Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
File:                     hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft (raw, json)
Hash identifier:          Q9orajCfhGFiGxD3iUyfgAyp0x1BhlcD+AcohGkA5Bw=
Subject key identifier:   3A:A4:42:42:2B:B6:05:7E:FF:62:0D:84:77:AB:22:00:D4:F3:85:BD
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Certificate issuer:       /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial:       019F853186AAC464E54DCFFD9E2B67A11893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
Manifest number:          0CDB
Signing time:             Tue 21 Jul 2026 15:00:43 +0000
Manifest this update:     Tue 21 Jul 2026 15:00:43 +0000
Manifest next update:     Wed 22 Jul 2026 15:00:43 +0000
Files and hashes:         1: GPPNPmR8KUY_sEY8Xyw8dhEolxg.roa (hash: JjmXr+ibRaRGfx0pfBbomv1IH9Jgiuy25aSKoWiXJmg=)
                          2: hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl (hash: EeDOnV4+YP9JGSaBzG7dhRTM89yOm9kSI+e+ra+ovWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:31:86:aa:c4:64:e5:4d:cf:fd:9e:2b:67:a1:18:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
        Validity
            Not Before: Jul 21 15:00:43 2026 GMT
            Not After : Jul 22 15:00:43 2026 GMT
        Subject: CN=3aa442422bb6057eff620d8477ab2200d4f385bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e6:ff:03:03:32:1e:6c:5d:fe:58:ef:d4:e3:
                    d0:b9:d2:75:84:6e:58:83:85:2f:93:a7:f1:13:19:
                    c7:1c:53:22:ef:89:ec:8e:58:fe:38:c9:07:4a:c3:
                    8e:12:62:bd:d7:6d:fb:8d:10:f0:12:ca:bd:dc:41:
                    0c:3b:73:00:d3:b2:3a:e5:ca:54:ac:8d:5c:30:be:
                    15:7b:e6:9d:63:0a:7f:59:01:a2:46:e0:30:36:01:
                    d0:66:fe:af:ed:1c:e5:07:e4:5a:56:6e:14:e9:7f:
                    b3:b1:c7:34:4b:d9:72:aa:d5:3d:42:82:32:33:f1:
                    da:62:78:d9:7d:23:62:9f:5b:64:59:27:d6:57:84:
                    a2:c5:f7:6a:17:60:9b:26:ee:64:ea:85:5e:95:97:
                    07:92:5b:d3:36:a6:f1:06:2f:84:22:99:38:e4:09:
                    4c:8a:1c:f0:d6:95:db:21:db:fa:c8:37:b2:d7:a6:
                    0c:a0:17:a1:0a:18:4a:d3:ae:4b:3a:9b:84:d0:c5:
                    24:43:39:28:e3:cb:4a:3e:90:d9:87:92:e4:b6:07:
                    7e:be:c3:48:f0:ba:f2:8b:6f:11:83:2d:5a:cb:1b:
                    64:a7:ac:1e:84:a8:c4:89:d4:ed:81:3a:06:38:55:
                    96:78:05:ea:b5:af:53:25:f1:2d:4d:17:6f:36:94:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A4:42:42:2B:B6:05:7E:FF:62:0D:84:77:AB:22:00:D4:F3:85:BD
            X509v3 Authority Key Identifier:
                keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:03:28:d2:6f:69:07:bc:cb:b6:1c:c9:8a:24:3e:f9:6b:c3:
         26:cd:55:3a:31:47:6d:34:2d:1b:ed:a8:68:32:c4:22:60:73:
         26:fe:32:4e:0f:6d:56:8d:f5:70:b8:2e:5f:85:2a:e9:a6:d0:
         36:fc:f4:5b:5e:f9:42:81:91:2e:e5:a8:16:e6:88:ee:54:f2:
         32:d3:2b:81:57:6f:20:df:70:87:44:65:4c:75:89:c5:89:b6:
         a6:34:e9:ff:ec:8f:23:91:46:0a:77:29:5f:d6:8a:a7:2b:83:
         b3:db:0e:45:7b:31:05:c7:e4:38:20:0a:76:dd:0a:71:21:a9:
         a7:97:5b:45:2d:a1:6e:db:4e:14:78:4d:84:21:b5:1e:e8:28:
         cc:dc:0e:b7:5c:36:62:55:01:8d:2a:f5:bb:c4:a7:4a:53:69:
         ac:37:25:21:59:02:d7:31:bf:d5:e6:62:fc:8b:2b:bc:b6:d1:
         a9:bd:7c:2b:b0:6d:61:70:0f:78:2e:81:09:5a:6e:66:30:62:
         af:16:de:97:9d:4b:af:52:68:6c:1f:ec:05:ac:e6:37:c2:5b:
         e2:1a:6a:36:26:d9:e3:18:ed:32:c9:9f:24:97:61:e1:d1:ae:
         46:60:c8:db:67:98:6b:87:aa:dc:54:c6:33:ed:d3:95:dd:9e:
         0f:a8:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:57 2026 by rpki-client