Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File:                     hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier:          ioXjsVjmCjBJEX8DctwkyhO9D6l2h97ktKiNpPat7VY=
Subject key identifier:   01:17:87:9A:5A:18:2E:E8:8B:86:F7:D4:08:2E:6A:09:51:C3:70:98
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer:       /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial:       019F84C4009186A7E16392BAC9BAA500D079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number:          19C2
Signing time:             Tue 21 Jul 2026 13:01:05 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:05 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:05 +0000
Files and hashes:         1: DB-kubcDSriQvnabeDogJ7LkMfM.roa (hash: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY=)
                          2: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: DgK1euiXpYNBWN5yqlM3Yj28PUil0bscNeXbvmkznAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c4:00:91:86:a7:e1:63:92:ba:c9:ba:a5:00:d0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
        Validity
            Not Before: Jul 21 13:01:05 2026 GMT
            Not After : Jul 22 13:01:05 2026 GMT
        Subject: CN=0117879a5a182ee88b86f7d4082e6a0951c37098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6f:93:87:42:f6:fb:4b:91:17:6c:6a:41:db:
                    9e:f2:8d:d0:19:1b:3d:e9:cc:27:67:94:a0:73:b0:
                    78:95:ea:e9:b0:0f:bf:b7:ab:23:3f:84:e2:78:fb:
                    2e:8f:bb:63:11:69:69:6c:75:66:d5:8e:aa:29:d7:
                    e1:9f:17:de:d3:fa:74:32:f4:1c:08:2e:ac:47:fb:
                    cb:f6:1b:ff:88:23:54:f5:95:2d:61:55:b3:b6:d0:
                    a2:47:8f:1c:74:29:3d:fe:f5:62:77:99:c8:30:44:
                    61:25:77:c2:ed:89:e6:e0:78:d2:12:79:e9:c8:6d:
                    a7:08:f1:e9:5e:02:cb:40:30:b4:2c:a1:8e:1c:dd:
                    70:84:e4:0f:61:0d:24:85:d2:6d:0d:45:eb:ce:16:
                    66:67:f9:8b:5f:a1:ef:1d:f9:1c:d5:51:4c:37:f8:
                    94:c6:c7:9f:14:cf:ae:9e:1c:0c:b0:90:d0:e7:4b:
                    11:f6:8e:6c:fa:c8:49:6a:22:84:9c:6b:1f:c8:48:
                    27:ec:0f:06:94:c9:ef:71:3a:e4:ca:d6:2d:fd:82:
                    9b:72:e4:fb:e7:6f:7c:ff:a5:4d:9b:32:de:8d:26:
                    be:26:c9:2b:27:20:f8:a3:24:d6:e7:24:dd:e1:83:
                    f4:7c:47:64:3b:58:1e:e7:db:ce:2a:36:d1:f4:ee:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:17:87:9A:5A:18:2E:E8:8B:86:F7:D4:08:2E:6A:09:51:C3:70:98
            X509v3 Authority Key Identifier:
                keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d3:c6:61:b3:58:1e:66:fb:30:59:81:3d:0d:90:ab:98:8d:
         d1:8f:6b:1e:98:f5:4a:be:49:12:e6:cb:d6:81:e3:6b:cb:d2:
         4a:0f:a2:bd:aa:a3:d6:aa:01:dc:b5:d0:cb:55:8e:a8:1b:49:
         67:da:f0:97:db:5d:99:3c:77:f7:b8:0a:63:66:f2:e1:43:e1:
         e9:f7:0c:00:8d:db:7c:0b:82:5a:24:b2:8d:96:ba:16:fa:db:
         49:62:bd:c7:0f:d6:62:90:14:a4:a8:2d:b0:f6:bb:9d:52:50:
         a0:56:08:11:ed:4e:7e:02:36:f6:d0:28:fe:7d:4d:da:0f:1e:
         ae:ad:cb:84:b4:b6:14:28:a7:f0:ec:d2:ed:e4:b5:1d:12:f1:
         0a:f9:f9:b1:b4:b5:f6:e6:3b:ca:57:4b:28:6a:98:ad:0c:2c:
         c1:82:4b:34:ec:d2:63:65:c4:de:92:b3:1b:c3:c2:65:40:ad:
         13:c5:c8:85:2b:86:db:18:39:01:bb:39:a7:b6:77:72:a5:43:
         8f:80:c8:1c:0c:b0:16:5c:07:6f:ae:7f:c0:fe:64:b0:0e:a2:
         07:97:cc:a1:a2:1a:74:6e:95:05:d8:56:30:2a:fc:cc:53:68:
         0f:c0:17:a1:bb:31:7c:2e:de:06:ec:fe:72:40:83:a6:ff:72:
         47:0d:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:19 2026 by rpki-client