Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
File:                     HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft (raw, json)
Hash identifier:          UQaYWcAftAhN4kG27QkDiIcNruWJVQr9IIeml8/we0Y=
Subject key identifier:   D6:89:F1:E1:29:FC:02:16:F7:61:09:7B:A4:DA:69:30:50:CA:EE:17
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Certificate issuer:       /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial:       019FAABEF7CAD8C38C7C1752A24ADA2790F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
Manifest number:          19DE
Signing time:             Tue 28 Jul 2026 22:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 22:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 22:01:09 +0000
Files and hashes:         1: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl (hash: hdg4a7uCDbn3/407T15EfD6UKzWDZTEFstpU7SAel4s=)
                          2: gfabm9UWQoAATxByyOzldR-OoLw.roa (hash: WKaBZla4LRLfqgI3uwqubZPPQ3HBh8rqcOXnhfR6oF8=)
                          3: pVhPz1Lv4Tfe1koijnFU9xHK8TY.roa (hash: 9qDr4kEVPSIWiFKaY/CZHN8PT6dMsGvFWVv39pNQi2Y=)
                          4: vGBPTsN1UTQ9ljsou8EYqesA-xA.roa (hash: KDijiFyY5rddvKU52MlKJXu0OVC57lOatdyVnFfXTSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:f7:ca:d8:c3:8c:7c:17:52:a2:4a:da:27:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
        Validity
            Not Before: Jul 28 22:01:09 2026 GMT
            Not After : Jul 29 22:01:09 2026 GMT
        Subject: CN=d689f1e129fc0216f761097ba4da693050caee17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:d7:51:90:64:82:a8:2c:46:78:a8:15:0b:
                    8a:9c:2b:d2:60:ea:9f:b1:98:c1:61:c8:25:d6:00:
                    8a:95:5e:84:3a:40:61:a4:d5:8e:56:a0:0c:9f:12:
                    37:aa:0c:a2:db:8c:96:58:7d:91:27:1e:a4:11:46:
                    26:55:07:60:0f:54:13:06:00:66:e0:6b:89:d9:e7:
                    3a:9d:d1:b3:8f:5e:26:5c:84:c5:3b:bc:66:2f:ce:
                    f6:28:9b:17:31:0a:e4:b5:39:9d:3a:73:bc:2d:17:
                    b0:0e:9e:f8:ec:fe:a3:f0:bf:bb:56:8b:93:46:d4:
                    25:0a:a8:b1:be:4e:6f:4a:5f:20:9b:fe:ed:b7:2c:
                    f8:e9:26:b6:62:46:2a:b5:9f:08:96:b3:39:95:fb:
                    bc:eb:d4:34:25:15:5b:3b:66:b0:24:62:76:06:f4:
                    57:46:87:88:51:47:5b:3c:38:00:a0:a2:04:fc:b0:
                    d6:6a:8d:99:c0:f5:6c:e9:63:1b:5a:50:0b:db:06:
                    11:bf:be:5c:08:e3:0a:5a:1e:fc:dd:36:9d:d8:ad:
                    1b:ec:3c:a8:21:61:3f:0a:d9:2c:a8:ef:44:cf:05:
                    69:02:79:3f:4c:b8:51:aa:17:a4:22:9b:37:67:23:
                    21:d6:fc:19:3d:2a:8d:6f:57:eb:fe:df:c1:a2:73:
                    ad:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:89:F1:E1:29:FC:02:16:F7:61:09:7B:A4:DA:69:30:50:CA:EE:17
            X509v3 Authority Key Identifier:
                keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:da:a4:f2:21:a4:f5:cf:be:ab:ed:9d:b9:83:a1:f7:c0:7b:
         05:dc:70:e5:71:cd:7c:78:f7:ab:ac:e0:2c:50:8e:ef:0c:95:
         c2:7f:fc:b7:cb:43:b0:4b:0b:69:7f:73:27:c8:2e:02:ee:0a:
         fc:d6:1c:9b:f1:e2:52:6a:9f:5a:76:c1:33:c4:00:2c:3a:04:
         7f:d5:75:f9:58:cc:59:3d:80:12:80:7c:d9:a0:d5:13:3a:00:
         5f:64:95:d8:63:48:4d:6e:a5:6c:17:1d:25:c9:47:df:9d:ac:
         3c:d7:0e:6a:f5:7b:d1:1a:d9:14:03:bf:0a:08:8c:e5:e0:16:
         da:07:b0:3e:62:b4:d0:1d:9a:18:fa:97:4e:5a:f3:fb:5b:af:
         b9:cd:1a:0c:a4:70:b9:db:f9:41:dd:e1:66:8f:53:fa:93:65:
         3f:81:14:f0:18:17:e7:f6:22:c4:6d:3d:1b:f4:c2:44:44:10:
         98:5e:22:6b:56:50:62:5c:7f:ad:17:73:0c:a6:30:53:0c:77:
         8b:d2:96:dd:77:63:00:29:dd:5b:94:5a:36:20:70:a3:3c:c0:
         8a:9f:1d:99:53:3c:a1:a9:bb:77:43:28:7d:32:33:03:af:48:
         20:32:08:26:5d:3f:d6:2a:4e:d8:2f:2a:56:a9:dc:9d:9d:37:
         76:1c:87:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvvfK2MOMfBdSokraJ5DwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZTVlZmJmNjU4OTcxNjBkNTVhNTJkYzNhMjJjMDE3ODc2
Y2QwNmMwHhcNMjYwNzI4MjIwMTA5WhcNMjYwNzI5MjIwMTA5WjAzMTEwLwYDVQQD
EyhkNjg5ZjFlMTI5ZmMwMjE2Zjc2MTA5N2JhNGRhNjkzMDUwY2FlZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw7XUZBkgqgsRnioFQuKnCvSYOqf
sZjBYcgl1gCKlV6EOkBhpNWOVqAMnxI3qgyi24yWWH2RJx6kEUYmVQdgD1QTBgBm
4GuJ2ec6ndGzj14mXITFO7xmL872KJsXMQrktTmdOnO8LRewDp747P6j8L+7VouT
RtQlCqixvk5vSl8gm/7ttyz46Sa2YkYqtZ8IlrM5lfu869Q0JRVbO2awJGJ2BvRX
RoeIUUdbPDgAoKIE/LDWao2ZwPVs6WMbWlAL2wYRv75cCOMKWh783Tad2K0b7Dyo
IWE/CtksqO9EzwVpAnk/TLhRqhekIps3ZyMh1vwZPSqNb1fr/t/BonOtkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaJ8eEp/AIW92EJe6TaaTBQyu4XMB8GA1UdIwQY
MBaAFB7l779liXFg1VpS3DoiwBeHbNBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUt
N2MwZGI3YmFlMTM1LzEvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUtN2MwZGI3YmFlMTM1
LzEvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutqk8iGk
9c++q+2duYOh98B7Bdxw5XHNfHj3q6zgLFCO7wyVwn/8t8tDsEsLaX9zJ8guAu4K
/NYcm/HiUmqfWnbBM8QALDoEf9V1+VjMWT2AEoB82aDVEzoAX2SV2GNITW6lbBcd
JclH352sPNcOavV70RrZFAO/CgiM5eAW2gewPmK00B2aGPqXTlrz+1uvuc0aDKRw
udv5Qd3hZo9T+pNlP4EU8BgX5/YixG09G/TCREQQmF4ia1ZQYlx/rRdzDKYwUwx3
i9KW3XdjACndW5RaNiBwozzAip8dmVM8oam7d0MofTIzA69IIDIIJl0/1ipO2C8q
VqncnZ03dhyHhg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:23 2026 by rpki-client