Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File:                     hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier:          u1GkrY8fI9Nw2jDP8vPlMae8+rLOevruZB7FUvhr9Wg=
Subject key identifier:   63:38:DF:6F:4B:4F:39:0A:24:D2:8B:ED:E9:80:8E:7E:8A:A1:80:45
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer:       /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial:       019FAA50DAE455A8F461FD88AAB83CCCB1B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number:          1416
Signing time:             Tue 28 Jul 2026 20:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:53 +0000
Files and hashes:         1: 1TVNFB2oqiU4XNjEv0BT-Pb2M0M.roa (hash: 3vvI5UYlWItjTSfQrco2BtzXvJBHGkk/x8CyOBqqD8U=)
                          2: 41gdFH-JudL678u_D6BB_y7EfU0.roa (hash: VnQDTpZib3x3twc60ulDPL39Qe1IesXf9+CLXJ4WNxw=)
                          3: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (hash: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg=)
                          4: YQ7UOE0fRKiUXxXL_L3iPhyJx88.roa (hash: 3O80VS4rsgTgEZbTwubyabO64/481tfENVUe6/Id6ow=)
                          5: a-1eulbURZwYdTXjQHmSQrhkepg.roa (hash: dU6/8b7jh8wXrhRwwYJ+BZWPnCRt/iCI6b/zuZGMbbY=)
                          6: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: Nghc0ncZUhfOGUnZj5YXBNXKL6EDHE+Cut5n1D8/GSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:da:e4:55:a8:f4:61:fd:88:aa:b8:3c:cc:b1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
        Validity
            Not Before: Jul 28 20:00:53 2026 GMT
            Not After : Jul 29 20:00:53 2026 GMT
        Subject: CN=6338df6f4b4f390a24d28bede9808e7e8aa18045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:0f:64:ba:81:0f:aa:a8:68:08:d0:de:6b:
                    ea:fd:a1:2e:36:89:55:fe:b2:f0:29:2a:2d:a8:6e:
                    55:16:0c:0b:28:b3:9b:ee:c2:19:50:1b:7a:13:e4:
                    78:e4:02:7a:d2:4b:e2:23:96:67:7a:79:ee:19:ac:
                    a3:d1:37:6c:9e:10:19:8d:1c:fe:8a:34:e4:9e:ba:
                    76:5c:3f:e9:82:06:25:f6:56:81:eb:28:12:e0:06:
                    d4:3f:de:d7:41:4e:14:80:c6:57:e6:9d:47:42:68:
                    86:69:bf:da:13:63:cd:81:b5:36:6e:81:47:dc:89:
                    4e:54:95:ce:02:9c:52:ba:af:78:10:6d:4d:84:a4:
                    98:87:b6:a6:fb:c2:0c:c5:24:cc:32:9d:ec:c4:f0:
                    8a:7d:ac:b9:bf:f2:a1:2b:db:95:16:4d:75:3e:e2:
                    3a:96:91:20:3f:0d:08:39:cd:99:b0:5b:d4:e2:14:
                    59:39:36:c5:af:70:ca:9a:43:a5:40:77:27:c2:05:
                    e5:cb:78:3f:a5:26:4a:03:f6:05:7f:1a:6b:fc:b2:
                    e1:0c:79:b5:f3:b5:99:da:57:74:7a:cc:0c:51:6f:
                    7b:7e:6a:de:56:21:2e:ba:c5:4c:3d:b2:7e:6e:87:
                    85:e7:6f:dc:fa:c4:af:bc:e9:4b:1b:fa:78:0c:3f:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:38:DF:6F:4B:4F:39:0A:24:D2:8B:ED:E9:80:8E:7E:8A:A1:80:45
            X509v3 Authority Key Identifier:
                keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:b4:c5:df:15:ad:ee:d2:79:e0:6a:1d:83:af:3f:e0:e7:
         55:b7:2a:ae:e8:e8:9f:aa:87:6b:89:bb:1c:95:3a:01:14:92:
         65:9f:91:05:bb:1b:7c:c5:7d:c1:65:15:9a:0f:bb:14:68:03:
         6b:1e:74:82:08:47:b9:cb:98:c0:5e:21:10:58:a8:7c:dd:6d:
         c6:63:2f:43:9b:9b:2f:bb:a8:3f:03:1b:51:56:82:f0:05:9b:
         e7:f2:bd:26:43:fd:89:43:50:8a:e9:e7:0b:bc:dd:ac:ed:51:
         75:dd:88:e3:1e:01:72:1b:e1:72:32:c8:b0:14:29:13:90:ec:
         73:db:fe:69:25:e0:81:3d:97:c9:a3:7b:83:e5:26:d3:43:dd:
         a3:34:15:ad:c6:59:f6:00:68:ec:bb:24:16:e9:0f:26:d9:2e:
         50:08:71:89:05:26:be:a6:23:37:d5:15:ab:e2:e2:28:13:5b:
         cc:42:2d:c0:d0:af:7f:30:b3:1c:24:f1:f7:d3:4e:b2:d3:b2:
         b8:49:96:47:ee:f0:d1:04:af:b6:ad:5b:61:20:ab:cb:82:63:
         40:5e:60:2c:5b:87:e6:0d:ea:c4:7f:bd:1e:37:0f:87:95:d4:
         60:2d:e8:6c:09:a6:38:33:cb:7a:32:65:19:d8:52:08:ad:ac:
         83:b0:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:08 2026 by rpki-client