Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File:                     hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier:          R78Mo1fYPTEtsLduevS8FJpr/pMip7kVBBWDMixeS34=
Subject key identifier:   46:7A:BF:D2:8A:42:7A:82:28:0A:EF:2D:31:2D:44:75:62:82:DB:5B
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer:       /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial:       019FAB2C1006F0D302FB22C32162F3D58935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number:          19A9
Signing time:             Wed 29 Jul 2026 00:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:19 +0000
Files and hashes:         1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
                          2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: uNewfjPmvkaD5xuzPErkXVqzVDhWLLXQMLGD2FEdiuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:10:06:f0:d3:02:fb:22:c3:21:62:f3:d5:89:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
        Validity
            Not Before: Jul 29 00:00:19 2026 GMT
            Not After : Jul 30 00:00:19 2026 GMT
        Subject: CN=467abfd28a427a82280aef2d312d44756282db5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:f2:ca:04:04:b1:de:3e:e6:2a:0f:b7:a2:
                    34:d6:cc:80:b3:e0:96:2e:c3:03:e6:41:54:a4:c3:
                    f9:93:b1:a2:3d:98:22:7d:94:ef:1d:b8:b2:4a:f8:
                    e2:34:4b:28:b2:ef:e6:69:d8:36:7d:2d:4b:21:a9:
                    04:c8:31:9a:1f:c1:3d:da:a0:bf:6d:91:6b:91:d5:
                    7a:91:f4:5d:5a:65:50:7c:e1:b1:6f:f8:cc:44:33:
                    94:20:33:f2:da:16:3d:72:16:a8:d7:61:e5:4c:a3:
                    04:31:47:c3:c3:2e:84:29:f1:b4:84:88:09:60:fb:
                    0e:e5:b2:5f:47:5f:6b:2b:ac:28:09:4c:bd:a3:c4:
                    18:0f:46:2b:f3:fe:1a:8a:aa:4f:e1:87:f3:74:53:
                    41:22:bc:f1:71:5e:3c:5a:fd:96:e8:79:8d:2f:51:
                    90:3c:c8:e9:fd:d5:54:68:83:8b:71:c3:5f:44:e6:
                    e1:11:4e:d8:f9:a9:c6:32:a4:fe:b2:9a:39:25:1d:
                    bd:29:a7:09:0f:b7:cd:3a:bc:67:8e:a4:ec:e2:9d:
                    40:2a:9b:a2:8e:7a:96:21:11:d7:6e:6f:98:71:1b:
                    7d:f4:a8:0d:4a:01:e7:b9:d6:55:4e:83:2d:e5:16:
                    25:f0:5e:3f:28:79:c3:0a:7f:0c:ec:3b:f9:49:79:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7A:BF:D2:8A:42:7A:82:28:0A:EF:2D:31:2D:44:75:62:82:DB:5B
            X509v3 Authority Key Identifier:
                keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:bc:29:16:28:39:52:bf:48:99:c2:59:fb:83:cf:6b:95:
         84:7e:b2:b0:78:ec:f1:fd:e2:0d:ec:c3:26:fb:6c:33:db:bf:
         77:c4:72:e4:01:56:c1:ec:36:07:03:86:f1:40:3c:0c:8e:2b:
         cb:63:72:23:c4:97:af:a2:2d:5f:96:4c:f3:8d:d4:ea:c2:5b:
         1f:42:7b:b9:af:e7:a5:1d:a5:4c:ef:65:b9:6f:f5:b2:2b:ac:
         10:d2:0a:93:92:93:d5:56:d2:20:5d:da:f3:d0:41:99:95:b1:
         81:4a:fe:8c:8f:0b:03:08:25:9c:ca:8f:35:9f:05:cb:63:3e:
         fc:97:55:63:e2:25:81:7a:17:aa:90:9a:69:19:81:2e:98:a6:
         5e:f0:fd:99:4e:f5:1e:36:59:87:0b:78:0c:2e:67:79:9e:56:
         3d:c2:4d:0e:d1:bb:14:27:8e:c1:53:46:51:6e:56:2b:63:c4:
         0e:41:0a:66:de:6d:7e:98:a4:ca:68:6d:fe:4c:be:fa:d0:76:
         34:6d:a8:da:b6:aa:cd:d8:86:c1:e2:29:e6:e0:a8:a4:a7:dd:
         5f:18:2f:f3:8f:83:09:16:55:34:e5:05:0b:bc:7a:3f:ea:12:
         24:69:1a:89:0b:e8:73:4f:6c:9d:89:4e:99:c3:a5:99:d6:6d:
         79:4e:4f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:48:26 2026 by rpki-client