Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          oTU/MRvDSZ0/i1GyZBVbqj+tzFPfeAmj7sWHhx+8TRo=
Subject key identifier:   B6:53:45:EB:D3:3E:1B:06:EA:A5:86:D4:D6:B9:3D:AE:F8:27:3C:3A
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       019FAC763ECC32CBD83BD6AFBC2425D2F0BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          1715
Signing time:             Wed 29 Jul 2026 06:00:58 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:58 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:58 +0000
Files and hashes:         1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
                          2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
                          3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: TenXDqVDOQ1f1MjWL37jdMErnuITuXwONoH2mIHp1VU=)
                          4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:3e:cc:32:cb:d8:3b:d6:af:bc:24:25:d2:f0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: Jul 29 06:00:58 2026 GMT
            Not After : Jul 30 06:00:58 2026 GMT
        Subject: CN=b65345ebd33e1b06eaa586d4d6b93daef8273c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:f2:f2:a8:9d:f8:54:d6:5f:8b:fd:30:61:
                    5b:81:fc:6b:4f:fb:62:56:13:8e:fa:a3:5a:4e:8d:
                    5d:5d:37:2e:ec:1d:b1:75:8c:28:c0:1d:f1:7d:17:
                    fd:8e:ae:cf:04:a4:e9:db:65:71:ce:50:d3:53:c6:
                    4d:93:91:87:72:07:89:53:a7:ac:a9:d1:17:e6:dd:
                    ad:e2:1b:89:bb:2a:8e:00:b3:ec:e7:f3:00:ba:c4:
                    4b:4c:5c:a3:39:9d:85:2b:9d:37:e1:50:9e:3e:44:
                    a8:9e:05:4a:f7:9c:25:47:de:ec:0d:1f:c8:7c:38:
                    03:57:2d:a0:ec:50:0f:dc:44:46:1f:f4:29:fe:43:
                    c3:3f:41:90:d6:87:e3:f3:03:72:b1:ec:e1:b2:21:
                    93:03:c1:6a:3c:aa:97:63:83:63:2f:18:03:38:1b:
                    8f:8b:f0:af:4f:93:cb:47:12:7e:da:23:0c:d0:a7:
                    f6:f2:88:b0:f1:c3:a1:7e:5a:29:74:33:e5:06:df:
                    27:ad:a2:cf:6d:54:49:2c:18:f9:8f:ca:0d:a2:85:
                    44:6f:c4:c9:00:ce:fa:4b:dc:d0:99:70:e3:c1:c2:
                    40:44:7c:ae:e3:81:59:c0:13:69:64:a2:d7:ba:e7:
                    49:78:05:4f:f9:2e:00:45:74:1f:c3:83:ab:10:e1:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:53:45:EB:D3:3E:1B:06:EA:A5:86:D4:D6:B9:3D:AE:F8:27:3C:3A
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:98:1a:80:5f:72:b4:9c:a9:af:28:bb:39:9b:80:9e:74:
         85:e6:ea:80:00:0d:2f:0b:90:1c:a3:a3:ba:01:03:0d:eb:8b:
         4b:2a:68:73:71:ec:10:95:f7:2a:32:b7:93:78:38:d5:90:df:
         12:0c:9f:c8:2b:d4:c0:61:94:81:77:6f:aa:2c:12:1a:b4:72:
         39:90:fc:9a:55:f1:16:0e:b3:04:7f:64:59:13:7b:55:14:5d:
         02:ff:d1:2d:df:0f:d8:ee:5d:8b:53:fa:05:0f:48:a2:b7:52:
         fd:5d:95:27:ab:01:b9:c2:fc:3a:1e:bc:99:99:7f:ba:fb:2d:
         dd:ab:cb:6e:9a:fb:80:3e:54:2f:16:5b:80:4f:d1:51:d6:5e:
         07:fb:ba:57:8d:f8:0d:6e:36:08:4e:69:27:dc:66:02:83:0e:
         a8:f0:59:65:08:59:a4:89:24:aa:04:6d:dc:78:6d:2e:60:bb:
         80:ab:c3:f0:75:0e:0b:ab:56:93:94:d2:e6:0b:fb:a9:05:b8:
         fd:54:f5:45:a2:47:3d:41:b6:e6:17:4e:c0:69:29:cb:13:1d:
         7b:f4:e3:d6:c1:bb:ee:ee:d3:b4:f3:7d:57:98:84:c6:89:a5:
         55:e0:ac:4c:a0:d2:79:11:28:4a:5c:15:a2:5a:2c:c7:e1:6e:
         25:ca:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:06:08 2026 by rpki-client