Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File:                     HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier:          MY4zLqdviHHTBHN+4JOEEUtTGGccZZ2zi86MpIi55Ec=
Subject key identifier:   46:B4:57:0F:C8:84:B1:E9:34:53:A1:84:97:07:C5:86:4A:31:77:CA
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer:       /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial:       019FAC08EE280EA3D3CD42A6523B0B5EEBB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number:          196A
Signing time:             Wed 29 Jul 2026 04:01:34 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:34 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:34 +0000
Files and hashes:         1: 3GAPsMTYGBgdaWsuRskeq9GU52o.roa (hash: dhH4cdTldQtlsGjr6YNc5jjdZoo6HChKtzPMin0Yqxw=)
                          2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: zwWXcQoBPL+e7monBdsFXomzDnjjq6op1t/CaPEsvy0=)
                          3: _Zz8VQ7MI8grviAkY8_zaADFei8.roa (hash: LJuW+ggL7EdFwcEegbo8DIuepwgPOczDjMEaP85LPEY=)
                          4: a_V5J3Vi7G28PHlX5WI1gqWWPqQ.roa (hash: V7Qb7O3ayDy2ziDj46g/EQOgoAU5eN5xUch4BkUXkak=)
                          5: iWpXIGhiwH7fwofoLu2xcq86kzE.roa (hash: X0PfgdblFhAyZnopcIvEudnKhwK5PlO/KEXA8MHJFq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:ee:28:0e:a3:d3:cd:42:a6:52:3b:0b:5e:eb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
        Validity
            Not Before: Jul 29 04:01:34 2026 GMT
            Not After : Jul 30 04:01:34 2026 GMT
        Subject: CN=46b4570fc884b1e93453a1849707c5864a3177ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:51:b3:03:3d:6a:7c:5a:80:67:85:73:76:
                    97:a0:a9:55:d7:db:3f:f1:83:3e:42:ba:20:96:94:
                    98:3f:3f:f1:cb:b8:6e:41:b5:23:a7:e8:0d:50:30:
                    ba:6b:b9:ce:bc:e0:1b:20:15:7c:41:ce:85:07:6c:
                    97:33:cb:5f:bb:4b:81:f1:a1:8f:61:8d:94:70:3c:
                    59:d7:dc:0e:d0:b0:f2:dd:97:40:3a:18:15:88:94:
                    81:11:4b:2f:cf:a3:f2:7a:f9:a5:19:26:c3:f2:91:
                    9f:52:10:61:9a:82:53:97:76:34:1c:25:e4:10:ae:
                    0a:18:36:a3:50:e0:21:5a:82:ba:e9:ce:91:46:62:
                    15:d4:d4:1b:2f:41:97:68:71:5e:bd:48:73:7a:fa:
                    1a:d5:29:b3:b7:d3:0d:be:fb:03:03:b6:50:1f:26:
                    1f:12:ef:a4:9a:de:43:87:80:1d:3e:b4:c6:59:94:
                    4f:47:43:51:18:00:8c:9b:b0:67:e7:60:67:93:95:
                    32:37:7a:96:df:58:fd:5a:31:62:a3:65:42:e8:74:
                    55:bf:ec:89:82:3d:f8:af:4a:fd:18:e3:b5:0f:f7:
                    a1:8f:d7:19:17:d9:01:a5:20:ab:64:5d:94:dd:16:
                    da:08:1c:20:e5:3f:7d:b4:22:21:25:e9:48:92:83:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B4:57:0F:C8:84:B1:E9:34:53:A1:84:97:07:C5:86:4A:31:77:CA
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bb:d3:c2:69:98:6e:40:c5:c0:74:4c:3b:0a:8e:ca:27:a6:
         d9:0c:a4:9b:51:46:76:b9:94:09:5d:31:76:ac:f4:84:05:12:
         38:56:95:27:c9:c9:55:07:f0:32:c3:41:03:b8:51:fe:49:16:
         da:21:ff:3f:66:28:0d:2f:c6:6a:b2:48:dd:8e:ec:2f:c2:36:
         ca:84:f4:d1:00:44:6f:2c:dc:ac:fa:80:89:09:a2:00:43:15:
         52:47:f5:66:9e:72:80:bb:6d:1b:90:df:0a:ab:f0:22:ad:54:
         4a:47:d0:06:8a:6f:c5:2b:d8:75:4f:9a:fb:87:bb:b2:39:06:
         c7:11:11:32:b5:33:d7:3b:9a:25:cc:12:db:6e:6a:5e:3a:11:
         d3:fa:02:cb:5f:03:ea:89:59:6b:18:3b:cc:03:e4:24:e8:0a:
         82:cc:94:09:33:48:ae:11:d8:15:fe:90:03:71:c1:bf:dd:fe:
         55:58:6d:c0:96:d6:39:d7:7f:8b:84:16:ed:41:ca:1d:f5:47:
         75:7e:8d:4c:2c:5d:6a:1f:3f:82:09:e5:3d:c3:88:be:be:44:
         1d:ab:2b:c7:2e:86:65:2c:05:06:b5:e1:a0:a3:1d:89:28:19:
         c5:08:42:f2:d3:39:a4:14:28:2b:5f:50:78:fa:83:c2:57:5a:
         f7:18:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:43 2026 by rpki-client