Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File:                     1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier:          BHGZlsg9HvlzNLFUMAsCZXZLxtIOeCD+THIZYo1mJR4=
Subject key identifier:   33:F4:C0:E6:8D:86:DC:22:4C:15:2A:D6:8D:08:FF:11:DD:41:F0:91
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer:       /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial:       019EBE47816F394E5F487A851AEC7D21C929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number:          0A83
Signing time:             Sat 13 Jun 2026 00:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:17 +0000
Files and hashes:         1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: 06KzJpGvm82WX7nBG+vg0ueg2CP0pL6biWTTuiJcEew=)
                          2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
                          3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
                          4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:81:6f:39:4e:5f:48:7a:85:1a:ec:7d:21:c9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
        Validity
            Not Before: Jun 13 00:00:17 2026 GMT
            Not After : Jun 14 00:00:17 2026 GMT
        Subject: CN=33f4c0e68d86dc224c152ad68d08ff11dd41f091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:46:b0:96:f9:d7:7b:c2:5a:1e:aa:6a:af:
                    47:1b:76:a0:81:2d:80:8e:e1:21:ca:9b:7d:a5:1f:
                    f0:ad:24:df:0f:44:fe:ce:d0:08:e2:ff:f4:9c:0b:
                    3c:e8:9f:58:8f:48:84:94:94:2a:7e:6c:a5:6b:eb:
                    88:29:a0:9c:77:cc:39:ca:ae:a7:f7:51:35:6c:a2:
                    53:ac:e3:11:6a:c2:03:13:8b:c5:41:90:3f:6c:e2:
                    36:5e:7a:bf:3b:a0:2d:ce:68:9f:18:bd:d7:b5:20:
                    1a:b6:1f:86:91:14:35:1b:72:5d:a2:18:93:33:5a:
                    23:47:6a:28:de:e7:70:ce:d1:f6:d0:9f:92:97:be:
                    4f:dd:41:81:93:5d:69:8e:37:cc:35:96:8d:96:c9:
                    3c:56:44:9d:ce:a1:8c:b9:1c:8f:1b:3b:b8:69:35:
                    ca:48:39:07:c7:7a:df:e5:09:66:ac:b0:1f:1b:0e:
                    94:a1:b4:b0:90:7b:42:aa:5b:29:57:e6:35:fd:ee:
                    bd:2c:8d:0c:a4:8d:c1:4c:fa:bf:d2:6a:16:33:43:
                    9b:27:5d:9d:a3:09:02:1c:a1:4d:9c:19:24:c8:05:
                    c2:11:51:49:7a:58:37:14:7a:3b:23:37:23:0f:e8:
                    ad:1d:75:3a:d9:ae:9e:2f:92:19:56:a9:47:40:dd:
                    d9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F4:C0:E6:8D:86:DC:22:4C:15:2A:D6:8D:08:FF:11:DD:41:F0:91
            X509v3 Authority Key Identifier:
                keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:50:ca:d3:9a:0c:cd:4f:eb:f5:8c:42:d0:3b:5d:8b:d8:
         a1:c8:22:04:be:0d:d4:e1:1c:85:f7:6a:5f:7a:e9:e0:3e:8d:
         df:81:7a:2c:05:96:07:19:48:1f:bb:e9:00:cc:c5:73:ab:56:
         1d:d6:21:63:bc:67:a2:ea:3e:62:e4:5e:c1:5e:dd:ad:35:6e:
         0d:b8:57:59:db:49:83:02:26:4d:ac:d6:b7:f3:3d:56:cd:48:
         d4:53:84:e6:ca:d9:fe:61:5b:0c:cb:65:93:19:01:20:d2:f3:
         fd:43:81:09:a6:99:0d:8d:a4:c7:e3:39:99:a0:3e:e7:99:71:
         2d:19:70:f9:2d:8f:09:e1:c4:ed:30:ec:49:ef:3b:36:c3:74:
         8f:9d:a1:7b:e0:97:65:82:0e:e2:75:44:28:c0:e0:36:44:1c:
         f0:e2:a5:a2:39:aa:16:60:0b:67:cd:d3:fe:cd:d8:75:bc:3e:
         6b:04:e0:d9:cb:58:c4:fc:7b:98:1a:15:25:f4:a2:4f:91:8b:
         e0:ac:8b:5f:b9:5d:83:13:71:9b:1c:10:26:cd:2c:7a:82:38:
         5f:76:d6:ad:46:09:4d:71:ec:d6:6e:df:95:1c:b9:e3:60:be:
         5d:ca:bd:a0:91:af:5f:0e:7b:c4:2d:ba:f1:0f:ff:d5:6a:31:
         1c:11:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:05 2026 by rpki-client