Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File:                     H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier:          0ujed7Lc6LfXJL9VMAAWbKygniGLdvZdQKoAopKaodk=
Subject key identifier:   38:AA:2E:64:13:12:A5:F1:78:4B:89:9E:AE:23:86:3E:6B:01:CD:9A
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer:       /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial:       019FA8628943F9CF2355E52645FF8DF12437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number:          08BC
Signing time:             Tue 28 Jul 2026 11:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:57 +0000
Files and hashes:         1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: C6xL+BscjbA08cz5NEBu+fyXN7wYgy0uDHVI3vw16IU=)
                          2: YN0WF7H7M2n4t-XjARACyM9WR6o.asa (hash: eBj4EH+AV57EzbfzhlBRa9LcrLwEw5t3KkUj9eOh2sM=)
                          3: YZf1I4HDqm3z0PL6TqKmws28UHo.roa (hash: Iy79aoCujC05IKj4CdK/qSAtze1gZOoSXAO4h9l6iV0=)
                          4: Yo-fullWGeKl8XOqwwQWGl8ohSo.asa (hash: 0VBufQNMO7/4QkFPpkFZhTVHEaQ91TkdNNCouWLIjsE=)
                          5: iDGkEHzaPIBC_ltNyeNPjxHWcLQ.roa (hash: m+RgaOaS95hD5eR5RGnGQAMM12oNRJddtp+/tKr5w0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:89:43:f9:cf:23:55:e5:26:45:ff:8d:f1:24:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
        Validity
            Not Before: Jul 28 11:00:57 2026 GMT
            Not After : Jul 29 11:00:57 2026 GMT
        Subject: CN=38aa2e641312a5f1784b899eae23863e6b01cd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:fa:ed:69:e7:b9:a0:1f:c4:f9:84:16:0e:
                    44:19:bb:be:a8:14:33:e7:88:6f:65:5e:b3:be:36:
                    54:31:96:28:fc:be:20:0b:73:13:0a:9a:44:b9:dc:
                    15:44:ae:11:00:f1:ee:db:ee:6e:d9:ce:76:63:64:
                    32:98:9b:22:29:46:07:a4:f4:6a:65:82:e2:6f:59:
                    0f:31:cc:87:0c:ad:8b:a8:b8:6c:70:5d:d8:fb:a4:
                    87:74:82:59:29:54:be:b4:c3:be:5f:5a:69:93:a8:
                    87:c0:a6:ee:95:f5:fb:5b:ad:ed:99:b0:72:e6:af:
                    d1:64:29:c7:e3:85:b8:70:8c:45:4c:68:00:f7:c3:
                    5e:bc:48:46:a5:de:98:5f:e6:05:69:77:d0:1b:6e:
                    2f:ed:0d:98:c5:ed:c9:3c:3e:1d:62:8f:b8:88:ad:
                    ad:97:45:3d:38:5c:26:3b:71:4f:35:8c:87:a3:47:
                    29:5f:9a:b6:ef:15:4a:3a:c1:4b:95:e4:42:fc:75:
                    48:85:0d:38:6a:3e:ce:06:d8:5f:fe:fa:79:09:39:
                    a7:84:59:94:8f:6b:f8:bb:38:b8:50:17:8b:af:b8:
                    04:a5:94:e0:48:3c:26:f3:0d:cd:6a:b3:be:8d:d0:
                    33:6c:9a:bd:67:77:6b:8b:ae:85:1b:25:98:e3:cb:
                    ca:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AA:2E:64:13:12:A5:F1:78:4B:89:9E:AE:23:86:3E:6B:01:CD:9A
            X509v3 Authority Key Identifier:
                keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:36:89:9b:66:38:f6:12:76:70:22:2a:de:2d:f9:4c:34:c6:
         46:72:58:de:ac:c6:80:04:f7:26:34:08:e9:af:a7:fc:fa:d3:
         dc:be:fb:60:1e:db:f4:db:8a:65:30:1a:6c:b6:38:5a:00:6d:
         28:6c:36:be:39:40:ad:30:bb:90:96:42:26:3e:eb:5b:61:de:
         9b:82:a9:ac:08:c6:79:f4:58:cc:16:64:a2:d5:2d:74:02:37:
         27:75:37:49:22:89:e3:51:42:1b:3f:7e:00:bc:e1:f6:2c:3c:
         fe:61:ae:8a:1b:1a:3e:e3:a7:37:3c:f4:dd:1f:d4:22:31:1c:
         7a:c9:74:d5:49:fe:1f:9b:6b:11:fc:f7:7b:c8:8c:ff:19:b9:
         c1:4e:52:1b:25:7a:79:16:9f:83:28:ef:f2:03:6f:25:73:19:
         1a:64:f1:2f:95:23:b6:f3:38:c4:8d:aa:53:e5:89:de:2d:c0:
         f1:39:d8:be:dc:a7:b0:47:7c:67:01:05:31:dc:53:74:7d:1a:
         f7:7b:1e:d2:ce:a9:36:66:84:53:86:d7:ca:4c:3a:03:f4:43:
         50:4f:a0:ea:a1:ed:49:d6:9b:7c:02:89:27:8a:77:28:d9:de:
         f3:fc:45:b8:b2:10:95:ac:78:07:e5:95:b7:9e:9a:0c:37:0b:
         88:10:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:52:10 2026 by rpki-client