Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
File:                     1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json)
Hash identifier:          0H0ptet1s/iqDqII6Zu9Dlke/DUG54mGKf1Wuf0TMMQ=
Subject key identifier:   30:47:29:73:B5:4E:B4:41:26:68:45:87:4E:32:83:6B:15:E1:DF:0E
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       019FAAF549EBAF7ED846772D54C3A45B9F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
Manifest number:          159C
Signing time:             Tue 28 Jul 2026 23:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:29 +0000
Files and hashes:         1: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: 6m25k+qNt5/d+EifKQTUCzujsnHyEE2DoKNQRHnhDhk=)
                          2: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (hash: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q=)
                          3: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (hash: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ=)
                          4: UcCqMTHisbto-8lkUT_tLgAeR84.roa (hash: MKKos7zvQxC3AHlxEIyIz2TorbEhj+M5Gg1Z5qYM5Vw=)
                          5: dKrxZh5eXZLlr4ulHUj3rX7iLKw.roa (hash: 3Y0TgUH+fONslolgRyWTVgCSVHlc4/LZlKQTJy+uJA8=)
                          6: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (hash: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc=)
                          7: zNwZgS-KWr_tdZQlJYw7r-bncj4.roa (hash: bFzYQzvtRgyI5Sf4GLvJJ0QPWEhrGxWF/aPyki12aFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:49:eb:af:7e:d8:46:77:2d:54:c3:a4:5b:9f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Jul 28 23:00:29 2026 GMT
            Not After : Jul 29 23:00:29 2026 GMT
        Subject: CN=30472973b54eb441266845874e32836b15e1df0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:a2:87:70:cf:27:31:78:ff:58:fa:80:8e:
                    f4:fb:af:4b:9b:f5:cb:b0:75:11:2c:29:94:56:50:
                    26:fe:84:e6:7c:3e:ac:6f:c5:60:c3:b0:11:c5:62:
                    ba:1c:c4:5f:ac:11:53:6e:4d:12:cc:e2:af:aa:a2:
                    f5:68:b7:64:0a:91:79:3a:a5:26:df:e5:21:5e:3e:
                    9c:2a:96:f3:d3:ab:48:07:d0:81:07:a9:d6:e9:79:
                    b1:ab:4e:44:e3:75:ed:82:ec:ae:e6:78:5e:05:42:
                    8f:ca:84:80:cc:9d:d8:87:e9:c8:9a:5e:75:91:23:
                    d2:7e:52:13:2d:b7:64:4b:d8:ae:77:8c:a1:23:28:
                    8b:46:5f:17:3b:93:5a:f4:d9:5f:8e:e8:76:48:f8:
                    77:c0:14:a5:ab:7d:e7:e1:0f:75:1a:ab:2d:5f:51:
                    7c:d3:4c:fc:38:36:89:e5:04:39:77:3c:00:d3:69:
                    bb:d8:6e:a6:ce:ec:d0:58:19:d5:2d:28:48:ac:2e:
                    c1:65:45:69:51:a5:8d:ab:8f:eb:09:8c:3a:5b:06:
                    24:f5:aa:65:66:0b:9d:a2:f9:f0:94:19:b4:44:05:
                    f8:67:6f:2d:38:53:32:12:00:d4:7f:7e:d7:5c:f5:
                    3f:43:f8:91:b2:3d:01:9d:53:bb:1b:11:6e:16:2c:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:47:29:73:B5:4E:B4:41:26:68:45:87:4E:32:83:6B:15:E1:DF:0E
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:70:be:b3:54:39:29:9b:21:50:20:b0:06:15:e8:a8:a1:
         74:cb:32:04:6b:bc:92:e6:5c:67:ce:f8:17:f2:b5:ac:a5:29:
         f5:36:a5:fb:26:30:cd:2b:ba:6c:b4:6f:d5:e1:5f:46:db:4c:
         16:cb:33:28:cb:24:cf:4c:b2:1d:27:e0:60:f5:c5:16:c1:d8:
         f0:10:c5:d0:c8:e9:9b:0d:07:f2:3e:39:67:30:0f:52:cf:af:
         68:63:22:cb:5e:da:52:0e:fa:16:b2:b7:0a:78:3c:15:fd:d7:
         57:af:42:d5:e2:78:3c:d8:74:f6:03:7f:24:8e:d4:83:00:2f:
         4d:cf:66:b4:80:76:73:c2:82:d2:5c:0b:24:9f:f7:16:d6:a0:
         15:3d:ad:9b:6d:00:bc:fc:cc:86:bd:ec:eb:d3:1c:aa:87:1f:
         b5:83:14:28:91:c7:c0:a1:8d:e7:b7:a0:65:4a:0f:e9:a4:e6:
         12:20:e3:d7:45:e8:fd:30:05:ad:56:46:6e:09:12:2a:86:53:
         ec:b6:28:06:07:09:42:06:5b:8c:95:ea:89:74:16:70:8e:9c:
         94:02:96:27:87:a2:38:30:be:42:48:d4:a0:a2:4a:5d:ce:d9:
         17:7e:24:47:fa:90:2b:57:b8:41:32:d3:98:06:7a:d8:d0:72:
         e0:cc:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:08:50 2026 by rpki-client