Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File:                     hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier:          R76VtnAhqMGoAo6Smbbqptd++XVsI906dBMzHeoqBOk=
Subject key identifier:   8E:32:E4:37:8C:FA:57:9F:EC:01:CD:F5:CF:23:DC:3A:A2:4D:D3:27
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer:       /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial:       019EBE47BF7FB8223E779F6461EBD55322EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 00:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:33 +0000
Files and hashes:         1: 3iVHpX-aI-uO_RI8pv6ypgQCjZo.roa (hash: OKIRtCTmfn3CX5OuE5iLMX8UqmpBTkzwx6j0pTi8lPo=)
                          2: 4Y83xopR719SxF-9mkYVsuZPdvU.asa (hash: /BV9IR8XDZzpSpeeWi2TROvl4WlMh3YhpQRzOXZVJPc=)
                          3: 55OoBUFOM9TPPI-OW3WxlpfgGa0.roa (hash: ou1iN6OdQpzMZzlgWVrt2SECYX2pZ/j1SqKBwaQnptk=)
                          4: Ke8dRoJirH5sttFYCwiO0qmo8d8.asa (hash: 9z4rwbkYRmg1s501aTWgWzIblUDGnI/cKBSZyE4AZAU=)
                          5: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: 2sXgIEIYm0m9Lo7kJBYQjPwETNDgYgqBKCHRrc83Wkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:bf:7f:b8:22:3e:77:9f:64:61:eb:d5:53:22:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
        Validity
            Not Before: Jun 13 00:00:33 2026 GMT
            Not After : Jun 14 00:00:33 2026 GMT
        Subject: CN=8e32e4378cfa579fec01cdf5cf23dc3aa24dd327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a6:79:52:d6:36:04:cf:8e:44:fd:93:c2:fc:
                    e8:08:24:77:6e:97:b1:38:bf:9a:1d:b5:23:65:c5:
                    6a:fe:de:9e:22:4d:be:9d:9e:00:bc:2b:c8:79:17:
                    46:24:c8:fc:5c:7e:59:2e:ba:70:10:ca:0b:57:7b:
                    8a:63:58:ff:89:02:45:4d:f8:6c:b5:a9:32:ab:11:
                    81:4f:29:0e:a7:b2:7c:96:82:75:f5:a1:c5:3b:ca:
                    e3:b6:a6:bb:81:34:49:7b:aa:13:60:ae:33:23:0a:
                    2c:38:78:08:cd:4e:8a:24:f1:94:ec:2b:68:e9:9a:
                    fa:7e:4e:72:b8:30:5a:2a:35:91:4d:d7:14:54:7b:
                    1f:b4:97:79:dd:f4:d9:ad:f2:4d:d6:dd:1a:c6:2a:
                    35:12:b5:5a:e9:16:89:23:29:bf:32:ec:f3:89:6b:
                    93:36:1e:8f:31:95:19:fd:b4:ff:c7:3d:8e:2d:5a:
                    f8:c7:ac:99:a1:fb:95:93:a7:ff:af:d5:92:a7:ec:
                    74:6d:1a:19:d5:fc:8a:33:ef:ba:3a:d6:81:62:9d:
                    9b:5b:a4:f4:d3:d8:87:36:50:3c:9e:59:36:3a:e1:
                    d0:cd:4a:bc:0d:83:70:4c:2b:90:90:b6:fd:38:89:
                    0b:09:17:a6:66:cd:89:7b:f1:2b:78:61:ff:61:1e:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:32:E4:37:8C:FA:57:9F:EC:01:CD:F5:CF:23:DC:3A:A2:4D:D3:27
            X509v3 Authority Key Identifier:
                keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:52:cf:5c:10:18:7b:47:31:5b:e4:41:c7:c0:ab:40:38:38:
         ba:ae:f7:74:b8:b3:12:33:37:da:db:84:22:d9:87:1f:a0:fe:
         5b:2e:e4:b5:14:ca:80:4b:1e:cb:6c:be:21:23:20:e5:52:bf:
         72:38:35:23:5d:45:c6:f1:46:c8:da:47:8a:b1:46:0a:ca:ac:
         3a:d3:b1:f2:b8:b9:94:3a:0a:37:5c:8e:4b:20:ae:b9:95:b1:
         6b:56:ef:3d:2f:83:b9:7b:85:b7:a7:11:9e:07:3f:eb:ea:d5:
         8e:1e:1a:dc:5d:c0:b0:dc:df:66:23:9f:1e:80:88:89:f2:b7:
         e1:39:97:37:37:c9:3e:43:fd:9d:37:b6:01:78:0f:dc:dd:18:
         1a:b7:0c:da:e6:80:9f:41:f0:9c:d5:91:af:ee:10:35:96:0c:
         c9:33:6b:99:e3:e6:72:1b:0c:c2:fb:cf:9b:03:50:2d:ef:06:
         8e:98:84:66:a3:cd:7a:13:c2:01:6e:d5:93:fd:b1:3c:0d:a8:
         18:9a:d6:bd:5e:53:95:6a:2d:43:b5:d1:0a:d4:91:93:25:9a:
         5b:a4:f7:4d:21:c6:a5:a6:75:45:f6:26:c2:eb:c2:eb:5e:d2:
         90:7f:80:50:1c:37:80:fe:ee:60:29:eb:27:94:d3:ae:1b:ad:
         52:fc:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:39 2026 by rpki-client