Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File:                     hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier:          Oc4CiKmClzO8riqtixBCx0fZYrGt5bNb5X/ySkhLlQc=
Subject key identifier:   50:FD:03:04:8D:F6:80:AE:7A:3F:DD:25:B6:9E:7C:93:FE:A9:57:16
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer:       /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial:       019FACACE46E15F016CE443F203DAA542FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 07:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:39 +0000
Files and hashes:         1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
                          2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: B7SL3sa32TuX85LPy5zXLZua8r+VDDoC80WZtNmIDaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:e4:6e:15:f0:16:ce:44:3f:20:3d:aa:54:2f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
        Validity
            Not Before: Jul 29 07:00:39 2026 GMT
            Not After : Jul 30 07:00:39 2026 GMT
        Subject: CN=50fd03048df680ae7a3fdd25b69e7c93fea95716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ed:ed:f1:62:ba:ef:83:e7:1e:8a:e0:bb:f5:
                    ee:38:83:c8:aa:ba:6b:49:f6:9a:89:ee:0c:0d:d9:
                    54:78:bd:50:e4:18:7c:d6:f5:49:f0:2b:42:a7:0a:
                    53:62:38:c4:a7:ec:3e:52:67:d4:bb:e0:be:2f:f4:
                    4a:bd:be:44:70:05:31:8f:a5:8e:97:ee:17:ee:87:
                    c9:ea:29:8e:71:0a:d6:79:70:3a:3d:7c:0c:8a:c7:
                    75:29:bb:7a:da:5a:c9:c8:8f:d2:16:ea:cd:56:23:
                    d8:10:cb:55:0b:15:7a:1e:28:7a:a0:7c:79:fa:1e:
                    bf:fc:98:3d:9d:85:89:be:8a:b5:4b:4f:94:ac:d7:
                    5e:94:15:c6:63:b9:c2:03:87:3f:6b:ce:c8:82:ff:
                    82:be:00:21:f3:4a:d5:1c:07:7d:96:d9:f0:cc:01:
                    db:42:ba:33:23:a5:15:b8:d3:02:8f:ba:d8:40:a8:
                    04:1b:10:93:5f:87:ab:37:3b:88:46:a6:56:e8:01:
                    63:de:85:4d:c2:69:74:1d:13:b6:e2:02:a2:2d:95:
                    92:fa:65:91:34:a1:3c:52:92:04:a0:70:83:db:61:
                    a5:19:f6:88:8c:3e:c2:ef:ae:99:a6:48:2d:fe:22:
                    69:0b:84:3f:ba:66:02:18:e5:97:82:3e:c2:a9:bd:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FD:03:04:8D:F6:80:AE:7A:3F:DD:25:B6:9E:7C:93:FE:A9:57:16
            X509v3 Authority Key Identifier:
                keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:32:4f:ea:6b:4a:11:5a:fd:72:44:ba:0e:b5:1d:e5:d4:c2:
         60:e8:68:fe:46:8c:b9:31:86:a1:79:63:6b:a3:6b:59:2a:ca:
         20:5e:76:86:44:49:90:40:a4:2c:2a:64:0b:2d:bb:ec:51:69:
         14:63:84:db:71:47:75:bd:37:cb:72:ea:75:47:0e:10:0c:75:
         22:8d:33:91:22:54:60:93:80:12:f2:dd:1b:17:b0:31:26:69:
         30:8e:bc:77:0c:66:fb:f6:17:a7:c3:82:43:12:02:be:c1:da:
         98:95:bf:21:54:85:d4:c5:52:ff:0c:44:c9:2e:5b:f2:8b:4d:
         85:35:5b:4d:e8:09:db:44:1b:1e:64:2a:23:78:1c:42:95:9b:
         6e:9d:5a:7d:cf:c8:4a:0e:51:36:d6:bc:b1:1e:58:90:6e:60:
         d5:58:3b:56:56:be:fb:15:9b:a0:2e:01:66:1e:df:d6:1f:28:
         41:5b:a0:f9:0f:57:c0:aa:b5:c4:87:ee:f4:35:16:46:c0:97:
         cb:56:b3:08:60:08:0c:56:01:31:e9:ef:ca:25:aa:46:2e:0d:
         36:4e:44:df:26:f6:2e:ac:6f:85:7b:e6:d2:05:6d:f6:dc:c6:
         0e:c5:ce:10:88:a6:77:4b:90:29:66:95:6b:34:0e:90:92:b4:
         16:92:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:08 2026 by rpki-client