Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          +gMH+I+t5W0pEpxcnspK4ZV/365t/DSBU33fAoIqHpQ=
Subject key identifier:   5A:6C:AC:09:D8:3D:41:FB:6B:B3:3F:2B:62:C4:E1:A9:A6:82:E1:38
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       019FAA50A3CC847005C1250A5C890D4A9ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          14F8
Signing time:             Tue 28 Jul 2026 20:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:39 +0000
Files and hashes:         1: 2ykxp1RC0SDW_olwDTCv-_MLiXQ.roa (hash: lHkNZLkgWFsMzYreyxJfbV91bR62pQ6AlcQ7rRHMjNM=)
                          2: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: UwU6F1x7BkGyqGPAkzAIftkpe3+q1d2M7kSPSTsV9Ho=)
                          3: Vhg0NY4jLKFZehorU_HupjxbgqM.roa (hash: ZZVk+nzM5sjrEyBiJMYznTGMxJYwAgph6Xy/eIIAOF0=)
                          4: wLlS8Jywk1Z2A3Ni9ePUaXlglZA.roa (hash: HsiaEAzxY6GNFLXp4J8wvPh2SdvP1m/Tm0n/2wRXxXs=)
                          5: zLPd6uaNhEYIigV3kvzlHJIvTH4.roa (hash: tk6Y8DqBSL9/1u7Y9F6ipEsLVlx2f1XyZLdRg6GvQEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:a3:cc:84:70:05:c1:25:0a:5c:89:0d:4a:9a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Jul 28 20:00:39 2026 GMT
            Not After : Jul 29 20:00:39 2026 GMT
        Subject: CN=5a6cac09d83d41fb6bb33f2b62c4e1a9a682e138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:e7:cd:b0:ea:fb:ae:f8:64:7b:6c:7a:eb:
                    5a:c3:86:7c:45:ed:47:2b:14:d0:33:a9:e8:c3:b9:
                    7c:e6:57:c1:2a:70:bf:41:03:40:7b:1d:a1:48:ef:
                    7f:6d:4e:52:e3:8e:cb:71:c7:30:85:7b:56:3a:50:
                    af:52:2f:9f:ea:61:52:c9:4c:72:6d:7a:14:b8:f0:
                    2d:4e:c6:55:2c:39:b9:45:5e:18:10:2f:e5:a9:3c:
                    b6:06:70:ce:46:9e:0f:a6:6b:4b:24:f3:0e:92:62:
                    dd:f4:0b:db:22:ac:da:3d:81:92:b2:08:57:80:2b:
                    ef:f6:df:ac:fd:fd:97:de:df:dc:d0:dc:60:c5:dc:
                    96:53:a2:41:7a:cf:72:b7:87:de:4f:63:cd:50:73:
                    22:3e:13:ad:81:f4:37:74:e8:ec:de:c5:72:14:b7:
                    83:4b:40:f3:83:41:48:c8:c2:39:1b:40:b1:8a:ec:
                    89:7c:b9:06:42:35:fd:7e:e7:4d:a0:92:7c:8d:28:
                    01:92:7f:49:f2:4c:9c:f4:40:5c:02:dd:0e:45:0d:
                    4e:28:67:26:89:64:6d:d5:47:36:5a:46:b6:27:b5:
                    03:e3:8f:5b:23:8c:81:bc:b5:45:cc:07:45:f4:cb:
                    37:48:7f:39:37:f1:0a:16:0d:e6:ea:21:83:66:57:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6C:AC:09:D8:3D:41:FB:6B:B3:3F:2B:62:C4:E1:A9:A6:82:E1:38
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:35:5b:2b:4c:c5:e6:81:a2:42:a3:e5:82:23:58:79:3d:
         54:0f:0a:f9:3f:d8:28:31:1e:98:48:62:b4:71:45:a4:05:4d:
         76:27:78:a7:90:40:c5:99:50:a8:51:98:c3:bc:45:42:2e:e0:
         c9:2e:ce:32:28:e7:65:30:00:d9:28:e7:8c:a7:49:46:78:de:
         a8:1c:48:41:e1:4f:0b:5e:a8:fb:fc:79:6e:2f:20:71:54:e8:
         16:09:fa:4f:7a:25:83:23:66:1a:70:27:08:ca:e1:1f:7b:0a:
         ab:8a:60:76:ca:e2:20:9c:86:b8:2e:26:a6:ee:52:9d:e4:1d:
         1d:a8:00:62:f6:66:79:83:15:a6:23:67:5c:99:73:8f:c2:55:
         f0:21:5c:42:fa:3d:f6:f9:2a:b0:47:c3:2b:a5:3a:d1:62:70:
         24:58:21:97:e3:0c:f7:27:44:bc:fe:34:89:e6:c4:28:30:09:
         3c:c8:20:fc:a1:b2:1c:7e:d1:3f:e4:b8:81:57:e8:f5:be:df:
         a1:49:1f:51:63:d4:32:e5:a4:6c:76:c4:75:40:40:30:40:a5:
         56:da:02:12:bd:5a:2d:66:c8:9c:58:05:ce:da:5b:5f:69:e1:
         82:16:6f:86:9f:6a:e8:2f:bd:6f:06:27:c5:cb:56:06:50:fb:
         d1:f7:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:42:10 2026 by rpki-client