Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File:                     _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier:          Q9wQ6eaxRD8qrpCpgDUzK+q4lLSvnbB9qgRL09pieUE=
Subject key identifier:   73:AB:69:C4:6A:56:1E:90:C9:38:DE:28:AC:9F:20:E5:08:EA:1D:6F
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer:       /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial:       019FA8627E0C58EC58F1B9EEC3C350B2E640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number:          1671
Signing time:             Tue 28 Jul 2026 11:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:54 +0000
Files and hashes:         1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: pkp1mMKFrEye5d49wrVRZsRyws4maEq0jUDdELlGOLI=)
                          2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:7e:0c:58:ec:58:f1:b9:ee:c3:c3:50:b2:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
        Validity
            Not Before: Jul 28 11:00:54 2026 GMT
            Not After : Jul 29 11:00:54 2026 GMT
        Subject: CN=73ab69c46a561e90c938de28ac9f20e508ea1d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:fe:a2:de:35:1b:e0:96:93:d4:10:7d:1b:
                    a6:2e:8b:dc:a1:66:6c:86:c3:a9:f9:88:44:2a:d7:
                    03:c9:61:dc:ef:e7:a5:5f:e6:fa:14:bd:b0:58:f1:
                    64:9d:c9:92:ac:0f:05:c7:be:bf:17:2e:f8:60:18:
                    18:c3:89:b8:e9:0a:cc:c6:a8:15:13:a0:73:4b:96:
                    dd:c0:8f:f2:f9:8b:8b:bc:ff:75:29:df:4a:42:65:
                    35:93:15:e8:31:37:2d:05:16:3e:50:85:f5:17:81:
                    b8:de:d4:f1:98:13:2d:22:56:25:de:11:5c:c7:8f:
                    c4:d2:14:59:c2:a6:1b:6c:bb:44:a9:f3:aa:0e:f6:
                    21:d1:ba:83:b1:31:ee:45:78:99:8c:bb:30:fe:70:
                    ea:d2:eb:1a:17:9f:6e:57:64:e5:f8:82:43:4f:82:
                    ce:bd:c7:e4:4c:65:e1:4a:58:08:3b:51:1b:18:3b:
                    f1:c5:f8:d5:62:6e:c8:9d:9c:cb:3b:15:9b:99:0d:
                    84:d8:67:e1:36:20:2e:61:0d:5e:ed:0d:75:a5:09:
                    af:3e:88:db:19:6a:e6:80:45:89:6f:26:cb:2c:a7:
                    c8:c6:ea:05:66:21:6f:4e:8e:cf:98:05:8d:10:ca:
                    73:84:40:94:ce:03:4b:3c:39:52:1f:5c:83:7b:64:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:69:C4:6A:56:1E:90:C9:38:DE:28:AC:9F:20:E5:08:EA:1D:6F
            X509v3 Authority Key Identifier:
                keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b7:cc:e2:6f:0e:9a:37:94:52:e6:79:2f:f2:4b:e0:eb:06:
         97:3a:a7:54:d3:49:86:5b:77:06:f0:0f:94:b6:ff:e0:68:ea:
         f5:d5:40:97:9d:ff:a1:dc:a6:a4:d6:07:a8:d4:42:4b:10:2f:
         53:6f:8c:96:33:32:98:fb:db:f0:59:32:bf:5d:34:0b:d7:e4:
         e1:79:13:e4:df:28:4a:e2:9a:d0:e4:67:d4:c6:6c:bf:7e:08:
         e5:a3:06:c8:db:ef:7a:1c:64:81:31:89:6a:39:35:56:19:9b:
         36:9f:de:14:7c:16:ee:b3:1c:22:3d:1d:74:e0:6f:8c:2c:0e:
         b9:73:e0:8d:85:c8:c0:11:65:dd:0e:9f:46:cc:62:95:cf:08:
         dc:7d:24:8c:2d:cd:09:c6:c0:ab:50:76:3d:a6:dc:d5:5a:83:
         d4:d1:45:f6:66:1b:0a:fa:0b:93:06:0c:99:f8:9f:37:59:de:
         d8:ce:ad:59:e1:ce:28:71:6e:11:ba:39:33:42:34:44:2e:a7:
         6e:46:f5:de:d2:67:a3:82:6d:c4:f0:e3:5c:7c:86:7f:50:1a:
         10:90:1c:47:a4:a3:df:4c:df:80:f1:38:bb:21:49:a5:76:f2:
         f7:dd:3d:63:0e:27:5a:6a:25:9e:c0:01:71:66:81:84:b5:14:
         ef:6e:15:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYn4MWOxY8bnuw8NQsuZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjN2Q0YWI3NzYxYWJhMjRmMzNkNWI2ZGZiYzI3Y2FiNzM4
YmI1ZWUwHhcNMjYwNzI4MTEwMDU0WhcNMjYwNzI5MTEwMDU0WjAzMTEwLwYDVQQD
Eyg3M2FiNjljNDZhNTYxZTkwYzkzOGRlMjhhYzlmMjBlNTA4ZWExZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteH+ot41G+CWk9QQfRumLovcoWZs
hsOp+YhEKtcDyWHc7+elX+b6FL2wWPFkncmSrA8Fx76/Fy74YBgYw4m46QrMxqgV
E6BzS5bdwI/y+YuLvP91Kd9KQmU1kxXoMTctBRY+UIX1F4G43tTxmBMtIlYl3hFc
x4/E0hRZwqYbbLtEqfOqDvYh0bqDsTHuRXiZjLsw/nDq0usaF59uV2Tl+IJDT4LO
vcfkTGXhSlgIO1EbGDvxxfjVYm7InZzLOxWbmQ2E2GfhNiAuYQ1e7Q11pQmvPojb
GWrmgEWJbybLLKfIxuoFZiFvTo7PmAWNEMpzhECUzgNLPDlSH1yDe2RqowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOracRqVh6QyTjeKKyfIOUI6h1vMB8GA1UdIwQY
MBaAFPx9Srd2Grok8z1bbfvCfKtzi7XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYt
NDUyZWMzYTk1ODhiLzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYtNDUyZWMzYTk1ODhi
LzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbfM4m8O
mjeUUuZ5L/JL4OsGlzqnVNNJhlt3BvAPlLb/4Gjq9dVAl53/odympNYHqNRCSxAv
U2+MljMymPvb8Fkyv100C9fk4XkT5N8oSuKa0ORn1MZsv34I5aMGyNvvehxkgTGJ
ajk1VhmbNp/eFHwW7rMcIj0ddOBvjCwOuXPgjYXIwBFl3Q6fRsxilc8I3H0kjC3N
CcbAq1B2Pabc1VqD1NFF9mYbCvoLkwYMmfifN1ne2M6tWeHOKHFuEbo5M0I0RC6n
bkb13tJno4JtxPDjXHyGf1AaEJAcR6Sj30zfgPE4uyFJpXby9909Yw4nWmolnsAB
cWaBhLUU724VyA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:19 2026 by rpki-client