Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File:                     HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier:          GGcLvJNkse9D8d/vjqT755T5hTzWlIc70cLuuHwioVE=
Subject key identifier:   11:3C:2C:BB:F4:FF:58:35:E1:9E:2E:69:B2:DB:0F:94:82:8C:7E:5A
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer:       /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial:       019FAB63AEAB42BF4E9A67C0F8BDC06A067C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number:          1966
Signing time:             Wed 29 Jul 2026 01:01:04 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:04 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:04 +0000
Files and hashes:         1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: FaDYNXHPyXFNGFJNpaH6FNBRsnFGb1cBOv3/BC6r/cQ=)
                          2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
                          3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:ae:ab:42:bf:4e:9a:67:c0:f8:bd:c0:6a:06:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
        Validity
            Not Before: Jul 29 01:01:04 2026 GMT
            Not After : Jul 30 01:01:04 2026 GMT
        Subject: CN=113c2cbbf4ff5835e19e2e69b2db0f94828c7e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:bc:8b:ea:6a:44:5e:be:9b:32:8b:70:b1:
                    3a:9d:24:a6:1e:8e:ac:50:00:2b:23:63:e0:13:47:
                    64:a2:77:4e:db:57:c1:10:bd:72:33:83:6c:55:69:
                    5a:6e:67:58:59:ab:6e:70:2a:74:e3:59:a9:00:e0:
                    33:54:b3:10:eb:42:cf:a7:be:cf:43:60:47:7c:dc:
                    24:5d:6e:cc:3b:df:96:73:3d:49:47:92:70:41:69:
                    0e:b2:c6:e8:1c:93:b8:ac:7b:37:cb:74:a0:29:f3:
                    e1:5a:37:b7:3a:2c:30:e6:50:82:d1:bd:29:88:cf:
                    50:62:f0:5f:2b:de:a3:b7:55:38:39:e4:de:ee:18:
                    85:0d:fb:82:3d:63:f4:94:fe:9f:e2:6a:fd:a1:cc:
                    0f:af:fb:cd:2a:ef:6e:5e:e2:72:b5:55:34:d3:88:
                    d6:1a:bc:c9:58:1e:fb:51:77:c5:0a:35:62:c2:94:
                    75:26:ed:fc:10:4b:62:c8:16:11:96:29:94:d0:94:
                    fd:51:38:e8:f6:c1:3c:4e:9e:e3:bc:3a:e3:39:23:
                    2b:57:84:94:3d:23:5e:64:64:9e:67:24:a4:d7:58:
                    92:37:d3:78:37:75:e0:de:c6:aa:f6:21:5a:a2:60:
                    4f:b6:7b:11:b6:62:97:d6:05:92:29:d0:f8:f1:88:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3C:2C:BB:F4:FF:58:35:E1:9E:2E:69:B2:DB:0F:94:82:8C:7E:5A
            X509v3 Authority Key Identifier:
                keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:36:39:a6:b4:cb:94:4f:64:01:f8:19:2b:b8:c1:de:7b:fb:
         fe:6f:b3:d5:53:08:6e:13:5e:42:3d:47:27:d7:34:94:65:e3:
         85:16:d5:3f:54:b7:29:85:ed:20:f0:8d:47:da:99:15:73:01:
         a8:7e:8f:e7:21:01:ae:23:84:fb:54:78:c9:b3:a8:c0:1b:df:
         30:d2:5b:81:12:52:a3:04:ef:54:52:4a:32:70:1b:21:9f:f4:
         f0:0a:71:3d:e1:99:c7:53:7f:9b:ae:30:08:6d:b1:08:c0:e1:
         e9:d0:18:ea:96:d8:0e:f4:ee:33:3b:58:47:a7:c0:f2:d7:01:
         62:af:b2:6e:3f:0e:75:a9:e6:24:6c:e6:33:9a:62:03:23:ae:
         fb:9d:05:b8:ba:b4:3c:56:1d:7f:49:bd:00:6a:ec:4a:8f:2b:
         e7:ac:3f:66:85:f9:5e:ee:22:dd:3d:2e:77:46:7b:a8:79:13:
         6a:21:59:e6:fb:ed:e7:05:a4:b9:bf:46:ed:2e:23:74:54:76:
         4b:dc:9e:5a:fb:62:f9:1d:e8:53:8b:c9:7a:57:64:04:61:2f:
         42:56:32:0a:ef:f5:88:e9:d0:61:b4:e7:2d:42:d9:32:59:d0:
         c3:90:36:bd:c3:4e:c8:5f:dd:d2:fe:c0:98:33:e9:db:7f:b9:
         07:27:c0:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY66rQr9OmmfA+L3AagZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky
OWY0OWEwHhcNMjYwNzI5MDEwMTA0WhcNMjYwNzMwMDEwMTA0WjAzMTEwLwYDVQQD
EygxMTNjMmNiYmY0ZmY1ODM1ZTE5ZTJlNjliMmRiMGY5NDgyOGM3ZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudu8i+pqRF6+mzKLcLE6nSSmHo6s
UAArI2PgE0dkondO21fBEL1yM4NsVWlabmdYWatucCp041mpAOAzVLMQ60LPp77P
Q2BHfNwkXW7MO9+Wcz1JR5JwQWkOssboHJO4rHs3y3SgKfPhWje3Oiww5lCC0b0p
iM9QYvBfK96jt1U4OeTe7hiFDfuCPWP0lP6f4mr9ocwPr/vNKu9uXuJytVU004jW
GrzJWB77UXfFCjViwpR1Ju38EEtiyBYRlimU0JT9UTjo9sE8Tp7jvDrjOSMrV4SU
PSNeZGSeZySk11iSN9N4N3Xg3saq9iFaomBPtnsRtmKX1gWSKdD48YjfZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE8LLv0/1g14Z4uabLbD5SCjH5aMB8GA1UdIwQY
MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt
NDZiZjc2MjYxOGU3LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3
LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjY5prTL
lE9kAfgZK7jB3nv7/m+z1VMIbhNeQj1HJ9c0lGXjhRbVP1S3KYXtIPCNR9qZFXMB
qH6P5yEBriOE+1R4ybOowBvfMNJbgRJSowTvVFJKMnAbIZ/08ApxPeGZx1N/m64w
CG2xCMDh6dAY6pbYDvTuMztYR6fA8tcBYq+ybj8OdanmJGzmM5piAyOu+50FuLq0
PFYdf0m9AGrsSo8r56w/ZoX5Xu4i3T0ud0Z7qHkTaiFZ5vvt5wWkub9G7S4jdFR2
S9yeWvti+R3oU4vJeldkBGEvQlYyCu/1iOnQYbTnLULZMlnQw5A2vcNOyF/d0v7A
mDPp23+5ByfA5g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:54 2026 by rpki-client