Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File:                     HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier:          Ag60FLW0wxPTWUAu7nnBNjQyemksZ5hpjbDqBiy4FB0=
Subject key identifier:   88:A6:1A:AF:F9:14:B3:31:43:78:B7:BA:43:3D:1D:0E:44:A4:9D:AA
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer:       /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial:       019FAB9A3CB762608386F623FD978A4CA039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number:          1129
Signing time:             Wed 29 Jul 2026 02:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:39 +0000
Files and hashes:         1: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: 8QRR/VnAQglLbzjJAfnq+lddyXhHACg2SKVJadpxwc0=)
                          2: XWBsB_cZ5qidLCmlV0HYPquJmRY.roa (hash: K9lGKjaA0sTZUshIhYC2Vc0Nnn9645Zh7HW4fKMC9/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:3c:b7:62:60:83:86:f6:23:fd:97:8a:4c:a0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
        Validity
            Not Before: Jul 29 02:00:39 2026 GMT
            Not After : Jul 30 02:00:39 2026 GMT
        Subject: CN=88a61aaff914b3314378b7ba433d1d0e44a49daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:73:97:a6:95:02:ee:a9:cc:c3:32:d0:30:af:
                    bc:56:35:20:09:55:a3:80:9a:13:d0:4a:0a:53:41:
                    86:58:69:a1:71:9b:a8:06:f5:09:f4:bc:1c:a8:50:
                    02:9a:27:af:d3:ba:84:6c:a3:8d:5d:87:75:40:ea:
                    f3:b2:2e:ee:0e:74:f3:2c:17:03:3b:cb:c0:ae:4c:
                    fc:cf:d7:8e:e3:ce:9a:3d:98:3f:28:9f:1a:a2:3a:
                    61:e2:cf:58:c1:c6:da:f5:8f:38:2c:c0:2c:54:78:
                    0d:b9:bc:9c:f3:82:e5:cf:11:62:02:9c:d3:75:05:
                    5c:a5:6b:46:ce:56:20:8a:f2:44:b1:b4:b9:bf:ba:
                    59:4e:c5:3f:4f:0c:b0:34:1a:5c:e7:ca:cd:82:c4:
                    e4:49:8c:4a:8c:04:4c:89:f2:7d:94:ef:19:c9:30:
                    87:13:46:70:e1:da:07:b7:30:33:f2:1b:db:1b:18:
                    65:58:62:62:24:eb:ed:f2:38:1e:e0:d4:e5:35:99:
                    2f:d7:0f:02:fd:9a:5d:50:b3:16:35:16:dd:d6:bb:
                    0a:76:68:31:ab:4b:38:ea:85:f6:c4:3a:9e:e9:4b:
                    50:e6:61:09:3b:20:db:20:d0:78:83:36:59:c2:35:
                    7b:fd:04:d5:02:25:75:43:ed:78:78:73:f0:11:bb:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A6:1A:AF:F9:14:B3:31:43:78:B7:BA:43:3D:1D:0E:44:A4:9D:AA
            X509v3 Authority Key Identifier:
                keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:82:1b:72:2f:cb:06:2a:df:fc:4f:89:cf:21:e8:dd:f6:36:
         1e:81:de:cf:6e:cd:ab:21:d5:80:9f:19:87:3a:fe:fd:13:f3:
         c4:65:de:02:4b:7e:ec:5e:47:f6:d0:4d:82:49:9e:36:3d:d9:
         80:f5:04:1e:c1:7b:01:5a:b7:64:23:ca:4f:c5:55:ee:71:02:
         c4:59:46:62:ef:53:c7:e8:3e:f7:6f:69:6c:ac:4e:82:59:a3:
         ac:45:c2:06:36:bf:05:1d:ee:1a:cd:8c:90:ab:2b:3c:e4:5a:
         3e:e6:48:f9:a8:1d:c4:40:12:65:42:fe:18:e1:21:33:6c:23:
         2a:27:90:a1:90:2a:df:32:1b:f3:81:51:2d:12:c5:6d:e0:5b:
         6e:5c:cb:e9:ad:d3:52:d6:3f:4d:9b:11:a4:b4:88:d6:e8:80:
         39:ec:41:9c:94:e5:62:ac:5b:d5:5a:8e:4a:d2:0c:cf:a6:6d:
         7a:27:d1:9c:90:40:8b:8f:5f:c6:6c:cc:4a:41:32:fa:35:4e:
         7e:36:3b:4a:2b:34:62:29:55:7d:9b:5c:42:a3:8f:a5:06:51:
         12:24:b4:bb:86:0f:19:98:0a:56:46:ff:6b:12:ed:e3:a7:f2:
         32:5f:aa:d1:40:61:db:58:46:58:33:96:b2:fc:ad:07:f7:94:
         92:d4:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:57 2026 by rpki-client