Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
File:                     HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json)
Hash identifier:          E06cgVG5igD8nZ8dZQWDGhrf07W1oJhlJziEcrZCHkk=
Subject key identifier:   5D:A7:BF:83:08:04:3C:2C:93:8E:E6:71:99:AE:AE:8D:A5:06:B4:79
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Certificate issuer:       /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial:       019EC30010E4273F19B383CB3D0C70192103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
Manifest number:          1429
Signing time:             Sat 13 Jun 2026 22:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:21 +0000
Files and hashes:         1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=)
                          2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=)
                          3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: ACsw64y+qw8ZAJZuOK8LfGMb9qt/T6pAHMwLKbl8qn4=)
                          4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=)
                          5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=)
                          6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=)
                          7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=)
                          8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=)
                          9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=)
                          10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:10:e4:27:3f:19:b3:83:cb:3d:0c:70:19:21:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
        Validity
            Not Before: Jun 13 22:00:21 2026 GMT
            Not After : Jun 14 22:00:21 2026 GMT
        Subject: CN=5da7bf8308043c2c938ee67199aeae8da506b479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:5e:6e:89:44:f7:e0:bf:fd:26:2e:2f:02:
                    3e:16:46:22:21:02:29:54:6c:1a:9c:0c:46:7f:1e:
                    d5:f4:08:ac:ca:51:01:2a:ee:0a:5b:b0:f9:d9:d4:
                    4f:46:04:cf:b6:ac:cf:01:ab:a1:29:48:6e:95:ac:
                    11:5f:19:c2:89:fa:26:02:e8:61:b2:f5:1e:45:00:
                    08:53:23:e7:e6:1b:24:a6:d7:ef:22:32:16:3f:74:
                    b0:40:c7:81:8d:2b:34:89:f2:59:cc:63:d8:f3:d6:
                    cf:87:cb:15:2e:e2:d8:17:b9:d0:d1:79:ae:67:94:
                    d3:b2:67:c8:19:19:ee:41:ac:fa:39:f2:61:4b:e2:
                    50:9d:e0:14:5e:b7:67:89:be:45:f3:41:5b:b8:8d:
                    19:6f:32:28:c8:fd:fa:af:fd:e1:65:61:21:f8:ab:
                    d9:26:f0:2f:b7:b8:da:19:16:90:4e:ff:9b:95:fc:
                    8b:b6:bb:2d:2b:aa:d8:f5:7a:9d:87:59:1a:7b:59:
                    13:8a:32:24:36:57:48:42:93:76:f3:e4:63:8a:fb:
                    55:37:b7:87:45:bd:17:c3:8b:cc:db:3d:6f:1c:d8:
                    88:09:85:c2:82:0d:53:bb:d8:8f:37:54:04:ee:41:
                    1f:69:d4:02:f4:c8:0e:8a:14:a3:35:76:09:67:76:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A7:BF:83:08:04:3C:2C:93:8E:E6:71:99:AE:AE:8D:A5:06:B4:79
            X509v3 Authority Key Identifier:
                keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:7a:07:49:fb:eb:8e:95:f6:1d:c7:04:cf:c3:ac:61:8f:
         95:77:ef:b0:08:ce:f8:bc:18:21:f4:27:b1:02:d9:e6:4d:08:
         33:70:55:08:bc:e1:e8:c5:5f:85:b9:f4:25:5c:15:16:3e:bc:
         c6:dd:5b:64:cb:fe:5a:75:6e:5b:24:93:3a:9a:e2:92:20:b7:
         e5:c9:4b:4d:35:67:94:29:20:a2:2b:c8:ba:6a:5f:1e:6b:4d:
         3d:c9:74:6c:95:90:6e:f4:22:de:a8:ae:22:96:ea:80:bd:e2:
         34:07:94:b7:ce:83:0a:ce:26:da:43:c3:f3:9e:30:0a:3f:6a:
         76:62:e6:c1:1d:a6:91:88:3b:04:a3:26:af:c6:e7:8e:95:71:
         2a:58:9f:99:02:40:05:6a:2d:32:84:ad:89:ba:87:8a:fa:b8:
         ce:25:be:ef:23:53:ad:8e:df:55:ed:bf:6c:4b:85:9f:45:af:
         ee:4b:41:37:bc:02:cb:c0:ad:a9:23:6b:88:c2:74:4b:6e:3c:
         ea:d5:6f:4d:a8:d7:62:c9:1e:14:76:77:e4:a1:b4:a3:65:f3:
         d2:a0:1c:dd:30:a0:ff:f6:dc:34:20:05:7a:59:72:35:38:26:
         8a:ed:d7:a5:64:92:bc:0f:72:7d:84:7c:d8:37:7f:2b:94:83:
         0d:6c:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:53 2026 by rpki-client