Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          hRnUAmZXSnluUjJvsJF22x3FpOJst9DG7lWksI41aSA=
Subject key identifier:   96:FE:9B:24:FE:62:87:ED:93:8B:0D:19:3F:7E:85:E1:D6:E2:BC:0D
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       019FACE37F4145A92C7150AFB0EA7FEB57DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          1635
Signing time:             Wed 29 Jul 2026 08:00:18 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:18 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:18 +0000
Files and hashes:         1: Kix4kTPQLQIQBS24-RxgbmJP4uM.roa (hash: IZRFChFiccTGrMi/xaHD/Y4tJtbN4JDWbyxQCJ6ZGnE=)
                          2: PjKNrzs98ZdtJ-2groduxlQr3TI.roa (hash: AGUANunYg5ZMjpAMIYuWSYyo7zh4erXZq7j8d3Oabq8=)
                          3: U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa (hash: nQFt4KKc4aLyiGsSy8KXsL646+IOodr1L6IOWwHG5ek=)
                          4: hM7CfSn8drcnZkcdIRN3S1LEFVo.asa (hash: /5csPNyf4bfqaOm9kt5mgfw6Bh4ZhcZytbR8gv3Eb34=)
                          5: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: RpZTo9RDAN1nxHZvRKTichg0+CyUshl6uUnY5QnV0Ro=)
                          6: k_1EWr6TT4OeQM7j9nrbpaIqcOA.roa (hash: 2HdlKCer6OR1eYI5oco+zFvSBQWIdH/6nbjqpzGMvtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:7f:41:45:a9:2c:71:50:af:b0:ea:7f:eb:57:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Jul 29 08:00:18 2026 GMT
            Not After : Jul 30 08:00:18 2026 GMT
        Subject: CN=96fe9b24fe6287ed938b0d193f7e85e1d6e2bc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:ed:44:72:d1:31:7d:de:5d:7c:ab:6f:a1:
                    55:86:df:73:d8:db:5e:0d:41:2b:7a:65:9e:08:d5:
                    be:eb:0f:5f:06:d8:a8:a0:ec:f0:bd:52:d2:e1:1d:
                    56:26:b3:fb:7f:4e:e0:77:93:67:93:76:e2:ee:81:
                    b9:22:87:f0:48:f2:fd:e2:bc:70:ea:a6:48:19:ab:
                    1b:c8:53:09:cd:5d:2e:3f:83:ca:65:bd:57:69:ce:
                    06:a7:06:c5:af:ee:cf:0d:81:61:35:fd:15:44:c9:
                    68:55:af:9f:5c:f4:6d:2d:05:74:bb:e2:8f:91:98:
                    40:51:b0:cc:bb:2f:da:fc:ae:37:6b:53:93:0b:82:
                    72:79:9f:ae:19:df:33:4c:f4:02:07:63:d2:b9:d2:
                    45:1b:eb:4b:c1:93:85:cc:92:c7:08:4f:d0:d2:27:
                    c6:a8:2b:fd:a0:b9:64:cb:20:c7:cb:e2:d2:45:45:
                    58:81:5f:8b:0e:7f:96:3e:f5:92:f6:04:a1:24:23:
                    26:87:77:76:4b:15:a1:04:b9:58:8f:12:b0:60:2b:
                    e7:13:1b:f3:b2:b6:50:6f:a1:3e:dd:a0:db:ca:92:
                    fe:6d:f3:4a:5c:58:07:8a:c5:de:16:bb:2d:16:27:
                    02:25:9d:f4:08:39:b2:d5:e4:0e:c3:6c:40:c7:96:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FE:9B:24:FE:62:87:ED:93:8B:0D:19:3F:7E:85:E1:D6:E2:BC:0D
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:bc:92:36:ef:42:6a:da:5c:09:fc:1b:7f:c9:eb:e9:10:
         00:74:18:46:4a:ca:16:2a:2d:4d:a6:c8:03:b9:02:9c:ff:82:
         df:1e:73:12:ed:8b:fa:61:24:e5:54:f4:48:b2:86:c7:5f:dc:
         1f:14:11:6d:3e:36:4b:4a:71:75:4f:7a:b0:f7:86:5b:ad:be:
         03:af:e5:d7:15:bc:a6:70:c4:45:17:0b:79:fc:02:27:07:3f:
         88:d9:f5:51:94:e7:25:04:bf:1d:0b:1a:6a:70:3e:b1:48:11:
         22:69:66:4e:49:bc:6f:b5:a1:42:d5:5e:0a:28:ef:47:2a:e1:
         c5:9d:5e:0e:68:16:c5:23:f5:04:86:d3:2b:00:17:ca:28:89:
         cf:f2:36:4f:f2:ea:64:ab:75:8e:7a:d7:26:8d:87:bb:70:40:
         b7:c4:5e:6f:59:e4:3a:dc:3a:60:f6:5e:16:53:03:61:e8:54:
         92:04:5e:72:47:5a:16:7c:ca:7b:03:6d:e8:80:e5:e9:ed:2d:
         fc:c4:f7:6d:d9:9f:4f:14:31:0d:6d:47:6a:16:80:13:e0:f4:
         17:9c:b2:20:6c:7a:6a:a9:15:b7:25:09:52:d3:1d:06:d3:57:
         cd:ea:c5:34:ea:93:66:db:6f:86:5e:cd:14:f6:a8:56:85:6c:
         32:84:31:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:51:32 2026 by rpki-client