Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File:                     HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier:          u/vB5P+y7agDkZHGFl2nzXGS0P3vxkfNNgjQpQEiOWs=
Subject key identifier:   C4:5D:85:60:88:EA:EA:16:14:C3:8E:FA:D9:6A:52:72:FE:92:5C:C1
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer:       /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial:       019FAB6375E43D2738D2B1A090D4B56D93F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number:          19DF
Signing time:             Wed 29 Jul 2026 01:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:49 +0000
Files and hashes:         1: 7LiZcAkw1v9HF3VimUpAtdnu4Xw.roa (hash: 0RSj8hlfzfDA+UBOrNiz+0Nnhh1ogxhr8K0HRO0n7TM=)
                          2: D7ShHAHZU9Q1RPi-PZsNQEvMtsA.roa (hash: yb8JwTCokjpyT12p4uvxEpN6nrRF5qKq5j9OSf7cQ4M=)
                          3: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: YVVRKNDBmMqrlhWdeINOGGJqxDruAaENUah5GJF5D/A=)
                          4: Tx69HmMEl-OD_2fomg4xYESCEDw.roa (hash: e9adL/NCOts/hcwANwzxhinlwjJUFzDD4VQlpoRq8gQ=)
                          5: UPHfwXfR02Th6cbsvtMgrgEJJL8.roa (hash: WMF5bJJEpf/rg7Q3u4NcJ3tDnBoKVVGAVUpTfvsuLBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:75:e4:3d:27:38:d2:b1:a0:90:d4:b5:6d:93:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
        Validity
            Not Before: Jul 29 01:00:49 2026 GMT
            Not After : Jul 30 01:00:49 2026 GMT
        Subject: CN=c45d856088eaea1614c38efad96a5272fe925cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:73:f5:f0:86:af:39:0d:a6:a5:f8:c9:1e:18:
                    23:ca:27:53:0c:24:2c:7c:38:0a:73:9e:e4:64:7e:
                    5e:79:83:11:88:d8:50:19:d2:2f:c5:cf:8d:71:57:
                    60:56:b3:b5:20:d9:0c:3c:bb:50:1e:c7:d1:48:b3:
                    b1:a4:e3:7e:ff:2b:a7:0a:08:62:4c:45:43:b8:af:
                    c2:01:65:53:0a:e1:34:fa:4b:61:fe:1e:75:86:00:
                    38:66:b6:9c:06:69:64:7e:14:39:04:b3:0b:63:e3:
                    3a:8d:88:73:3f:cb:6b:93:ab:b4:52:5d:47:21:82:
                    d2:12:2a:6e:ce:9c:f5:0a:ee:37:de:9c:68:9d:d8:
                    1f:90:ec:12:17:f0:f9:19:0a:62:53:c6:c4:e4:44:
                    68:18:72:e5:d7:2b:8d:69:7d:ba:0b:48:9e:2b:f8:
                    3b:8e:58:ee:0b:bf:95:00:58:42:0b:8d:88:12:bc:
                    3f:1f:1f:d8:d0:36:3b:ff:54:60:f5:aa:c8:0b:fc:
                    78:a9:84:35:42:2c:24:96:59:1a:33:6c:a6:a3:71:
                    df:0e:17:eb:56:b3:03:2a:af:43:94:27:68:99:bb:
                    31:46:af:75:a7:42:f4:ab:80:32:c1:34:36:be:73:
                    a6:bb:bf:5c:55:05:97:99:d9:b3:70:5e:d5:5e:4c:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5D:85:60:88:EA:EA:16:14:C3:8E:FA:D9:6A:52:72:FE:92:5C:C1
            X509v3 Authority Key Identifier:
                keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:71:38:1f:da:75:e5:cd:9b:f2:d9:d0:dd:ed:ea:2e:ae:
         2c:05:09:79:3d:97:06:b7:38:7b:40:6c:f2:ab:78:8e:6b:9f:
         eb:60:4a:de:21:99:d3:48:a6:81:c0:dc:13:39:cd:c5:30:c0:
         9e:e9:17:cb:18:f6:8c:90:34:df:ff:72:aa:37:a1:9e:f2:20:
         00:1c:bc:37:83:14:bb:db:2b:a8:a9:62:8d:24:e8:b8:7b:ce:
         dd:7c:11:44:ba:f7:53:74:07:05:81:6f:8d:70:f7:b8:39:1d:
         51:fb:ad:ee:0d:e7:5e:93:d3:a8:f3:15:cf:a0:cf:ef:68:b4:
         eb:94:3d:40:d7:8a:3d:f2:f0:1b:4d:92:e8:c0:9d:80:fa:f0:
         12:d9:69:13:ed:a9:f1:04:fb:db:e5:25:08:36:5c:64:71:67:
         e7:be:95:27:6a:17:98:43:cc:ae:b1:b9:4c:41:a9:9b:80:d1:
         c1:bb:86:77:6e:4e:dc:42:e7:a3:0a:0d:3f:9f:5e:ea:fd:0e:
         de:c1:8f:c2:86:c0:84:97:a0:ae:4f:7c:40:08:f1:68:07:0d:
         2a:6a:4f:87:aa:c0:0c:58:16:4c:9c:14:ce:4c:3c:4a:f5:5e:
         83:1f:e7:33:53:1c:36:0e:b5:fd:2c:bf:96:25:cb:52:2d:8e:
         b7:4b:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:25 2026 by rpki-client