Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          E3pVa9DKuskAg8TQ7E7t8mBVJb8692xxWH7DjnOwxnA=
Subject key identifier:   63:B8:73:2B:92:FD:95:EF:1B:78:D4:87:6C:36:91:E4:1F:15:C9:0B
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       019FAAF536EE068E9B3F10410E54B5F9A769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          090A
Signing time:             Tue 28 Jul 2026 23:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:24 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: eaA4xf4R17P3OZl0enHyGa5EPS73QxELmtuimtA2LFc=)
                          2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:36:ee:06:8e:9b:3f:10:41:0e:54:b5:f9:a7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Jul 28 23:00:24 2026 GMT
            Not After : Jul 29 23:00:24 2026 GMT
        Subject: CN=63b8732b92fd95ef1b78d4876c3691e41f15c90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:e1:13:ab:6f:c4:a5:db:00:1d:ab:94:78:
                    46:10:8c:4f:7c:45:fd:74:a6:2b:b0:e2:7c:e2:07:
                    89:51:13:c7:30:8a:d5:7a:bc:a1:0b:3a:e0:49:05:
                    d6:fa:1b:f0:aa:66:ad:14:7d:cb:3a:9b:90:74:16:
                    76:98:c4:c6:42:97:1f:72:10:d3:3e:ae:4a:34:48:
                    23:70:d8:95:0c:31:23:09:c9:ee:b8:9f:8e:56:53:
                    48:f7:84:46:43:07:e3:49:73:c9:a0:8c:00:1e:61:
                    0e:1d:22:43:12:2e:93:19:7d:f3:b5:3e:0b:c6:83:
                    13:fa:f4:fd:f9:87:d0:12:50:61:35:6e:af:5a:08:
                    e3:80:0e:2b:a7:99:f9:73:46:96:a7:5f:19:a0:5f:
                    e8:dd:6f:0c:23:2a:df:3a:1a:38:4a:5d:1f:8a:8c:
                    94:c7:4e:29:54:0a:59:b9:5a:12:cb:eb:9b:40:0a:
                    20:d5:4c:1d:db:0e:64:30:0f:4b:37:de:0a:6d:d9:
                    ca:6b:11:50:d5:b9:60:9f:a6:b2:fc:11:05:1f:af:
                    97:24:2b:0f:c5:75:9e:8b:b4:29:5d:76:ad:28:ec:
                    5e:06:1d:db:0e:44:cd:28:14:97:7f:2b:dd:33:64:
                    5a:bd:22:9b:05:70:62:81:9b:a5:ae:85:b9:61:4c:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B8:73:2B:92:FD:95:EF:1B:78:D4:87:6C:36:91:E4:1F:15:C9:0B
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c1:9f:d5:5a:af:45:3b:8e:48:62:1b:e1:07:7d:13:cd:83:
         12:45:8f:a7:7a:ac:70:c8:b1:db:91:d0:8e:06:0a:b4:6b:6d:
         ee:fe:c9:d4:82:18:97:01:9d:5b:42:c2:d5:9d:8c:31:3b:f2:
         e0:06:36:6c:ad:7d:71:d7:15:80:2f:ee:72:53:db:c9:48:08:
         f3:a6:4a:02:f3:56:52:22:33:60:1b:22:43:db:9e:bf:4b:f5:
         15:6e:75:3d:fa:4d:71:07:75:9f:f8:8b:0f:47:7b:e5:cd:8c:
         71:e3:08:f9:9d:8d:f1:81:9e:ec:66:81:72:a9:ee:59:cc:db:
         d0:e2:55:0d:63:17:4b:0d:8d:be:ff:b8:32:f2:7e:cc:d4:20:
         14:60:da:d6:ca:b0:cc:74:a1:bf:70:bb:a8:e6:fa:e1:c4:c9:
         bb:d7:4f:3a:f0:c3:81:3a:ef:9b:c1:79:9d:20:78:c5:dc:30:
         09:61:45:b3:fc:35:f2:d7:96:86:5e:5a:b5:40:4c:92:87:d8:
         24:ab:1d:c3:1e:87:f2:78:72:2c:e2:0c:c4:df:32:25:e7:a3:
         2a:8e:bc:cc:a5:79:7f:db:c3:5e:db:d1:a3:23:12:91:a7:b3:
         c1:7b:a8:70:0b:2b:84:78:07:46:33:f1:4e:b0:7e:60:d7:59:
         e9:1d:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:54 2026 by rpki-client