Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File:                     aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier:          z1Nd2XDe4qO8dlJE0mykO+qEWnZI+D2jo48T7UeubGg=
Subject key identifier:   0F:12:F5:B5:05:12:12:1E:4D:B1:12:5A:25:F3:2D:33:A3:86:40:FD
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer:       /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial:       019FAA19B43DB303F578454D5B1A95B75169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number:          1506
Signing time:             Tue 28 Jul 2026 19:00:38 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:38 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:38 +0000
Files and hashes:         1: H3BcLlLdlK5OktIlKB08CLOJceQ.roa (hash: gCov3Lq4RydmSmoM9Ym4TkvogcYAidCIuxal3h4GAM8=)
                          2: K01hEvp_oFx3qc2-IUwd8VFE1hI.roa (hash: cm5jfcRdjk0yhdi3HnxUE7FN1POO9527wRj/2D2vjMs=)
                          3: P6dX7w5DhwlzNU979iFd9YDU0uI.roa (hash: UBskImMtpaHQaupcjp821thacxNepjpaa64/vY6YASM=)
                          4: UTSVX3B31qE6acA-2M3EInvqjqs.roa (hash: 2V2E0vmwbEv4vLiGDwB2fco3T0rwdLt7wl4GPwkBEC8=)
                          5: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: ZUPfVBu65bgZXJCRlpY7ZjMdhN573I8UZmwyz1G0INY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:b4:3d:b3:03:f5:78:45:4d:5b:1a:95:b7:51:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
        Validity
            Not Before: Jul 28 19:00:38 2026 GMT
            Not After : Jul 29 19:00:38 2026 GMT
        Subject: CN=0f12f5b50512121e4db1125a25f32d33a38640fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0c:3c:39:b6:5b:87:3b:f4:ac:aa:ce:b6:97:
                    63:50:75:6c:9c:e9:d0:69:84:89:a5:6c:7b:f7:0d:
                    5a:6c:69:34:4a:2e:36:29:56:5c:35:bf:ee:60:77:
                    2e:ca:03:09:7a:bd:64:84:ce:6f:65:82:8f:12:ac:
                    ec:a8:ae:08:32:70:e4:bd:22:c0:d4:b3:a3:f4:4c:
                    2c:7f:4f:97:77:54:78:28:d1:87:40:32:d0:ef:fa:
                    ea:0b:c1:72:63:58:ef:5b:f5:66:f5:61:b0:ba:e3:
                    c8:8e:c6:a5:24:c5:77:8a:bd:c2:a7:02:74:40:12:
                    bb:60:cc:c1:e7:e8:37:2f:44:46:71:a6:37:33:a2:
                    75:5f:4f:08:d4:94:22:3d:48:58:17:17:9e:6d:11:
                    38:c8:7e:f8:f1:a6:09:b5:1b:11:90:02:a5:33:2a:
                    7e:91:0d:aa:97:0b:de:40:6c:d0:ef:3e:29:69:93:
                    39:df:e2:32:04:c8:01:7e:4f:e3:e4:ba:64:8f:19:
                    f7:56:61:e3:6a:17:7b:ca:aa:ed:fc:d2:94:38:82:
                    b4:72:e0:de:d5:aa:cb:bb:ed:54:66:cf:a2:fd:fd:
                    29:2c:b4:a1:46:a4:21:ff:39:ff:2c:da:64:7b:38:
                    20:1a:ae:39:86:e4:98:a8:e4:cc:3b:5e:21:f5:ae:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:12:F5:B5:05:12:12:1E:4D:B1:12:5A:25:F3:2D:33:A3:86:40:FD
            X509v3 Authority Key Identifier:
                keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:10:b1:a5:2c:21:ae:4e:4a:72:ad:66:42:94:c3:d3:fc:73:
         4c:35:0c:29:16:0e:59:6e:9c:21:ae:d6:eb:9d:87:30:65:85:
         bc:01:2c:39:8d:1e:09:f8:5a:33:96:86:1c:f5:ad:a4:8c:a6:
         c4:b3:d0:65:2a:c6:30:4f:c5:34:9d:e6:8d:23:65:bd:2d:5d:
         07:53:bb:58:ea:16:72:cf:ab:46:48:c0:4d:be:62:c0:17:37:
         38:3a:15:c4:70:1c:63:87:d4:8b:6e:79:c5:b5:02:69:24:da:
         58:76:49:ca:74:e8:0f:22:83:c6:9b:45:b8:0d:b1:e3:25:f6:
         a5:39:50:94:d3:0a:08:c8:88:48:40:e3:84:55:80:a9:68:ce:
         e4:c1:a6:76:ff:3e:3a:cd:8a:ea:6c:e5:8e:af:81:c2:4a:0a:
         8c:7c:d9:f5:e8:cc:34:65:2f:35:eb:52:95:af:9e:fc:55:95:
         3b:b0:e0:76:08:05:02:c3:fb:25:8d:1a:06:a8:ec:52:85:8f:
         a2:a7:22:a2:a4:28:8c:d5:94:97:3c:78:ba:84:82:f7:2c:09:
         ea:b7:98:d5:37:86:d1:a4:a5:b1:b8:90:8b:f3:3e:e3:d8:96:
         87:35:8a:ca:5c:0a:84:01:32:2e:48:be:23:e2:90:21:06:d3:
         2b:e6:75:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGbQ9swP1eEVNWxqVt1FpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NzcyNmQzOGZjZjJhN2ZiYmI3YmZjMjhkNjNmZTM1Nzll
ZDIxMWQwHhcNMjYwNzI4MTkwMDM4WhcNMjYwNzI5MTkwMDM4WjAzMTEwLwYDVQQD
EygwZjEyZjViNTA1MTIxMjFlNGRiMTEyNWEyNWYzMmQzM2EzODY0MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ww8ObZbhzv0rKrOtpdjUHVsnOnQ
aYSJpWx79w1abGk0Si42KVZcNb/uYHcuygMJer1khM5vZYKPEqzsqK4IMnDkvSLA
1LOj9Ewsf0+Xd1R4KNGHQDLQ7/rqC8FyY1jvW/Vm9WGwuuPIjsalJMV3ir3CpwJ0
QBK7YMzB5+g3L0RGcaY3M6J1X08I1JQiPUhYFxeebRE4yH748aYJtRsRkAKlMyp+
kQ2qlwveQGzQ7z4paZM53+IyBMgBfk/j5Lpkjxn3VmHjahd7yqrt/NKUOIK0cuDe
1arLu+1UZs+i/f0pLLShRqQh/zn/LNpkezggGq45huSYqOTMO14h9a5yCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8S9bUFEhIeTbESWiXzLTOjhkD9MB8GA1UdIwQY
MBaAFGh3JtOPzyp/u7e/wo1j/jV57SEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAt
NGIyZGExOTdhN2U2LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAtNGIyZGExOTdhN2U2
LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhCxpSwh
rk5Kcq1mQpTD0/xzTDUMKRYOWW6cIa7W652HMGWFvAEsOY0eCfhaM5aGHPWtpIym
xLPQZSrGME/FNJ3mjSNlvS1dB1O7WOoWcs+rRkjATb5iwBc3ODoVxHAcY4fUi255
xbUCaSTaWHZJynToDyKDxptFuA2x4yX2pTlQlNMKCMiISEDjhFWAqWjO5MGmdv8+
Os2K6mzljq+BwkoKjHzZ9ejMNGUvNetSla+e/FWVO7DgdggFAsP7JY0aBqjsUoWP
oqcioqQojNWUlzx4uoSC9ywJ6reY1TeG0aSlsbiQi/M+49iWhzWKylwKhAEyLki+
I+KQIQbTK+Z1pw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:14 2026 by rpki-client