Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          UmzntK/kGu/mElg3CQZGp1mYRaAZi6ZLXvnZGjDhU2U=
Subject key identifier:   67:88:F8:49:6F:D2:FA:C6:56:F3:A6:1B:D6:B7:59:B8:1E:57:59:0E
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       019ED42AD6F07A9F4B83741861CBFA937490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          167A
Signing time:             Wed 17 Jun 2026 06:00:37 +0000
Manifest this update:     Wed 17 Jun 2026 06:00:37 +0000
Manifest next update:     Thu 18 Jun 2026 06:00:37 +0000
Files and hashes:         1: 8xW6dotWOxBryiPnauuCXj7XuSI.roa (hash: zASgDwULaWpUbCGZvnjqbpSShkEykQFL5DbnV3AjxvA=)
                          2: BDqHlt60SCUsG6m1jsuhJtjmd-g.roa (hash: qc0DKSPVeA1IXC/yas0jKMH1maqSIbQPdur6MCx7sBE=)
                          3: ESQujN5DaULTkC6C6ybAQLdooUw.roa (hash: kGih2+U+odRcMpkYTKXLRUpY39oIhEjGgAU5Suq/FjE=)
                          4: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: qP7wGEqr02xtzTTO17CgzElB5nzL9PBYr7iPRiDGLB0=)
                          5: Kgbb1ha1ETHNo6kDG9FbSmQXGu0.roa (hash: stqHaq0z6FCaDr4UcodVJdSho5SpMpajccdtCCU7/O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2a:d6:f0:7a:9f:4b:83:74:18:61:cb:fa:93:74:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: Jun 17 06:00:37 2026 GMT
            Not After : Jun 18 06:00:37 2026 GMT
        Subject: CN=6788f8496fd2fac656f3a61bd6b759b81e57590e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:b3:f5:fd:ce:8e:26:53:25:e2:48:75:bc:
                    39:d3:c4:19:9b:1b:82:a7:e8:1e:8b:96:62:98:4c:
                    dd:61:c3:7e:92:45:c8:e7:64:85:29:1b:58:7b:26:
                    f8:48:ec:dc:c9:fb:03:86:d2:02:d2:d4:60:11:89:
                    3f:36:aa:0c:46:1a:5d:46:9f:32:84:83:29:99:d3:
                    58:4c:65:da:fd:e2:c1:85:28:d1:4c:62:26:38:fe:
                    46:97:6e:6a:20:9f:23:22:98:a1:9c:85:20:92:7e:
                    51:e3:37:2c:a1:5b:1a:d8:91:ea:a6:9c:4c:78:05:
                    37:e9:11:22:df:86:04:d1:9c:ab:0a:6c:3c:88:03:
                    74:8b:73:8c:a4:93:0a:0e:a0:61:ef:0c:4e:31:64:
                    3c:70:4f:34:35:a0:03:c0:30:ba:b8:da:49:c2:13:
                    68:6b:9f:ec:85:6c:75:01:d4:c8:1b:05:36:cd:5b:
                    32:d5:51:3c:6c:1b:3f:30:91:c1:c3:db:9e:33:53:
                    a3:68:da:d0:de:0f:41:96:51:3a:db:d9:c6:92:6a:
                    de:12:22:70:24:55:0f:3d:bb:2c:76:eb:1a:d1:2c:
                    2a:da:91:fb:e1:8e:4f:f7:74:bb:de:0b:84:cc:e2:
                    08:88:c5:d8:e1:3c:0a:68:14:05:ec:12:fb:89:5a:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:F8:49:6F:D2:FA:C6:56:F3:A6:1B:D6:B7:59:B8:1E:57:59:0E
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:29:4d:63:a1:87:46:d1:4e:49:75:9d:bd:13:e2:b1:59:2b:
         57:86:ad:55:22:54:4f:77:ad:63:f8:d6:18:23:7f:4a:a5:5d:
         8a:e4:a7:06:11:55:23:3c:9e:83:18:57:fa:18:5b:a2:ac:52:
         b0:e4:db:f5:81:37:ef:c4:34:08:3d:0f:aa:3a:f6:11:d6:36:
         0a:53:e5:81:e6:9e:45:90:8b:60:79:17:b1:53:3f:a6:0a:bd:
         a1:13:4d:90:a0:29:22:b5:4d:3f:c8:8e:cc:5e:44:a5:12:9e:
         04:6f:bc:f5:89:79:3e:31:74:8f:5b:19:e8:5b:d7:7b:b9:70:
         e6:35:d2:e6:b5:c9:13:ba:d3:47:47:59:51:73:c8:44:0b:84:
         07:92:0c:a3:dd:9d:db:09:3f:7b:e1:26:14:29:05:eb:84:45:
         36:34:c0:da:57:4b:a2:0b:99:7d:1a:ce:9f:da:ec:28:5f:73:
         5d:13:14:9b:82:82:07:fa:7c:2a:56:15:24:c3:00:bf:c9:02:
         63:c0:a4:36:96:3d:31:e1:a8:c5:87:93:14:d3:c9:90:6f:39:
         04:c2:c7:d8:dd:f7:1d:78:7c:d9:85:79:4f:36:7b:72:a2:39:
         07:3d:18:d1:92:9f:3b:42:b0:bd:4f:90:8f:81:7b:6b:1c:16:
         79:06:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:00:56 2026 by rpki-client