Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File:                     Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier:          TjHbIaeOhHAW/mVTwIrTSH0beIoGlNe9Ta1LNa17OFs=
Subject key identifier:   84:A7:4B:CC:58:A2:75:78:61:CA:B7:D0:38:62:B7:E9:DC:B3:B6:21
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer:       /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial:       019FAA50EAD11E4A70B2266CBDD959F41242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number:          05D6
Signing time:             Tue 28 Jul 2026 20:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:57 +0000
Files and hashes:         1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: +qn0lB4I76u4i1NXlKSzg5/+1yn9460QT4XwsUtVkhk=)
                          2: XVXBPxWBJpET7dFUiAt-fsYTkVU.roa (hash: cEb9p0FvftbrOHlUvrF0VkI0dQA9GPRciRNVlBGtobU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:ea:d1:1e:4a:70:b2:26:6c:bd:d9:59:f4:12:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
        Validity
            Not Before: Jul 28 20:00:57 2026 GMT
            Not After : Jul 29 20:00:57 2026 GMT
        Subject: CN=84a74bcc58a2757861cab7d03862b7e9dcb3b621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ba:9f:de:01:f8:1c:c5:85:9f:f8:0a:a3:c3:
                    f9:5f:c7:ec:a5:cb:a9:22:85:28:58:51:e9:9f:c7:
                    d6:9c:af:1f:66:21:fb:35:62:6c:fd:90:1e:6f:e3:
                    ce:4e:56:0f:89:90:c3:5e:36:0e:4d:e0:18:d3:f9:
                    2e:49:08:1d:d0:21:cc:2d:60:85:a0:79:79:37:e2:
                    48:db:de:b3:17:89:8f:2e:71:31:b3:a6:7a:d6:46:
                    af:9f:db:72:1e:c6:e6:b5:4e:8b:e4:ac:67:3d:e8:
                    de:dd:c4:fa:7b:e0:a7:90:48:ff:07:fd:69:02:a7:
                    84:cf:4f:ca:1e:e1:1e:08:cc:ae:ca:c7:f5:ef:e4:
                    64:ba:c1:97:3d:fa:7a:98:79:a1:9e:47:18:c8:0e:
                    2e:27:16:44:f0:8c:6c:59:48:6f:7d:ff:5c:5b:86:
                    44:20:60:ef:7f:b8:dd:28:fc:54:19:4b:c1:fe:bd:
                    6d:63:1d:a7:59:04:b5:de:c8:f0:8a:62:90:70:0c:
                    96:56:8b:51:e0:f7:9b:0f:c2:9b:8c:b1:e2:d1:09:
                    21:ea:ca:35:71:33:32:bd:b3:12:1b:2a:23:3d:a1:
                    4e:26:1c:4b:5d:aa:6c:60:08:e4:d6:69:d6:1c:9f:
                    1e:d1:9f:fd:37:d4:12:fb:6e:41:af:f2:e7:e8:96:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A7:4B:CC:58:A2:75:78:61:CA:B7:D0:38:62:B7:E9:DC:B3:B6:21
            X509v3 Authority Key Identifier:
                keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b0:b5:ef:55:99:ff:53:b9:42:0a:72:63:1b:dc:80:37:aa:
         86:2e:4f:1d:e4:89:cb:8e:d4:fa:aa:60:1d:a1:a8:15:f4:f1:
         ab:29:07:80:fe:81:19:9b:98:d7:ac:67:3b:b1:22:40:9a:c1:
         60:5c:7c:62:82:ae:e5:f4:ba:c3:12:11:52:8f:40:38:4c:d9:
         a1:81:40:db:c2:0f:10:3f:ab:b5:03:00:72:10:66:73:75:db:
         b8:a5:df:f9:6f:54:81:ae:b0:29:06:eb:2b:c4:2c:78:af:bf:
         e8:4c:96:4b:3c:3f:0d:66:06:c1:f8:7d:c5:1f:e2:c6:72:ab:
         a2:f7:40:fa:b6:ce:0a:22:e3:17:08:b9:c4:4b:30:37:e9:72:
         f0:c1:f6:39:f3:e4:80:2f:1c:16:53:41:b1:7c:ec:ee:d0:34:
         6d:e4:fd:51:24:21:f5:d8:b7:34:92:33:ac:1b:8d:64:94:bd:
         45:05:67:58:06:c2:a7:a7:7e:07:08:09:37:1b:98:c4:7b:1d:
         23:24:75:f7:f1:ce:96:eb:f8:d5:34:0b:76:a2:85:a3:d6:fd:
         c2:90:da:2a:8c:06:1d:1c:dc:a6:67:db:2d:02:b5:04:ba:ae:
         66:91:2b:d7:9f:21:47:2c:20:ca:d9:98:09:61:aa:2a:3c:6d:
         c4:6f:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:40:46 2026 by rpki-client