Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File:                     Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier:          MTBD6VJRV0ghvoqCAs4RJmDkevySeswLdn0Y3zMx7Jk=
Subject key identifier:   16:8F:F0:93:2C:8E:20:AF:2A:1A:DC:E9:08:D8:6B:7E:1E:D8:78:96
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer:       /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial:       019FAC76F44A464842CBB44422CFDA533ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number:          19DB
Signing time:             Wed 29 Jul 2026 06:01:44 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:44 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:44 +0000
Files and hashes:         1: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: JgsAT6nLtktZ+NraGCIAaVFziLpZ0iOPhhEZSAnHa/o=)
                          2: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
                          3: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
                          4: qEPeih-d-b5ejLQMGiGo36Qnv5w.roa (hash: 29cMx+RjFTGtIezVTC2prGXPBgmOX8SjbmN1gmtAbFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:f4:4a:46:48:42:cb:b4:44:22:cf:da:53:3a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
        Validity
            Not Before: Jul 29 06:01:44 2026 GMT
            Not After : Jul 30 06:01:44 2026 GMT
        Subject: CN=168ff0932c8e20af2a1adce908d86b7e1ed87896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:47:57:63:a3:77:58:32:7c:5b:07:29:4d:
                    34:2b:14:0d:ca:2c:2b:f2:91:0d:30:b8:6e:c7:8e:
                    8b:06:ff:7d:e4:d4:a9:a4:f5:6e:e1:40:b0:8b:75:
                    09:10:5e:b7:af:65:ab:66:fc:a2:a1:df:5f:18:1d:
                    3d:6a:bb:b7:d2:2b:a2:23:fc:62:84:27:4c:c0:1a:
                    e5:ab:dc:35:42:49:4c:3e:90:69:31:46:d0:36:3a:
                    ea:e9:c7:2e:74:7a:8e:c3:21:d2:72:22:0e:37:0b:
                    00:f7:1b:a8:a1:9d:8c:47:2e:67:5d:9c:b3:a4:d6:
                    d4:cb:4b:b4:e9:fb:ff:9f:71:a7:b2:a5:dd:57:39:
                    f5:6c:1f:a2:28:89:5e:86:36:3d:3d:c4:eb:39:93:
                    a4:d8:dd:d4:1e:bc:d8:10:b9:91:6c:9f:5b:a5:d9:
                    c4:74:7b:58:90:5f:1d:08:fc:e1:fd:ad:ff:f9:8e:
                    7d:c1:49:27:c1:33:97:2a:d5:54:5c:25:61:80:11:
                    80:ea:af:e3:5c:2d:8e:ab:c6:af:5b:e5:f1:49:21:
                    b9:33:2d:79:1c:62:b2:58:97:7f:46:4f:39:88:74:
                    18:08:65:01:19:c5:cd:b5:4a:44:e9:3d:71:72:77:
                    e0:eb:a3:31:56:d2:34:0d:af:b2:eb:a9:51:a1:9f:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8F:F0:93:2C:8E:20:AF:2A:1A:DC:E9:08:D8:6B:7E:1E:D8:78:96
            X509v3 Authority Key Identifier:
                keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:d0:94:4d:e2:ed:73:62:da:e2:c2:93:71:f6:69:ae:f1:
         38:e0:8e:dd:c4:3f:89:70:45:6c:1c:dc:b3:d8:bb:a8:94:fe:
         d8:10:da:ee:36:33:1e:9a:f4:1e:96:2a:55:08:4c:06:a1:7f:
         c6:b3:b8:50:bf:e4:73:40:4a:60:6e:12:13:e1:66:85:50:3d:
         91:40:b0:b3:9c:57:2f:d3:12:29:cc:56:c9:f2:cb:91:cc:40:
         ff:61:fa:e7:61:1f:34:ed:32:af:2b:d8:28:32:c7:19:b1:d9:
         2c:c2:a2:41:f9:44:e5:74:3a:c6:84:6e:33:ad:c0:97:35:e7:
         08:59:1a:34:87:af:35:f5:d4:1d:66:ef:70:f8:ba:9a:bf:4e:
         06:b2:16:0b:0d:19:1f:ae:2d:c8:1e:28:e6:62:c8:be:67:0f:
         97:72:36:ff:6a:23:f1:0c:e2:80:2c:5f:dc:ee:4e:3d:e6:c8:
         0c:9f:1b:fe:88:73:b1:9e:5b:49:b8:bf:10:97:02:e0:ac:b8:
         80:5c:1f:47:89:2d:ac:5a:b1:05:69:17:9f:12:2b:14:b7:22:
         52:0c:ef:da:d3:7e:97:ef:e7:74:ae:24:f8:48:b7:03:5e:4e:
         8c:5a:05:5d:fa:51:90:f6:ef:ae:01:2f:29:8f:91:52:66:20:
         85:ec:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:22 2026 by rpki-client