Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File:                     Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier:          Gz4GQDCF2Wm7GYpgRBRP0Pva/bfrb01Bxq7jRI44V2E=
Subject key identifier:   BF:3C:87:F3:64:95:FF:0F:B0:7E:E0:AC:02:4D:7F:12:5A:74:81:A0
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer:       /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial:       019EC1B74326AADED7F254AA398EF7346AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number:          169C
Signing time:             Sat 13 Jun 2026 16:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:13 +0000
Files and hashes:         1: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (hash: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ=)
                          2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: nbYecnzpiiDciWKBZ6osVBgaaKAJicZfTK40UEW/ROE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:43:26:aa:de:d7:f2:54:aa:39:8e:f7:34:6a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
        Validity
            Not Before: Jun 13 16:01:13 2026 GMT
            Not After : Jun 14 16:01:13 2026 GMT
        Subject: CN=bf3c87f36495ff0fb07ee0ac024d7f125a7481a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:08:bd:79:d6:91:f6:c5:53:66:65:80:05:9e:
                    30:67:9f:a9:6d:23:bc:9d:49:66:b9:f2:f7:07:90:
                    7a:1d:72:60:ae:e5:b6:a2:15:19:8a:8a:dc:18:6c:
                    a7:64:cb:da:14:b3:09:b4:4e:b7:f1:0d:fa:fb:d9:
                    8c:44:78:98:9d:48:72:eb:48:c1:83:da:4b:76:ab:
                    5a:2b:ba:e0:33:a0:ee:94:49:67:e6:28:f6:ef:97:
                    7d:f7:56:ad:b8:a6:48:e9:3a:9e:bb:6f:e8:67:42:
                    f7:34:df:07:a1:48:54:a9:6f:b3:dc:fe:cb:3a:d8:
                    f4:8e:34:79:86:e6:a0:f9:5a:54:45:de:ba:b8:fc:
                    58:83:21:5b:b6:ed:fe:3c:b8:e7:5e:84:7d:4b:d8:
                    73:ed:6b:99:7b:5c:f4:91:d1:25:e4:a6:15:a9:55:
                    10:da:ca:e4:89:aa:e2:c8:42:6b:0a:d4:1e:fd:7c:
                    90:f3:4c:00:87:fb:cd:b7:c6:4e:60:d1:ac:14:63:
                    e3:0e:12:79:b1:52:62:a0:8f:5e:83:ae:85:c2:ee:
                    30:3a:52:c6:49:4f:8c:55:7d:cd:1b:2b:47:ea:2c:
                    e6:99:fe:cb:28:20:2f:4e:1d:61:36:b9:74:dc:3e:
                    ce:00:01:7e:e1:26:8f:43:12:a1:2e:c9:ec:d7:9c:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3C:87:F3:64:95:FF:0F:B0:7E:E0:AC:02:4D:7F:12:5A:74:81:A0
            X509v3 Authority Key Identifier:
                keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:21:af:9d:c7:b5:71:4f:e7:7d:4e:1e:79:46:f3:85:58:fd:
         46:a1:4d:f0:d5:bd:f8:0c:4d:db:ee:d1:4e:c8:44:49:ef:18:
         db:ad:19:4e:c5:65:b6:ac:ec:4d:02:ee:c2:a7:d2:bb:3d:c5:
         98:76:55:76:25:50:ef:e8:d8:83:45:8e:e0:63:c5:ab:53:d2:
         88:db:d4:ad:9d:fa:14:d0:ce:fc:30:7c:75:bb:d3:5b:56:64:
         0f:91:97:54:b7:a7:6f:aa:17:8e:96:81:08:0e:02:8c:1f:87:
         1d:d2:92:e0:3c:dd:30:b2:e3:01:cc:b1:31:92:71:9f:21:81:
         74:df:d4:36:b4:fb:0f:fb:d4:75:d4:dd:a8:b3:c2:8f:b8:4b:
         47:cb:8d:e1:38:66:7a:7c:b3:8a:c4:a8:99:9d:c0:9c:31:70:
         96:28:4d:5a:8e:14:a9:1c:8e:eb:04:08:a5:98:54:5c:ed:4e:
         8e:de:80:00:be:50:5a:72:9f:c5:6b:0c:5b:c5:2a:7d:f0:b0:
         29:c3:53:02:a6:61:af:34:28:5a:41:75:dd:9b:2a:ff:83:cd:
         22:1d:fa:03:01:11:16:d6:5a:59:ad:e8:bc:d4:5e:66:85:a4:
         b9:2b:1a:0b:ff:68:a0:e9:bb:0a:0a:ea:d6:10:15:1b:ca:ba:
         8e:91:74:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bt0Mmqt7X8lSqOY73NGrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3
ZTMzZDQwHhcNMjYwNjEzMTYwMTEzWhcNMjYwNjE0MTYwMTEzWjAzMTEwLwYDVQQD
EyhiZjNjODdmMzY0OTVmZjBmYjA3ZWUwYWMwMjRkN2YxMjVhNzQ4MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gi9edaR9sVTZmWABZ4wZ5+pbSO8
nUlmufL3B5B6HXJgruW2ohUZiorcGGynZMvaFLMJtE638Q36+9mMRHiYnUhy60jB
g9pLdqtaK7rgM6DulEln5ij275d991atuKZI6Tqeu2/oZ0L3NN8HoUhUqW+z3P7L
Otj0jjR5huag+VpURd66uPxYgyFbtu3+PLjnXoR9S9hz7WuZe1z0kdEl5KYVqVUQ
2srkiariyEJrCtQe/XyQ80wAh/vNt8ZOYNGsFGPjDhJ5sVJioI9eg66Fwu4wOlLG
SU+MVX3NGytH6izmmf7LKCAvTh1hNrl03D7OAAF+4SaPQxKhLsns15x8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL88h/Nklf8PsH7grAJNfxJadIGgMB8GA1UdIwQY
MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt
ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk
LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCGvnce1
cU/nfU4eeUbzhVj9RqFN8NW9+AxN2+7RTshESe8Y260ZTsVltqzsTQLuwqfSuz3F
mHZVdiVQ7+jYg0WO4GPFq1PSiNvUrZ36FNDO/DB8dbvTW1ZkD5GXVLenb6oXjpaB
CA4CjB+HHdKS4DzdMLLjAcyxMZJxnyGBdN/UNrT7D/vUddTdqLPCj7hLR8uN4Thm
enyzisSomZ3AnDFwlihNWo4UqRyO6wQIpZhUXO1Ojt6AAL5QWnKfxWsMW8UqffCw
KcNTAqZhrzQoWkF13Zsq/4PNIh36AwERFtZaWa3ovNReZoWkuSsaC/9ooOm7Cgrq
1hAVG8q6jpF0LA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:40:49 2026 by rpki-client