Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File:                     hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier:          /kWDS70WuNuCUVWlb70nBagJ+pYD3hdUeJoizgn1YHg=
Subject key identifier:   7D:36:FB:28:10:18:F3:31:B5:6F:CB:65:7B:C2:0B:F8:7A:5C:23:BB
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer:       /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial:       019FAB2C83C4E2A72F3D4655A2B78499045D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number:          1868
Signing time:             Wed 29 Jul 2026 00:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:48 +0000
Files and hashes:         1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
                          2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: GRpIm1+kKnjI0To3MhdDGG1QiKPZ+9QRW65w68UWYqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:83:c4:e2:a7:2f:3d:46:55:a2:b7:84:99:04:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
        Validity
            Not Before: Jul 29 00:00:48 2026 GMT
            Not After : Jul 30 00:00:48 2026 GMT
        Subject: CN=7d36fb281018f331b56fcb657bc20bf87a5c23bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:5f:ea:ef:e7:9c:ad:a4:62:a2:01:2f:b1:
                    bc:4d:62:cb:cc:f6:06:fc:6c:74:b5:cf:0f:bb:c2:
                    78:f7:c2:8a:59:b6:99:45:e3:d4:77:bf:fb:c3:1b:
                    ce:0f:49:47:25:fd:00:94:f7:f5:5e:b1:52:db:91:
                    f3:27:31:da:2c:39:8d:7e:13:da:e2:45:ff:4d:6c:
                    0d:af:b3:ca:41:34:b8:03:c0:eb:56:f4:7d:df:ad:
                    55:e3:51:4f:93:0e:08:89:cc:97:a7:84:1f:6e:d1:
                    6e:b6:bc:04:68:0e:f3:46:7d:34:5e:37:a4:4d:d2:
                    6c:26:2a:a1:c7:bc:77:08:9e:66:44:7b:26:21:17:
                    22:60:5f:33:f5:3b:98:32:56:ec:1b:e6:df:c2:20:
                    a5:df:f2:b6:55:a9:08:72:03:ad:5e:d5:08:90:c7:
                    40:74:ce:75:d7:ee:10:b6:f0:ae:27:e9:7d:61:b5:
                    30:84:00:04:6d:84:a4:b4:39:78:a0:0d:22:85:5e:
                    f7:bd:ee:96:7f:9c:09:f4:93:64:30:38:bd:86:26:
                    6c:40:7f:8b:0a:e3:a7:4a:a1:80:28:75:d5:0d:fa:
                    19:63:8e:1c:85:8e:a3:a1:c0:5a:73:6e:3e:f0:f2:
                    37:2c:d3:bf:5d:bb:0a:17:62:30:86:e4:b1:f1:4c:
                    68:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:36:FB:28:10:18:F3:31:B5:6F:CB:65:7B:C2:0B:F8:7A:5C:23:BB
            X509v3 Authority Key Identifier:
                keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:79:a0:0d:99:cc:c6:d6:2f:93:ad:4c:22:99:98:33:9e:
         63:ee:31:2e:f0:f1:55:43:76:a3:00:2a:ef:36:1b:89:ee:50:
         aa:ad:f1:ef:c8:e8:99:ac:a6:22:d3:40:04:d8:dd:89:a0:93:
         c9:02:69:5f:6e:be:1d:7b:ef:dd:0a:23:75:ea:13:d9:6b:5d:
         d0:c4:9c:9e:dd:83:a0:73:63:af:dc:a6:ea:4d:7c:99:25:de:
         e9:c0:20:61:47:bf:24:8c:6a:d6:27:29:49:21:a8:15:a8:78:
         1c:20:2b:26:2d:32:0f:f7:7f:80:24:10:4c:a2:af:a3:67:74:
         10:0d:3d:55:59:c0:9c:e8:e3:26:fa:91:1f:e0:f6:96:a2:7c:
         46:01:22:40:c8:c2:0e:0d:e8:c4:04:09:0b:6d:69:6a:9f:c3:
         91:0e:51:56:89:9d:50:4e:66:4a:62:bb:34:30:8f:2a:cf:0f:
         54:40:ac:da:1e:57:bf:ac:17:76:be:58:c9:e1:4f:ab:ae:74:
         87:10:1e:c7:07:59:97:54:86:8b:0f:3f:c3:88:40:0c:9a:0a:
         b3:0f:f8:be:d7:c0:7d:3f:81:86:00:cd:00:19:03:a2:95:1e:
         33:9d:4e:41:9c:63:19:4a:ea:91:30:2e:05:6d:85:3f:51:98:
         f7:be:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:24 2026 by rpki-client