rx37lQe0yXPLXDrNSXWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYt
MjVkNmU4NjEzZGM0LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYtMjVkNmU4NjEzZGM0
LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLJhHjzZ
Y16FXaK0og5Lz+V/nA0MaNH3NIwAilJs84xlY240yc67ijSL1G0P+sOGPjnofFtd
r/v6lVL6Z2hLdu2k6c2COQ6AQBJzSgrHG6WWM73ZPP+Qv/ePiRQrTCI6pndCg8qf
ctnqVr+qL5vFW+XBjAJb1+QSNheAY8xQJYikVfR41VDplB6xuU/K6y5njIsr4f+p
Ybi5YhAEZjY+XtWJw7t+Aiw+sqyWFO/tI/bGMnuZ6Qj+leM5FU4DF/Hgkpk1p1sM
O/RnkXJIhfVM2/APA5WYXpOz4IRlaz8+zPOmXQ94oRM/zACYylKowLQmXn/OOqf7
rS+WJxeocwz58g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:12 2026 by rpki-client