Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File:                     RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier:          g0X7NIpJ8PyZOCZmwOTF4AUNubg5Z9hvUVFEl5Ed7Mw=
Subject key identifier:   FE:F3:93:76:2A:94:CD:88:B4:40:5E:C8:BF:AD:6B:61:DE:FB:9D:43
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer:       /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial:       019FAB2C434093500D60AB52A088D40909D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number:          0F4B
Signing time:             Wed 29 Jul 2026 00:00:32 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:32 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:32 +0000
Files and hashes:         1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
                          2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: 4cGjScmdogEsHuY/Fzcpzw0Uf0Y9J5bosCQU6gs4usw=)
                          3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
                          4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:43:40:93:50:0d:60:ab:52:a0:88:d4:09:09:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
        Validity
            Not Before: Jul 29 00:00:32 2026 GMT
            Not After : Jul 30 00:00:32 2026 GMT
        Subject: CN=fef393762a94cd88b4405ec8bfad6b61defb9d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:14:9d:23:c7:b3:8f:93:05:48:47:6f:52:df:
                    f4:a6:4e:ed:3b:ec:36:c9:e4:b1:11:03:33:90:b2:
                    f3:97:17:39:78:3b:f4:0d:18:18:d7:e9:31:3d:dc:
                    e3:bd:1d:1a:60:b4:f8:bf:d5:9a:07:f5:13:a0:3f:
                    13:62:63:ff:61:7a:d3:9a:79:d5:63:a0:1e:0e:78:
                    8c:86:9f:ab:15:41:86:81:09:c3:b4:05:b7:f7:a1:
                    85:9b:7c:7d:94:bf:8e:6c:e9:78:ac:a7:20:ad:c0:
                    38:47:8c:77:49:7f:4e:7c:6e:69:f1:c2:d8:fe:a0:
                    66:e5:8d:7f:5b:0b:f8:63:e6:59:b6:8f:af:74:38:
                    e5:21:1e:16:76:ff:a9:a5:96:6e:d6:fb:31:85:4a:
                    e7:c9:b8:55:b0:d7:a1:32:34:f2:1b:25:e0:3c:5b:
                    7f:de:9c:c0:5a:5d:99:ff:83:c4:5b:0b:cd:72:64:
                    5f:60:24:be:ca:71:d3:66:1f:15:cc:39:00:82:be:
                    a5:ac:a7:0c:20:09:47:96:37:67:4b:17:8c:1f:de:
                    1e:8f:e7:8a:55:15:a6:c1:37:22:b4:b3:ee:78:88:
                    f4:f6:b5:a2:69:f6:4c:27:5e:cb:93:f0:21:50:f3:
                    de:0e:77:af:7a:39:1e:0b:85:df:07:00:6a:67:05:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F3:93:76:2A:94:CD:88:B4:40:5E:C8:BF:AD:6B:61:DE:FB:9D:43
            X509v3 Authority Key Identifier:
                keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:4f:7e:d8:d1:fb:fe:12:b3:ec:72:36:8e:30:41:df:89:
         65:f4:5b:6e:3e:e1:02:10:92:ac:fb:74:e2:8b:74:2f:28:a6:
         cc:dc:8f:86:db:86:1f:d0:c6:bd:4f:0b:d2:7c:24:4e:5b:63:
         24:17:3c:14:8f:47:9e:b2:07:b7:3f:40:ab:9f:59:5a:26:d7:
         2a:bb:a4:c7:5e:f5:f2:23:98:b6:7e:e6:d2:85:35:42:7f:49:
         05:d6:16:ad:50:b3:36:4c:fc:24:8a:71:75:76:e7:f0:b2:0a:
         91:ef:53:c0:04:a0:ab:a8:ce:ed:56:25:11:31:76:42:9d:f3:
         41:57:e5:d2:71:15:bc:64:0c:27:d9:3a:fa:18:5d:05:3e:15:
         67:d3:ea:3a:c8:07:3a:a6:ae:3b:2b:99:05:42:8e:b3:f9:ea:
         fc:f1:69:53:95:38:39:71:c0:94:8c:8a:85:1e:dc:46:4e:f3:
         19:84:a3:18:af:91:91:e3:ba:60:24:8c:5c:b3:f0:9b:73:1a:
         67:84:44:26:69:c0:0d:0a:34:71:47:06:2c:bd:d8:4f:af:f2:
         36:68:81:1f:7a:f5:e6:21:dc:4e:95:4a:51:25:2e:05:49:cb:
         a4:ec:51:f6:c6:0a:1e:7d:27:da:68:59:b0:47:78:66:1d:43:
         fc:66:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:35 2026 by rpki-client