Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File:                     hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier:          EuVsq6AUfi7Tw3u3NpKHogIo+c4QDzHBwLYpBKVubdA=
Subject key identifier:   B7:D5:F8:B0:20:0C:A9:2D:20:B3:46:9B:5C:C0:17:D3:97:CC:54:D6
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer:       /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial:       019FAB9A931931402EF05176400618055663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number:          1872
Signing time:             Wed 29 Jul 2026 02:01:01 +0000
Manifest this update:     Wed 29 Jul 2026 02:01:01 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:01 +0000
Files and hashes:         1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
                          2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
                          3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: VnByMX7t/T0Gy94uwapfJrkbtcSk5A6y0LeURTkJNjc=)
                          4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
                          5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:93:19:31:40:2e:f0:51:76:40:06:18:05:56:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
        Validity
            Not Before: Jul 29 02:01:01 2026 GMT
            Not After : Jul 30 02:01:01 2026 GMT
        Subject: CN=b7d5f8b0200ca92d20b3469b5cc017d397cc54d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:92:a6:dd:82:7a:2d:d2:5b:f9:fe:11:24:
                    61:88:b3:ab:f2:75:80:aa:0d:53:31:93:b2:81:e3:
                    c2:88:f4:80:cc:9e:be:66:8f:b3:6f:20:e6:5c:1a:
                    cf:5b:0d:76:5c:00:5b:c4:ac:d3:29:0c:85:9a:b0:
                    00:65:83:08:e4:88:7f:2f:c9:ce:3a:ea:e0:51:ed:
                    f0:8f:4d:f4:b3:10:b3:29:36:4f:3b:bb:e1:60:d2:
                    72:5e:3a:24:c8:19:54:ff:66:92:41:ea:ff:9d:c8:
                    0c:20:fd:9b:41:5e:a1:2e:63:1e:7b:49:77:30:c3:
                    f4:78:ac:6d:5d:44:d0:57:7a:96:3f:c5:6f:b1:3e:
                    aa:6e:1e:82:c6:78:df:4b:bd:5b:eb:0b:70:5f:d5:
                    6f:4d:47:2b:db:cb:57:ca:00:cc:e6:72:75:96:2a:
                    7e:ce:1d:a7:9d:34:78:e1:03:f6:f5:be:aa:f5:0b:
                    97:61:8c:6b:b8:62:05:e7:46:c4:43:a0:fd:03:f8:
                    5d:fb:cd:9c:82:a4:f7:3c:a0:5d:5f:3a:35:b4:d2:
                    69:09:93:a6:a3:75:21:c5:fa:7b:b8:ac:7d:6a:3b:
                    da:ce:12:e6:49:fd:ad:07:c8:8f:a0:1b:8a:9e:ee:
                    db:ca:14:56:f2:7e:6c:c5:2d:c6:7f:fc:cc:84:53:
                    0b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D5:F8:B0:20:0C:A9:2D:20:B3:46:9B:5C:C0:17:D3:97:CC:54:D6
            X509v3 Authority Key Identifier:
                keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fd:11:b3:2d:47:3c:c5:e9:af:ec:04:40:11:5d:70:62:a4:
         32:06:15:ed:2c:b2:16:fe:ee:b0:5d:11:58:8e:0e:e8:92:47:
         16:ae:c3:60:d9:d5:71:b3:b7:a7:da:32:a2:72:c0:11:47:7c:
         2c:78:61:33:1f:57:eb:61:a5:c2:a6:f5:db:31:b4:92:36:78:
         a2:76:88:87:44:c4:ac:70:6c:8b:9e:71:e3:3e:6e:06:81:c6:
         7a:95:6d:33:4d:2c:2c:7e:2a:b3:bd:f0:fb:32:28:95:bb:0c:
         cb:85:33:9f:d6:2e:a6:e6:88:31:68:df:ca:50:3d:22:07:80:
         60:b9:2b:26:22:ce:69:b4:b4:fe:64:b0:08:ea:93:1f:fc:56:
         08:52:9f:16:6c:28:c3:34:3d:66:45:81:03:92:36:3f:cf:71:
         d1:22:d5:60:e8:e8:e1:36:56:2d:e2:0d:2c:14:23:af:ef:52:
         42:97:b8:72:09:68:0f:20:82:af:d0:53:60:04:83:b2:ca:61:
         ec:1c:f3:79:cd:12:41:d8:66:6f:2b:cb:2b:8f:38:3f:82:b2:
         94:10:9c:00:0d:d9:77:06:ac:fb:fe:1b:44:37:b7:c0:b0:b1:
         bf:c3:25:37:e4:b9:99:d9:0e:9d:ce:ee:6c:8e:21:a9:f3:a3:
         4a:2e:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:27:53 2026 by rpki-client