Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File:                     hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier:          pGqjJIlq2i9as5/mWlPMgIyJE1CX+th7Rx3z0fzDA2U=
Subject key identifier:   E1:CE:B6:89:3B:CF:77:88:8A:9B:BB:BD:19:82:6B:97:66:E6:30:0C
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       019FA8D016CBB95F37A74DE521CEE4963478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number:          192B
Signing time:             Tue 28 Jul 2026 13:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:37 +0000
Files and hashes:         1: DRi6gZm2ApJ9zWvuSIffTh_44j0.roa (hash: NDQ8jCUezYMaYn3NL3pjn/AqInQQgH2COtpVWhCKawg=)
                          2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: b2uZK0wyhwSzAXtr16gb/Fr0NtPNJdaaMkpm7UpNyC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:16:cb:b9:5f:37:a7:4d:e5:21:ce:e4:96:34:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: Jul 28 13:00:37 2026 GMT
            Not After : Jul 29 13:00:37 2026 GMT
        Subject: CN=e1ceb6893bcf77888a9bbbbd19826b9766e6300c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:1a:a9:d5:8b:e3:1e:d5:72:d8:09:93:fa:
                    9a:a8:db:cb:33:bb:2d:44:02:47:76:fd:e9:59:40:
                    f3:30:e6:e0:03:68:8d:06:7b:5e:5a:bc:63:c9:c9:
                    56:c1:8c:4f:9f:d6:74:4c:d8:08:ad:7b:a4:57:2a:
                    4e:f4:cf:e8:11:27:9e:90:8b:e4:b4:70:e8:42:54:
                    6e:6a:5f:09:08:c8:81:d9:38:b0:d0:53:78:f2:1f:
                    3c:f3:34:8a:c4:97:d8:ed:ad:5a:66:c3:af:6a:f7:
                    ce:5e:32:19:12:01:e1:20:81:5b:e5:87:41:55:6c:
                    9d:91:db:ac:bc:78:26:ce:f9:de:fb:73:26:7c:d6:
                    b8:69:b0:10:f6:c0:25:d1:84:e8:b8:d3:54:b8:29:
                    e5:6c:4a:db:c3:d4:5c:51:d5:ee:0a:2d:60:4b:99:
                    84:76:3d:31:4b:0c:9a:c9:4e:bb:8b:b1:90:61:61:
                    d4:0d:7e:13:6c:d5:3f:c2:e7:fb:45:5c:1e:13:16:
                    33:ae:13:d6:16:f4:96:d9:61:25:33:3c:ed:8c:df:
                    32:b9:f6:f6:5f:40:30:0e:91:12:dc:82:bf:36:9c:
                    55:22:60:22:8c:d6:8e:84:4d:1c:57:b0:4d:a0:3b:
                    21:11:33:5c:05:ac:0d:c0:e9:fd:aa:01:63:a6:a7:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CE:B6:89:3B:CF:77:88:8A:9B:BB:BD:19:82:6B:97:66:E6:30:0C
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:6a:d5:51:07:6d:a6:05:1a:94:04:63:99:70:02:b8:6b:9e:
         7e:e0:a5:a6:a9:96:25:3c:30:3a:97:67:c0:fc:db:89:e5:f0:
         44:35:5c:5e:f9:ca:0c:b5:44:53:76:e8:50:63:42:7a:cd:75:
         a6:20:2d:79:d2:4a:a4:1d:c6:f3:45:c2:af:78:9d:30:d9:94:
         61:12:cc:a9:8f:98:4b:70:7b:4d:c5:dc:6f:cd:bb:b7:b5:0b:
         42:d5:a9:86:6b:f5:08:06:f6:91:2c:d9:dc:4c:58:f5:e5:57:
         02:c3:13:16:0e:74:4d:95:75:b0:7b:09:3a:17:ff:c3:e5:fb:
         ee:bb:c0:dc:a7:e9:40:40:c0:af:4c:06:f9:04:70:98:00:63:
         64:bf:8a:11:4e:69:db:b6:a7:00:36:48:e0:4c:83:99:41:c7:
         ae:04:45:9c:9c:a6:02:f8:53:ae:0e:88:b7:48:0b:91:47:2f:
         2b:c3:ff:cf:90:c3:b9:b6:77:1a:0a:cb:ff:b4:7f:09:d9:b1:
         79:fe:61:6c:ca:6e:83:43:d4:27:0a:7b:e9:fb:40:78:43:96:
         2c:42:c2:ee:3b:d6:61:96:a6:02:3a:23:24:9c:2e:40:bf:60:
         c1:46:2b:f1:e5:14:fe:56:4c:d7:3b:10:93:1f:d8:87:fe:2b:
         b8:b8:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:28 2026 by rpki-client