Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File:                     HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier:          +B3zZotyeypAX2IeeLwyPtOYWxlxwI3f/kGda1FV9Kk=
Subject key identifier:   F4:AD:65:74:D6:A5:B2:BF:BD:26:12:48:C7:5A:57:B9:A5:8D:EF:03
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer:       /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial:       019FAB2CD6505563E0E5925FDA8AEC2A5ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number:          1197
Signing time:             Wed 29 Jul 2026 00:01:10 +0000
Manifest this update:     Wed 29 Jul 2026 00:01:10 +0000
Manifest next update:     Thu 30 Jul 2026 00:01:10 +0000
Files and hashes:         1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: Le24KR4dtc5HQJ+ogWVw1yLB6sneSOqmL+vzMNJU+sE=)
                          2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:d6:50:55:63:e0:e5:92:5f:da:8a:ec:2a:5a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
        Validity
            Not Before: Jul 29 00:01:10 2026 GMT
            Not After : Jul 30 00:01:10 2026 GMT
        Subject: CN=f4ad6574d6a5b2bfbd261248c75a57b9a58def03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:2d:f3:12:5c:8d:9f:86:78:78:43:22:b6:
                    27:07:06:ff:37:70:b5:e2:86:0b:db:c2:0e:e6:73:
                    b1:cf:52:dc:ca:fd:5a:7f:a0:28:c2:0f:b5:f8:a9:
                    52:2f:d9:39:2b:41:ef:4b:91:8b:1d:ac:1f:24:9e:
                    31:31:ee:4b:cf:2c:49:66:31:d5:af:5f:4d:fa:f7:
                    c2:5f:ca:fc:f0:f5:50:68:7b:2a:65:69:9f:d1:8b:
                    04:8a:84:e9:21:58:32:5a:f6:f3:d0:f7:93:81:33:
                    6b:4f:7a:f8:df:d8:db:2a:c7:1e:e3:b1:33:f3:1b:
                    7a:88:60:d5:d7:37:fa:b2:ab:93:20:62:37:29:96:
                    36:91:2e:09:c9:5d:24:95:7a:d7:d1:96:d4:1b:01:
                    ce:6c:40:8b:44:92:ba:22:21:3e:63:30:c8:c3:db:
                    d6:92:2d:d6:98:ea:0a:61:ec:27:3e:17:ef:96:40:
                    52:c0:1b:75:eb:30:d1:94:29:60:60:65:62:88:06:
                    0e:f5:67:49:ff:7c:72:dd:7f:d2:25:95:3f:92:5a:
                    2e:7b:d6:ed:6a:28:0d:03:33:3c:96:0b:5e:4f:de:
                    b6:aa:87:25:c2:67:58:1a:db:a0:7c:e5:2f:86:55:
                    97:87:62:50:82:41:7c:3b:90:06:fb:a9:01:f9:f7:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AD:65:74:D6:A5:B2:BF:BD:26:12:48:C7:5A:57:B9:A5:8D:EF:03
            X509v3 Authority Key Identifier:
                keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1a:08:94:bd:32:ed:4a:de:7a:2a:32:a6:c9:a7:a9:3f:4f:
         03:a0:cf:78:60:a5:36:c6:74:4d:f1:cc:68:c0:84:e5:aa:e9:
         22:27:c3:44:2b:dc:da:f4:48:be:fe:54:f3:77:91:fb:8a:5c:
         60:34:84:33:bd:f5:a0:5d:80:82:1d:9e:c2:83:54:90:08:c0:
         5d:d1:80:b7:24:51:35:a1:9b:b6:16:c3:05:7d:a4:67:6a:ad:
         cd:d4:c0:5f:50:1f:af:0d:38:1d:1c:45:4c:e4:01:dd:2c:5c:
         e3:6b:59:15:13:a9:e7:cd:e4:f0:6c:f1:1a:19:b4:cb:7a:6e:
         71:da:d0:82:6f:c5:8d:db:5d:53:dc:30:29:83:6d:bf:1c:79:
         2c:9c:a7:b6:89:a5:45:b2:61:69:b0:11:a5:e0:a1:ab:a3:f2:
         94:79:bf:28:32:9e:3d:fb:4c:f0:1c:e2:04:3d:3f:19:9e:31:
         9f:90:57:41:07:6f:26:30:a5:dd:68:d3:02:ae:bb:1f:20:c2:
         2d:d8:ee:1b:71:a6:28:1a:2a:ab:32:ad:f9:05:1c:be:53:b4:
         22:57:70:e5:f5:08:c8:2d:b7:b0:07:19:90:9c:8e:7d:ad:76:
         95:9b:f0:f4:b3:42:9d:ce:e7:85:fc:5a:ee:51:a1:7a:2a:ee:
         ac:84:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:51 2026 by rpki-client