Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File:                     HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier:          8VZa7CgDjV+HLNMOY3/Wc65AxpUyxjWAodBAqQcqcuI=
Subject key identifier:   7C:57:77:3C:E6:62:03:4A:DE:8D:8B:4E:7E:75:36:6B:FA:71:BB:57
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer:       /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial:       019EC1123D130A2902AAA40CFD9ED8E20C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number:          16CE
Signing time:             Sat 13 Jun 2026 13:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:58 +0000
Files and hashes:         1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: VvyGL1x07PVV7AWARg5NUJbKRFAMbmDaIWcB5dIiwpw=)
                          2: IMhrDeS7pt6POgdqkwhQn8NXjdQ.roa (hash: 8Co4GdnGTbaplfNAIs0VU0evrLpH3iNJkhwVpK6YVsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:3d:13:0a:29:02:aa:a4:0c:fd:9e:d8:e2:0c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
        Validity
            Not Before: Jun 13 13:00:58 2026 GMT
            Not After : Jun 14 13:00:58 2026 GMT
        Subject: CN=7c57773ce662034ade8d8b4e7e75366bfa71bb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:1e:f2:dc:09:12:c3:84:b3:fc:93:2f:89:
                    79:9f:87:f0:ac:17:df:82:01:91:b2:f0:b1:91:3e:
                    3b:25:22:c5:50:fd:8c:f2:d5:4b:b6:28:02:56:fd:
                    59:72:d9:c5:84:a7:8e:38:b7:82:e7:41:1b:dc:8f:
                    87:bd:57:0c:66:76:89:51:50:38:90:f4:6d:57:9d:
                    81:c7:7f:f7:84:85:a5:4f:43:68:b3:06:51:6d:fa:
                    6f:7b:62:7e:81:68:a3:c5:67:77:0a:d3:a1:0f:22:
                    a1:22:34:26:b0:07:c4:33:25:bf:c7:f8:9e:e3:5d:
                    45:d7:93:5a:92:ff:08:9d:25:d2:35:06:54:10:02:
                    af:89:32:e9:f7:c4:6c:03:41:fb:84:5d:50:a3:6e:
                    b2:15:31:b9:d5:1c:4a:48:62:17:a7:3d:d8:72:d0:
                    f4:be:58:c9:bd:c8:22:12:bf:c8:96:3e:89:f9:8e:
                    0b:63:98:db:25:e0:99:25:83:c8:4c:48:16:3c:97:
                    d2:89:b9:80:9d:03:cb:4e:c0:9c:b0:bf:b5:0f:1d:
                    36:39:72:df:da:8d:79:5a:7e:2a:48:cd:5b:3c:fd:
                    1d:62:aa:db:16:e6:6d:0b:1b:ec:68:1c:2f:a9:27:
                    5f:d3:a3:5f:0f:c1:ba:ac:73:68:01:88:e1:73:28:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:77:3C:E6:62:03:4A:DE:8D:8B:4E:7E:75:36:6B:FA:71:BB:57
            X509v3 Authority Key Identifier:
                keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4e:11:e6:c0:56:60:ee:9a:b7:37:48:95:c8:5c:40:2a:e4:
         15:85:fb:a5:eb:14:83:82:e3:97:2a:23:24:9e:51:53:e8:8a:
         5c:0d:85:1c:dd:5f:61:11:97:69:c7:da:1b:62:2f:a9:8c:dd:
         19:37:7f:20:e1:1d:79:e6:aa:1d:67:6d:9b:e3:77:15:39:d0:
         a0:6e:f1:cf:b7:e7:ce:a8:ee:97:c1:33:eb:2f:92:a0:e3:e4:
         29:a3:9d:83:2f:a6:d6:08:ae:8a:61:bf:cc:cd:13:b9:c4:8d:
         56:b3:8b:9a:dd:cb:2f:5d:c0:a8:b8:0d:18:82:17:c9:b4:8b:
         ff:37:8b:eb:13:b3:2a:f1:2e:cb:ef:6e:ec:87:dd:64:0a:39:
         54:51:15:81:46:c9:4c:2d:01:02:3a:e1:53:a7:46:ad:b4:ea:
         e4:c8:c4:58:ed:a0:80:49:37:6c:4a:41:50:6c:16:1e:90:31:
         af:21:3f:1e:6d:27:d6:53:9f:59:3e:8b:ab:d0:f7:cf:d5:6f:
         54:86:80:5c:d2:0b:15:62:d7:6f:2d:75:87:01:72:df:bb:42:
         f5:b4:09:28:3b:28:a1:ee:15:63:6f:58:59:c8:c9:86:e6:8d:
         f6:ae:63:1e:7e:2a:ef:88:c4:b5:01:12:79:86:e4:61:cb:7e:
         29:06:5f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEj0TCikCqqQM/Z7Y4gyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2RkM2M4MTZkODU5NjA4MDQ3MjA1NDM0ODA5NWVkMmI4
NTUxZTUwHhcNMjYwNjEzMTMwMDU4WhcNMjYwNjE0MTMwMDU4WjAzMTEwLwYDVQQD
Eyg3YzU3NzczY2U2NjIwMzRhZGU4ZDhiNGU3ZTc1MzY2YmZhNzFiYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3we8twJEsOEs/yTL4l5n4fwrBff
ggGRsvCxkT47JSLFUP2M8tVLtigCVv1ZctnFhKeOOLeC50Eb3I+HvVcMZnaJUVA4
kPRtV52Bx3/3hIWlT0NoswZRbfpve2J+gWijxWd3CtOhDyKhIjQmsAfEMyW/x/ie
411F15Nakv8InSXSNQZUEAKviTLp98RsA0H7hF1Qo26yFTG51RxKSGIXpz3YctD0
vljJvcgiEr/Ilj6J+Y4LY5jbJeCZJYPITEgWPJfSibmAnQPLTsCcsL+1Dx02OXLf
2o15Wn4qSM1bPP0dYqrbFuZtCxvsaBwvqSdf06NfD8G6rHNoAYjhcygYqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxXdzzmYgNK3o2LTn51Nmv6cbtXMB8GA1UdIwQY
MBaAFBx908gW2FlggEcgVDSAle0rhVHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzkt
Y2MyY2Q3ZDMxYTI2LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzktY2MyY2Q3ZDMxYTI2
LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU4R5sBW
YO6atzdIlchcQCrkFYX7pesUg4LjlyojJJ5RU+iKXA2FHN1fYRGXacfaG2IvqYzd
GTd/IOEdeeaqHWdtm+N3FTnQoG7xz7fnzqjul8Ez6y+SoOPkKaOdgy+m1giuimG/
zM0TucSNVrOLmt3LL13AqLgNGIIXybSL/zeL6xOzKvEuy+9u7IfdZAo5VFEVgUbJ
TC0BAjrhU6dGrbTq5MjEWO2ggEk3bEpBUGwWHpAxryE/Hm0n1lOfWT6Lq9D3z9Vv
VIaAXNILFWLXby11hwFy37tC9bQJKDsooe4VY29YWcjJhuaN9q5jHn4q74jEtQES
eYbkYct+KQZfiA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:27 2026 by rpki-client