Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File:                     Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier:          eA/8lCkbkvxNuwDuZ8hnGqkG+/dQ9QF3/Q/XE1TMb5c=
Subject key identifier:   6F:71:AF:40:A5:60:D8:4A:DB:6E:83:E3:64:2B:D5:9B:7F:C5:DF:1A
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer:       /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial:       019EC2C9526C2F0E34F41D6FEC45FA46048A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number:          1962
Signing time:             Sat 13 Jun 2026 21:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:34 +0000
Files and hashes:         1: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: bzTDImZIraaH81dTwRbqapozLjkNOxFq/nlikY4ryBM=)
                          2: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
                          3: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
                          4: qEPeih-d-b5ejLQMGiGo36Qnv5w.roa (hash: 29cMx+RjFTGtIezVTC2prGXPBgmOX8SjbmN1gmtAbFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:52:6c:2f:0e:34:f4:1d:6f:ec:45:fa:46:04:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
        Validity
            Not Before: Jun 13 21:00:34 2026 GMT
            Not After : Jun 14 21:00:34 2026 GMT
        Subject: CN=6f71af40a560d84adb6e83e3642bd59b7fc5df1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:c4:dd:4f:35:75:6c:6d:a0:70:ce:8d:c5:
                    b2:af:c1:fc:f4:88:cd:81:aa:04:4a:e2:1b:dc:66:
                    fc:2d:21:ac:81:12:d2:ec:e1:59:d8:7b:f6:44:3c:
                    3a:af:af:49:6c:53:6d:3a:14:4f:53:80:8a:b9:30:
                    a1:99:c3:63:ae:04:a0:e7:5e:5f:36:01:3d:f2:61:
                    da:5c:4f:8d:9b:5c:65:c5:bc:77:d0:4b:f2:a9:06:
                    d4:0c:8e:04:1f:20:4c:b9:b4:1c:cc:a5:45:6e:3e:
                    8c:90:36:4d:5c:f2:e3:a6:7d:a9:22:4f:d1:f7:14:
                    af:1f:06:73:54:ec:39:57:11:27:2b:2a:99:a6:60:
                    da:a4:33:77:da:1f:a0:fd:89:5d:7f:6f:e5:5b:58:
                    17:67:46:88:cf:f2:ae:1a:2c:85:35:3b:91:13:ec:
                    6d:e3:bf:6c:e5:1f:3e:0a:21:1f:74:24:38:12:43:
                    9e:45:cc:1d:c3:ac:5e:23:24:97:e9:23:0a:1c:8b:
                    0c:99:d0:3c:0f:38:34:c4:ff:0e:a6:46:9f:fc:70:
                    a0:a4:a3:74:38:75:19:2f:24:82:01:bb:a4:97:82:
                    3c:a8:b8:54:78:98:41:74:75:26:b5:89:bb:fc:64:
                    d5:01:43:98:a4:5f:24:93:97:c3:23:56:af:90:25:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:71:AF:40:A5:60:D8:4A:DB:6E:83:E3:64:2B:D5:9B:7F:C5:DF:1A
            X509v3 Authority Key Identifier:
                keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:23:4e:05:48:a5:98:bf:1c:e4:75:8d:30:bf:d6:b7:82:1f:
         25:42:f9:e1:e9:5b:f4:46:3e:a5:51:47:e9:fe:31:c3:cf:93:
         28:46:20:69:b9:fe:b5:42:83:6e:ae:b6:55:95:56:13:77:28:
         52:83:a5:3e:02:e4:e0:31:9b:c4:ea:98:a8:63:91:54:3c:22:
         37:f9:27:18:26:19:bc:c5:c7:af:4b:43:7e:18:2b:f7:07:fa:
         3b:80:cd:ec:19:94:4a:f9:e8:24:bb:1d:48:90:64:4c:32:f6:
         93:ba:9a:c7:5a:94:35:05:b1:d7:39:4a:42:28:eb:97:f7:2c:
         1c:9b:a0:58:6b:49:cf:c1:f3:4b:93:57:16:46:35:ca:34:f2:
         f9:ee:55:30:a0:57:82:d2:f0:2c:c3:86:71:e4:9f:32:a5:17:
         b8:84:24:1b:e4:82:07:68:1c:5d:6d:98:86:52:53:37:97:56:
         e3:81:24:a5:6e:ed:38:f6:4a:d3:38:b3:da:e1:e3:88:ba:ee:
         8f:ec:33:50:b1:40:56:fc:36:70:43:c4:c5:84:67:f8:cd:5d:
         0b:d9:ad:04:d5:be:ce:83:32:00:27:45:0e:d9:75:fe:42:e4:
         6f:50:74:b1:ec:c1:70:f7:bd:15:85:ea:8c:fb:8f:ce:95:67:
         f9:94:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:20:56 2026 by rpki-client