Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File:                     Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier:          v+jcGGD2rMw08jqDyT2CZgldOp3/ev79QBmg9LiCpuI=
Subject key identifier:   1F:F0:E3:F3:C1:CD:A3:50:AA:C0:09:F0:E0:94:3D:AE:3D:57:90:F8
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       019FA906CD989527449294C8951956BA9504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number:          1430
Signing time:             Tue 28 Jul 2026 14:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:23 +0000
Files and hashes:         1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
                          2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
                          3: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
                          4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
                          5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: 6irp87yeB+UTursBlPh076FXX4BHYtt9DWv1KsL26p8=)
                          6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=)
                          7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
                          8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
                          9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
                          10: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
                          11: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
                          12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
                          13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
                          14: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
                          15: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
                          16: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=)
                          17: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
                          18: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:cd:98:95:27:44:92:94:c8:95:19:56:ba:95:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Jul 28 14:00:23 2026 GMT
            Not After : Jul 29 14:00:23 2026 GMT
        Subject: CN=1ff0e3f3c1cda350aac009f0e0943dae3d5790f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:c4:ab:e5:69:13:fd:27:b1:17:0f:20:9c:
                    8e:d9:04:5f:47:d8:2a:01:a9:c3:68:c7:13:44:33:
                    df:33:b5:23:37:bc:43:c8:c1:44:41:76:37:fa:b8:
                    21:79:90:25:3f:1a:92:3e:7f:a6:0e:7f:0d:b4:c1:
                    84:c8:4a:b1:41:b7:7a:c6:46:5e:69:58:8c:7f:1b:
                    db:40:4c:6b:3f:af:90:d3:0e:b8:cb:19:63:ef:ff:
                    b2:d3:36:b7:08:3d:69:31:9d:be:59:2f:b2:64:00:
                    69:8f:c0:56:b3:8d:33:a1:1e:f8:d8:d1:ef:9f:06:
                    40:d2:31:7d:59:cc:1b:8e:72:2e:b5:95:13:2a:2f:
                    a8:85:15:e7:38:f4:bf:73:0e:24:49:b2:43:c5:9e:
                    12:56:37:d0:22:32:80:4d:54:c2:2e:84:2c:73:85:
                    15:8a:fe:1d:0c:9f:52:2f:bc:12:1d:90:6a:e5:e6:
                    e7:b7:74:c6:67:2e:f4:0f:d5:4b:18:21:f1:be:db:
                    8b:cf:d6:c7:fd:7a:0b:ac:82:58:79:4a:7e:75:7e:
                    7a:58:ab:9d:18:94:79:9a:d6:a8:36:0e:a3:4a:02:
                    9f:60:54:ef:3d:64:b9:b6:a3:83:9a:01:ed:f9:c1:
                    08:76:d9:a8:d2:46:da:0b:b4:d3:85:e3:11:34:4a:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F0:E3:F3:C1:CD:A3:50:AA:C0:09:F0:E0:94:3D:AE:3D:57:90:F8
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0e:f2:9a:88:14:cd:27:d5:41:06:d6:60:78:f9:ff:fc:23:
         89:67:3f:db:6c:96:cd:de:c3:2e:52:47:5a:54:1e:35:7f:2a:
         a3:83:61:e1:66:da:65:7d:6b:b4:1f:82:a3:be:8a:70:67:2e:
         30:0e:73:44:9c:b2:80:ef:f9:23:d2:5c:69:db:88:f2:1a:d2:
         79:d2:08:86:85:fe:b7:e2:45:30:c6:54:de:20:eb:8c:4c:90:
         0b:6f:fd:c2:5e:46:fc:67:7b:3c:26:e7:bc:37:57:3a:34:b3:
         c4:de:9c:1c:bf:9f:b4:cc:a8:8c:af:fa:e0:e1:87:d9:9b:7d:
         41:85:61:9e:5b:31:1f:6d:a5:52:f5:e2:c4:8a:90:3b:af:bc:
         a6:8b:96:6f:26:7a:a0:3f:2a:75:9f:f5:a4:8a:bf:3e:c8:87:
         e3:bc:eb:01:d2:a7:53:90:4b:06:9f:5b:bb:ea:d5:86:69:95:
         03:f5:85:42:9e:37:af:c9:3e:07:0d:57:6f:89:2a:0d:cf:c7:
         93:2e:aa:01:5e:50:fa:6a:ee:4f:98:f2:d2:5b:ba:49:d8:81:
         d8:8b:5b:da:17:99:c8:ce:23:9a:f3:af:86:48:51:8b:93:2f:
         7f:ae:0a:96:60:a0:16:83:cd:bf:bb:60:f4:cd:18:f8:f4:0b:
         55:84:8d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:52 2026 by rpki-client