Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File:                     HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier:          oVKo+P1FT+sMw+C6a3TOG7JC66SpepYkfSJo3ZuRWtE=
Subject key identifier:   24:38:BC:AE:C8:06:CF:3D:9A:B2:03:29:91:4F:D1:FB:9A:6C:2B:69
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer:       /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial:       019EC149308F16B42B29C3C84EDCEACC880B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number:          1557
Signing time:             Sat 13 Jun 2026 14:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:59 +0000
Files and hashes:         1: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: TIhBL19lhr3XvTyg1uEzQzzat2g8rScNKidJDPMbnvA=)
                          2: Pa-REvh5sObWkBoz7bJgJfUNNtY.roa (hash: VTVwzFjol2i2vqCqnvi41UK4vnNgLEigWpUo/HfYOUM=)
                          3: TJCGzUQHxg4bwyTZRd9MjPgDFco.roa (hash: mDKYo4+PY4/xDJecNKQRG7i12NJwnq+4UMvwsAIjYeA=)
                          4: etcUvrpfPKP_RFS8q4I2oRGtIpU.roa (hash: QazyHRaqwRmfbynAWmgSgFTPgoxpLo3PBLZtnvBUmtQ=)
                          5: olVKrDWOXV-cZqa6YCvyS1EAmtw.roa (hash: DtRokaXbwlYUqcYONE6Ad45+vRoun3fYTMXSmpbmsOQ=)
                          6: pYGVbv4voC-r48uG-RyVLygkJXo.roa (hash: Xfgs3GY90UOV9OHOemeveUcmPpqz9KE7PoOqb01izow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:30:8f:16:b4:2b:29:c3:c8:4e:dc:ea:cc:88:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
        Validity
            Not Before: Jun 13 14:00:59 2026 GMT
            Not After : Jun 14 14:00:59 2026 GMT
        Subject: CN=2438bcaec806cf3d9ab20329914fd1fb9a6c2b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:2e:01:6f:6a:6c:59:82:c3:eb:4c:85:ce:
                    b9:05:37:e0:8d:dd:eb:05:78:db:50:02:72:17:da:
                    d7:7b:1c:bf:72:5c:fd:ba:59:ad:19:7f:07:62:89:
                    c5:9f:b3:6b:8a:2e:01:c5:14:ea:d3:f6:40:86:7f:
                    19:c2:a3:df:e1:fa:e3:ea:83:42:99:6a:cb:b6:58:
                    bf:60:0d:8e:c7:cc:5e:b3:97:8d:97:e0:ea:ed:a6:
                    28:59:d1:3f:eb:ea:80:33:6d:c3:63:d1:81:f8:cc:
                    14:22:49:31:96:52:2a:e9:59:9b:4e:3d:f2:b7:52:
                    de:44:c9:3e:5b:13:7c:62:14:28:a7:8c:47:db:23:
                    2b:a2:3b:86:aa:5c:8f:78:f7:a3:31:4a:2c:21:7d:
                    45:7d:88:fe:15:a2:17:9c:e9:c3:80:8e:97:45:f5:
                    87:cf:67:13:50:81:e5:9e:f8:04:7a:4d:ed:9b:89:
                    e6:d8:18:3c:e7:fe:83:73:62:44:dc:9d:98:78:27:
                    92:4f:d1:4d:7f:b0:c3:a9:e1:b3:6d:96:0b:d2:89:
                    d7:c5:be:b4:3d:85:a3:a8:8a:74:71:7e:4e:ad:cc:
                    df:4a:bf:95:fa:1c:3e:0c:e2:19:24:03:77:49:d3:
                    56:14:38:a5:66:6d:68:3b:35:67:89:b8:78:a2:a1:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:38:BC:AE:C8:06:CF:3D:9A:B2:03:29:91:4F:D1:FB:9A:6C:2B:69
            X509v3 Authority Key Identifier:
                keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ef:53:a3:6f:c9:3a:f3:0b:a3:d2:59:21:41:3a:74:69:dd:
         7c:df:8d:61:e1:9c:99:37:5d:20:1e:7f:a7:f0:2b:a4:40:fe:
         f0:c3:fb:eb:df:d3:40:a0:91:76:42:cf:58:3b:90:49:35:98:
         14:0e:c5:85:ee:f4:c0:c6:21:33:e9:ce:ff:8d:c5:ef:95:ce:
         e6:79:71:80:78:4a:27:c4:a4:5c:11:25:39:5f:c4:a7:ee:09:
         4b:b0:36:84:a5:5e:20:15:b5:ce:c3:c2:9f:8f:b3:00:ec:81:
         57:87:f5:c7:7a:60:96:b5:a1:4c:f8:82:80:58:53:83:3c:c9:
         c4:c7:32:3c:60:b3:d5:40:26:d4:41:5c:74:07:0d:68:8c:7d:
         32:69:6b:1f:f8:f2:9e:56:df:c1:af:8e:8c:14:fb:23:b8:21:
         cb:3c:2b:f7:25:53:83:63:9f:4e:75:1a:62:f8:d9:28:ef:d1:
         5c:fc:6d:b8:8f:9d:73:07:af:22:40:48:f5:47:8f:6f:79:66:
         16:53:18:ed:83:83:dc:90:1c:d6:4d:63:e2:06:a1:58:bf:b8:
         7b:cd:61:c3:2c:21:1c:57:59:db:c0:1d:85:c3:ab:85:76:10:
         27:38:62:92:6c:06:c1:85:06:d6:17:0b:aa:2c:e0:5b:ec:ab:
         32:a4:cb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:35:48 2026 by rpki-client