Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File:                     1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier:          Hi4kfizUo4At+y7kslAXK02xChqSwCBWbfNL90FPBNk=
Subject key identifier:   F3:24:E3:EA:A8:C0:EC:24:70:A7:5B:FB:69:52:D0:1F:C8:15:87:C5
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer:       /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial:       019FAA507A71F3ED6231D591E933E7342657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number:          0933
Signing time:             Tue 28 Jul 2026 20:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:28 +0000
Files and hashes:         1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: pjzjjumXaXTC4ZzqgnzwMh6te5EHvmNWVz5LCZjokFk=)
                          2: jbum_D98f7wXxL3zfJIV6BCwD8g.roa (hash: C+K78EzxF6K+3h9zUKmt0tIENTKcf8CCLlSHEr+JL70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:7a:71:f3:ed:62:31:d5:91:e9:33:e7:34:26:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
        Validity
            Not Before: Jul 28 20:00:28 2026 GMT
            Not After : Jul 29 20:00:28 2026 GMT
        Subject: CN=f324e3eaa8c0ec2470a75bfb6952d01fc81587c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:03:97:1d:b5:14:eb:49:fe:29:62:68:dd:
                    11:88:d6:63:38:47:b0:f2:6d:2b:72:17:b7:87:19:
                    0e:4e:85:07:0a:78:bf:ff:80:3c:be:75:c8:f2:ab:
                    7d:19:fb:56:36:5b:89:61:d3:99:ba:6e:0f:0c:36:
                    b1:8c:2e:c9:2c:eb:58:05:8a:b2:87:65:68:7c:87:
                    fc:68:fc:fc:a2:fd:a7:93:b2:f4:3c:10:cf:df:eb:
                    08:c1:08:eb:74:ad:cf:b6:a7:c7:ec:2b:39:84:54:
                    a6:29:f1:a5:f4:0e:59:83:e3:64:ce:ed:69:18:20:
                    9f:ad:b9:a2:b2:f2:bf:cd:e1:cb:cb:81:ca:96:b1:
                    32:32:4f:a5:15:de:66:ff:92:78:d5:22:64:92:45:
                    13:fa:2b:a1:e6:1e:94:05:69:32:83:33:72:72:71:
                    09:e1:d4:fe:3e:48:8b:2a:30:78:58:89:4a:1a:a8:
                    e1:07:6c:47:a5:b8:71:71:fb:a7:a8:d6:7c:77:15:
                    cb:77:2d:ed:cc:40:ba:3b:41:f0:48:86:dd:da:82:
                    30:c3:9a:0e:15:ad:76:b1:e0:55:83:8b:5c:57:1f:
                    f2:b1:82:1a:e5:ef:6b:a6:15:14:db:3e:3f:a4:79:
                    e4:75:5e:73:35:76:74:81:d2:db:a1:58:a7:a1:76:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:E3:EA:A8:C0:EC:24:70:A7:5B:FB:69:52:D0:1F:C8:15:87:C5
            X509v3 Authority Key Identifier:
                keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:10:6d:97:e1:90:71:61:8b:1d:7b:b4:78:51:68:28:39:ff:
         84:eb:c3:d9:f8:ec:5e:6f:67:68:23:f3:cb:37:cb:38:96:0d:
         c8:db:97:8d:59:e5:0f:27:51:52:e4:e8:c5:9c:bc:e3:43:0c:
         0b:ce:60:34:34:ff:05:ac:16:22:60:85:bb:b2:d9:2a:12:53:
         78:f1:da:b8:a7:ea:3a:2b:36:e5:ba:37:80:f4:d4:4c:a1:8f:
         d7:1b:bf:8e:5f:3a:ef:51:12:f3:86:61:c8:b5:a8:8d:63:bb:
         07:e1:3c:6c:f6:38:5e:9f:09:b4:bb:72:8e:37:4a:d5:16:e1:
         42:bf:f3:4c:cf:1c:c8:00:38:f1:52:f1:7c:26:6c:4f:54:2e:
         ef:9d:64:7a:6e:42:95:89:95:2f:fe:dc:bd:9a:a4:73:b2:56:
         33:b7:29:ec:11:8c:4b:d8:8f:1a:5a:f9:c3:d6:92:d8:f4:3d:
         56:22:d4:4e:0e:a0:ab:28:40:21:98:ff:10:76:a6:49:33:01:
         61:f6:ec:16:d0:4a:23:ea:8e:20:0f:77:c8:2d:a2:40:f0:59:
         9c:31:db:b4:70:7e:de:ad:4a:d9:72:5e:e8:61:a8:3f:ee:e2:
         6f:99:47:16:eb:ed:ef:4d:2a:c3:48:f4:c3:44:b9:ec:fe:f6:
         18:9f:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:27:56 2026 by rpki-client