Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File:                     Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier:          sygLqvHDR5k+rsQIfZddWPay4SR1CzAAgwBQ/v4DHPo=
Subject key identifier:   28:83:D4:58:E5:EF:F9:61:E6:85:F7:12:E7:A4:AC:DF:72:36:A0:59
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer:       /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial:       019FAA50D83A62DD57D56A3EC1DED0CA6C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number:          11F1
Signing time:             Tue 28 Jul 2026 20:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:52 +0000
Files and hashes:         1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: +WUOxLV5YSCduFolklZgBAz03vEi6DvRWCGeNJMJQ64=)
                          2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:d8:3a:62:dd:57:d5:6a:3e:c1:de:d0:ca:6c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
        Validity
            Not Before: Jul 28 20:00:52 2026 GMT
            Not After : Jul 29 20:00:52 2026 GMT
        Subject: CN=2883d458e5eff961e685f712e7a4acdf7236a059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7e:60:85:49:a2:cd:35:81:39:4b:c0:5f:bc:
                    2d:1b:59:85:f0:ce:27:c9:6d:0f:60:b7:e0:80:b2:
                    e9:37:49:06:17:a3:d3:66:6d:95:55:22:f5:59:92:
                    be:6b:f7:5d:d2:8c:f8:06:46:5d:9d:af:b5:af:30:
                    95:3e:ac:bc:42:d4:94:34:80:91:3c:8d:2d:36:ef:
                    ac:6d:ae:d1:69:18:eb:34:f1:59:e4:4c:92:b0:f8:
                    29:fc:81:73:4f:54:a7:a0:a4:4d:42:75:bb:d7:d8:
                    6c:1f:dc:94:26:b9:36:35:24:64:6f:31:1d:13:56:
                    50:2b:39:54:7f:d9:0e:4d:b5:f5:bf:6c:61:93:26:
                    3b:3b:b2:86:75:97:af:7a:62:cd:db:4e:90:4a:11:
                    5a:ff:e0:27:a4:9d:9d:93:05:e8:dd:83:de:9f:eb:
                    65:f3:7c:14:52:06:50:5b:0c:de:d3:94:3a:53:d5:
                    f0:0b:22:2e:e6:af:fc:e6:e4:18:f0:37:76:e0:02:
                    04:62:0d:f0:c2:53:54:da:72:d8:d2:30:4e:0d:b1:
                    e7:ae:38:fc:43:cc:2a:1e:da:6b:54:64:d2:f1:75:
                    1f:fe:38:b8:41:72:78:97:b9:49:49:21:0b:21:e3:
                    1e:58:1f:ae:ec:ad:a0:60:44:ba:e4:7e:b6:c1:59:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:83:D4:58:E5:EF:F9:61:E6:85:F7:12:E7:A4:AC:DF:72:36:A0:59
            X509v3 Authority Key Identifier:
                keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:22:44:a8:eb:28:4b:a7:55:c0:77:a1:bf:a1:d1:dd:4c:d6:
         c3:4e:8b:1c:83:18:14:6c:97:c5:a7:fb:96:6d:d3:f0:e5:58:
         91:81:1f:43:59:0f:d1:aa:86:12:11:bf:c4:af:f3:63:65:e9:
         00:89:56:9d:25:5c:08:59:12:83:c9:aa:2d:26:c4:e6:ad:39:
         87:d7:e0:ea:4f:93:9b:c6:0f:0c:f0:5e:76:00:80:75:9a:d3:
         76:49:79:20:6f:19:cc:e2:2f:1d:d6:df:84:0a:4f:be:57:ec:
         1f:69:a1:70:ba:06:98:94:7c:c7:fd:56:21:b3:f0:66:c8:6b:
         56:85:56:ce:00:a8:1f:bf:de:50:7c:19:4f:92:4d:b2:5a:1c:
         32:5c:29:18:1d:9b:41:43:3e:69:52:f7:b3:00:6d:0f:27:eb:
         d0:6a:76:53:65:ea:8c:46:a5:99:ed:77:b4:6f:28:b2:44:4d:
         a8:8f:5b:07:a1:61:70:f6:2d:a8:0c:49:f4:62:5c:2e:90:b9:
         4b:78:2e:7b:61:a5:f6:d1:6b:71:aa:9a:50:7e:ad:6c:a5:16:
         6f:16:78:92:0e:72:94:7b:bd:c5:43:9c:00:b8:cb:ea:ca:27:
         1a:14:37:22:80:bb:0c:47:b0:28:a8:43:ad:f8:83:3f:b5:df:
         26:df:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:03:05 2026 by rpki-client