Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File:                     RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier:          qpFMizmRw57g7wvRfIibDo/YNVzJNZA+M0xHKn1c6NI=
Subject key identifier:   84:F6:5F:65:F6:1C:DC:BC:15:6F:39:F1:81:C9:D6:B1:3A:BB:A4:F2
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer:       /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial:       019EC17FF2F1E5D54A9F66E03791E89E3A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number:          0ED2
Signing time:             Sat 13 Jun 2026 15:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:48 +0000
Files and hashes:         1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
                          2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: fOeP9P9AVmRmfBwZxwrXeDAyE0nr1aK6/NsF008F4EM=)
                          3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
                          4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:f2:f1:e5:d5:4a:9f:66:e0:37:91:e8:9e:3a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
        Validity
            Not Before: Jun 13 15:00:48 2026 GMT
            Not After : Jun 14 15:00:48 2026 GMT
        Subject: CN=84f65f65f61cdcbc156f39f181c9d6b13abba4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:ab:a8:08:77:5b:64:90:1c:1c:39:30:72:
                    88:ca:e0:1a:1d:c2:14:e9:23:a0:a2:a1:ab:d1:5c:
                    67:4d:f9:5b:4d:b3:a2:c9:19:6e:25:61:3c:5b:aa:
                    e1:7d:58:4e:cf:65:0f:a1:8a:58:ff:7d:60:05:d7:
                    a1:b1:15:2c:c4:de:b9:41:78:0a:cf:d0:27:e9:63:
                    51:68:90:98:94:bc:cd:f1:d6:60:01:64:9c:8d:06:
                    5a:d4:cc:4a:9c:5f:81:c6:f8:a3:23:6f:db:ec:a7:
                    17:eb:3f:c3:f3:dd:f4:b9:6c:b9:a7:e8:96:53:d1:
                    38:98:ab:42:5a:72:64:6c:45:46:63:05:62:25:cc:
                    dd:7d:f1:10:02:a3:13:5e:df:c3:a1:c7:37:2d:52:
                    cc:9d:3d:e6:fe:14:c9:ad:9d:69:15:49:f1:12:bc:
                    47:f0:9c:af:3f:70:a4:b4:cf:6c:a7:cd:81:3c:21:
                    cf:42:a1:2d:0b:a0:89:6c:fc:b1:0c:b1:9c:ec:f6:
                    e6:ea:d4:6a:ce:aa:cb:ad:e3:7a:4a:e6:48:90:34:
                    e3:a0:3b:e6:da:7c:e3:4a:b1:9e:ae:b2:bc:0b:e7:
                    72:87:0a:a8:df:2d:71:b2:05:fe:86:2b:48:c8:ff:
                    26:48:f8:07:eb:d5:37:b3:1a:d7:c9:72:47:6d:b5:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F6:5F:65:F6:1C:DC:BC:15:6F:39:F1:81:C9:D6:B1:3A:BB:A4:F2
            X509v3 Authority Key Identifier:
                keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b1:99:d1:69:01:63:93:4e:ce:13:2d:0a:c0:c2:b2:41:99:
         2a:c4:98:fb:5f:ae:ae:66:b4:bf:fe:a1:18:db:50:cd:83:25:
         c5:19:a7:e3:36:66:db:cf:ed:5f:cf:90:d4:1d:65:8b:06:20:
         01:3f:14:2c:da:70:0e:36:c1:dd:fb:44:b0:35:e9:20:be:aa:
         2e:aa:a7:dd:91:3d:48:8e:f4:e8:1e:7f:c0:93:3f:c0:11:ec:
         18:d3:c8:aa:6d:81:da:b8:da:74:04:17:bc:56:6a:8a:9a:32:
         ca:cb:d6:92:31:63:fa:08:d8:49:e7:d6:b2:9b:0c:b6:65:d3:
         1e:3c:94:f2:e4:57:e5:a1:be:6d:73:cb:a4:96:40:e7:6d:27:
         34:68:c6:5d:ee:09:57:03:38:58:92:86:6f:20:ec:6e:74:08:
         32:d7:01:eb:7a:b5:23:c4:af:d8:6d:10:00:73:bd:5e:fc:cf:
         b9:80:7f:df:f4:8e:a8:dc:55:db:8a:82:7c:c4:38:36:f6:b5:
         ba:3b:1b:36:6f:3f:57:1d:ae:02:90:d9:40:cd:30:23:80:05:
         65:ed:1e:03:d8:47:06:91:3a:67:b2:cf:e6:c6:51:4e:79:dc:
         7e:d4:a1:e8:91:ff:d4:ec:26:92:5b:10:e1:17:9b:fa:d8:46:
         0e:ee:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:32:40 2026 by rpki-client