Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File:                     hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier:          NMVMoSyewkcN3drKfE9v6GQNC/4f6je4OTQ8rUaj5hE=
Subject key identifier:   AB:AD:84:79:38:67:73:77:D8:BF:D7:0A:18:69:B6:78:06:FC:F6:37
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer:       /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial:       019FA7BD8434056A8E2768560C2A10EE5662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number:          06AF
Signing time:             Tue 28 Jul 2026 08:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:42 +0000
Files and hashes:         1: YEZIYMekfV4MSTcSWZQWUheIYSA.asa (hash: RvCtRmtfiK0V0w8kYFvxJFZ93JlcgF8ks3HVxGrymb8=)
                          2: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: Gl16yUOGmDkCzp+GbX7GlbWM/K88g06G50/ehwaKqJU=)
                          3: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:84:34:05:6a:8e:27:68:56:0c:2a:10:ee:56:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
        Validity
            Not Before: Jul 28 08:00:42 2026 GMT
            Not After : Jul 29 08:00:42 2026 GMT
        Subject: CN=abad847938677377d8bfd70a1869b67806fcf637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:b6:d9:df:90:35:0b:ed:43:88:f1:8d:85:
                    87:f4:d8:a2:2e:18:59:b3:4b:ce:48:1d:99:57:65:
                    bd:1b:19:00:ad:de:28:7f:ea:0c:a6:77:34:09:7f:
                    5e:95:e5:75:94:a6:22:97:22:1e:bc:9f:df:9d:8f:
                    11:73:21:c7:f9:22:03:3c:1d:06:3c:6a:a2:43:01:
                    4d:d9:87:dd:98:80:72:8d:07:99:0d:40:2b:f9:e3:
                    f6:fd:97:91:1c:b9:29:1f:14:98:91:f7:70:be:be:
                    b6:90:f5:6c:b3:6d:74:55:bb:cd:1b:6b:42:d1:a9:
                    f5:b9:4d:3b:59:46:c1:ec:0d:e6:0c:cd:e8:94:5c:
                    75:9f:6f:97:c8:2b:56:97:32:0b:85:0b:bd:07:20:
                    ba:66:37:07:26:5d:8f:66:ec:5b:e6:ed:4e:ee:d4:
                    81:45:20:fe:53:c0:35:05:16:93:03:ac:fc:59:f9:
                    34:60:d6:5c:4f:1f:6a:2d:ce:d3:80:5c:9d:a7:bc:
                    9d:d1:50:ef:33:47:ba:66:88:34:a3:07:86:4f:9f:
                    f4:af:a3:53:ce:64:c1:c6:e5:2e:0a:75:71:bb:ee:
                    e4:20:3f:87:88:38:d2:c9:0d:36:99:c7:2c:8d:ae:
                    ea:c9:79:a7:b7:e8:5a:a5:9c:c1:40:94:bb:c5:fd:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AD:84:79:38:67:73:77:D8:BF:D7:0A:18:69:B6:78:06:FC:F6:37
            X509v3 Authority Key Identifier:
                keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:34:11:e4:33:3b:12:f1:f0:ef:dd:0b:55:12:0c:89:1c:
         60:47:fa:bb:bc:1a:67:32:5a:bd:7c:fb:ac:55:b1:8f:88:ff:
         8e:5c:1e:63:6f:06:44:b4:f0:b1:fd:16:b5:3e:b2:23:4a:7f:
         3b:d9:68:38:19:13:15:39:55:26:92:d2:53:44:73:2b:f7:51:
         ba:2f:d6:35:1d:66:02:6f:54:50:1f:a7:93:a6:29:a8:57:b4:
         85:e4:ec:67:a1:22:71:3f:c4:87:7b:82:30:d1:8a:5c:e7:ff:
         f2:3a:bb:64:3d:78:80:88:56:00:0d:c8:97:d2:a3:4a:3f:c4:
         bb:2c:19:68:f9:83:70:f3:26:2c:eb:61:4c:dd:0b:32:de:28:
         de:34:da:11:ca:ad:51:fc:99:e1:27:69:5d:54:24:54:a5:3e:
         1a:fd:de:69:1a:78:57:fd:ad:c5:a8:25:fc:7e:03:51:62:4f:
         fe:fe:35:ec:9b:46:b6:7c:85:09:3e:4f:c0:22:23:60:eb:ef:
         9c:2b:09:3c:9f:b9:62:0d:92:b2:7f:a5:aa:9f:87:86:bc:54:
         9d:16:f4:f5:70:d4:ad:2a:e9:0f:dc:53:d1:da:3b:12:1d:5b:
         ab:11:ae:ad:fc:a8:ba:c2:93:81:51:67:14:03:1b:19:6b:45:
         b2:da:ad:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvYQ0BWqOJ2hWDCoQ7lZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDUwOTI1OWY3MDBjZGM0NDQ4ZjFmYmY1MzBjMTllNDA3
NTRlYzQwHhcNMjYwNzI4MDgwMDQyWhcNMjYwNzI5MDgwMDQyWjAzMTEwLwYDVQQD
EyhhYmFkODQ3OTM4Njc3Mzc3ZDhiZmQ3MGExODY5YjY3ODA2ZmNmNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR222d+QNQvtQ4jxjYWH9NiiLhhZ
s0vOSB2ZV2W9GxkArd4of+oMpnc0CX9eleV1lKYilyIevJ/fnY8RcyHH+SIDPB0G
PGqiQwFN2YfdmIByjQeZDUAr+eP2/ZeRHLkpHxSYkfdwvr62kPVss210VbvNG2tC
0an1uU07WUbB7A3mDM3olFx1n2+XyCtWlzILhQu9ByC6ZjcHJl2PZuxb5u1O7tSB
RSD+U8A1BRaTA6z8Wfk0YNZcTx9qLc7TgFydp7yd0VDvM0e6Zog0oweGT5/0r6NT
zmTBxuUuCnVxu+7kID+HiDjSyQ02mccsja7qyXmnt+hapZzBQJS7xf1ABwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuthHk4Z3N32L/XChhptngG/PY3MB8GA1UdIwQY
MBaAFITVCSWfcAzcREjx+/UwwZ5AdU7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQt
MWE4OWFiN2I4Y2I1LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQtMWE4OWFiN2I4Y2I1
LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaso0EeQz
OxLx8O/dC1USDIkcYEf6u7waZzJavXz7rFWxj4j/jlweY28GRLTwsf0WtT6yI0p/
O9loOBkTFTlVJpLSU0RzK/dRui/WNR1mAm9UUB+nk6YpqFe0heTsZ6EicT/Eh3uC
MNGKXOf/8jq7ZD14gIhWAA3Il9KjSj/EuywZaPmDcPMmLOthTN0LMt4o3jTaEcqt
UfyZ4SdpXVQkVKU+Gv3eaRp4V/2txagl/H4DUWJP/v417JtGtnyFCT5PwCIjYOvv
nCsJPJ+5Yg2Ssn+lqp+HhrxUnRb09XDUrSrpD9xT0do7Eh1bqxGurfyousKTgVFn
FAMbGWtFstqt3Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:31 2026 by rpki-client