Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
File:                     hlsHwonfa8nHYttDKboM48Up_ss.mft (raw, json)
Hash identifier:          GFAfDg0phUoaR/n3SBX+eNJO8srs8Wt33xI75S28VjY=
Subject key identifier:   E6:F7:A5:CB:B3:99:DF:74:B0:7E:45:3D:55:0B:C5:9F:30:09:EB:F7
Authority key identifier: 86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
Certificate issuer:       /CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Certificate serial:       019EBF5B3FBE1EAC01C25C5637AC55D01B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
Manifest number:          034E
Signing time:             Sat 13 Jun 2026 05:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:28 +0000
Files and hashes:         1: F6Ed_v2GXlo2fPW9wme1LoJTt5Y.roa (hash: PVB5gLKN9XpK2cpVIIGfT9xr8RhREdDb3biV7KQ2JYE=)
                          2: hlsHwonfa8nHYttDKboM48Up_ss.crl (hash: PHJ6ac4jUn272tU6D6k3y1mcr01EY5uMexGsRcj97lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:3f:be:1e:ac:01:c2:5c:56:37:ac:55:d0:1b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
        Validity
            Not Before: Jun 13 05:01:28 2026 GMT
            Not After : Jun 14 05:01:28 2026 GMT
        Subject: CN=e6f7a5cbb399df74b07e453d550bc59f3009ebf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:9c:91:f0:4e:10:3c:bb:fb:c9:96:eb:d1:
                    8e:33:f9:81:37:8d:37:0f:b0:e6:03:fd:6b:d7:bb:
                    82:af:9c:80:34:e7:a0:1e:f2:bd:fa:ea:89:b6:06:
                    73:3d:0b:49:90:9e:6c:fc:cb:b2:ec:cf:2e:ec:68:
                    55:e7:5e:a7:60:14:16:ee:5e:73:81:e8:f7:b5:80:
                    18:7d:c6:e0:fc:88:26:a3:33:b4:06:6b:d8:71:8e:
                    7d:d1:94:57:cf:f1:16:62:9a:c3:c2:2e:90:a4:ee:
                    0e:b9:8a:49:51:27:df:34:b6:66:5b:ef:6f:bd:39:
                    3b:40:cd:44:e6:b4:e8:72:85:bc:75:c5:4b:c7:eb:
                    23:93:eb:35:f2:89:46:eb:0c:76:39:43:38:d1:d5:
                    12:6b:a2:a6:40:fb:24:ff:8f:8c:0f:6f:71:60:9c:
                    59:2b:7e:c7:6c:b5:d8:35:4d:eb:b9:5e:2c:53:45:
                    c5:d1:94:63:fd:ad:73:b1:a5:89:fa:a5:e2:86:39:
                    07:ce:c4:27:55:ae:03:c6:39:1b:03:d3:40:09:9f:
                    2a:13:34:77:cb:4e:8c:67:e1:47:9a:73:f7:8a:6c:
                    ff:87:51:a7:d4:bb:5d:6f:0d:4a:b9:e5:b7:bd:90:
                    5a:a3:0d:f4:d2:34:de:23:71:b3:2d:73:6b:25:50:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F7:A5:CB:B3:99:DF:74:B0:7E:45:3D:55:0B:C5:9F:30:09:EB:F7
            X509v3 Authority Key Identifier:
                keyid:86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:f4:bc:42:e0:40:e4:4d:c6:a0:8f:f9:a8:cc:e6:41:b0:
         f4:dd:64:53:f2:a8:af:7f:2e:5e:3a:d4:91:c1:f1:27:9a:4e:
         ac:6f:64:a6:93:4f:29:71:2e:d7:c9:9e:f5:ee:cc:93:54:92:
         99:4e:4d:a4:b6:2e:57:ae:fe:c7:d9:2e:43:e5:3c:4c:a5:40:
         f1:5c:6b:c6:ec:7b:7d:d0:ff:be:7e:c1:45:2f:80:8a:d6:ca:
         8c:dc:89:e1:6a:93:26:9d:3f:1a:30:e4:51:9b:9d:6f:1f:4d:
         ff:9c:6e:8e:e8:47:2e:fe:3a:a3:29:e9:3b:cb:2c:40:e4:74:
         4d:b4:81:22:5c:16:dc:63:d0:af:df:e1:cc:b7:3e:44:1c:95:
         68:16:2e:11:ee:a9:a2:f4:d2:72:a8:cc:a5:4e:65:8e:50:1d:
         50:34:10:25:b0:e6:f3:27:ed:2c:cf:df:c6:db:92:25:a0:c8:
         ea:8d:76:fe:5d:b7:5d:06:1b:4c:f1:a8:12:ba:c2:ae:9f:72:
         e2:66:2f:6c:0f:93:ec:72:7b:22:2a:28:bf:51:7f:98:ee:3e:
         01:d1:26:ab:c7:0d:9b:ae:eb:47:3f:39:80:4e:9c:78:a8:99:
         81:57:58:6a:bf:21:71:1b:6e:44:6c:e9:85:30:d5:43:24:61:
         3e:19:e9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:11 2026 by rpki-client