Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File:                     tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier:          nqzn20KaJ2yA9nfbp9NQGTHnqPXMYSK2eba5mzS31G8=
Subject key identifier:   77:A0:24:08:AE:B2:08:16:06:39:B4:44:37:71:D1:A5:71:02:20:6E
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer:       /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial:       01A00394B777962D0C322F5C790C07DE00FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number:          1729
Signing time:             Sat 15 Aug 2026 04:01:12 +0000
Manifest this update:     Sat 15 Aug 2026 04:01:12 +0000
Manifest next update:     Sun 16 Aug 2026 04:01:12 +0000
Files and hashes:         1: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (hash: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA=)
                          2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: aIlmfanN+x8Lsn2Flfs44cABYFRMC+txa2UOjjW28I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:b7:77:96:2d:0c:32:2f:5c:79:0c:07:de:00:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
        Validity
            Not Before: Aug 15 04:01:12 2026 GMT
            Not After : Aug 16 04:01:12 2026 GMT
        Subject: CN=77a02408aeb208160639b4443771d1a57102206e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:3f:db:d2:45:78:8d:72:2d:e8:67:07:22:
                    91:06:c8:1a:dd:c1:e1:fb:f6:83:ff:19:72:fd:9b:
                    1c:ce:8b:ea:79:a0:63:1f:de:57:85:62:53:40:e9:
                    9f:91:e6:8e:38:f1:65:15:9e:2b:4d:21:b0:13:71:
                    ec:71:5b:83:a1:89:0d:d0:af:6f:0c:83:46:7f:9b:
                    36:6a:4d:51:7f:2a:30:b6:04:72:f7:89:e4:b4:79:
                    25:b8:0c:d5:e6:e6:de:f7:3b:c0:af:27:54:00:30:
                    9f:ad:1b:13:d9:80:9e:05:e8:c5:b7:32:64:c5:a0:
                    73:c9:0b:b4:30:ca:03:3f:c1:48:9f:49:d3:94:99:
                    a9:af:f4:94:b1:15:e4:46:9b:06:68:fa:c1:a3:05:
                    f5:26:38:24:f6:81:07:d5:39:00:a5:81:fd:ce:e3:
                    65:6c:7d:63:23:3e:f6:25:26:3b:38:f6:fe:f1:3c:
                    dd:72:c8:5f:c0:52:ca:8c:9d:6a:5b:8c:f0:9d:78:
                    71:78:d5:ac:9d:58:d6:a7:cb:39:37:59:46:dc:ca:
                    42:c3:e1:74:eb:0a:ba:ff:40:c8:11:9f:cb:d6:00:
                    1a:16:80:8e:5f:50:96:87:66:d9:c3:f9:69:e9:73:
                    92:41:93:c5:c5:ef:e1:a1:a1:4f:6e:f0:c4:d8:d6:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A0:24:08:AE:B2:08:16:06:39:B4:44:37:71:D1:A5:71:02:20:6E
            X509v3 Authority Key Identifier:
                keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:d5:13:8a:8f:b8:27:49:4e:57:42:e3:29:a9:a9:42:86:
         5d:e1:ae:65:89:6b:9d:bf:c5:96:b0:2b:d8:ab:ea:fe:3e:cc:
         c2:69:51:95:43:f8:73:44:f3:69:23:84:a2:66:a4:6a:9b:90:
         58:47:93:33:44:22:d8:64:82:07:8d:2f:fc:8d:90:46:df:fc:
         57:4a:05:4c:57:74:e6:75:f4:0f:15:a1:6e:38:b8:e1:1a:28:
         00:aa:83:b4:5b:c3:99:a4:c1:10:eb:00:b9:91:57:9a:b9:72:
         f2:28:ee:a0:2b:5c:4d:0b:a8:0e:66:31:ad:1a:af:32:c3:7c:
         ce:31:36:91:fc:a2:3b:33:4d:67:f7:6d:95:a4:a2:17:2b:42:
         1b:28:ce:71:7a:06:de:59:aa:47:05:a0:72:c2:bf:ee:90:45:
         5b:2e:3d:b5:d4:99:74:69:83:54:0f:83:99:5c:e9:9d:1e:df:
         9e:09:ea:41:70:e1:2d:74:8d:c5:77:a8:e0:b0:49:7d:10:91:
         a0:a6:d6:20:63:1e:f3:05:44:fe:93:34:8e:d0:c1:8f:15:bf:
         83:08:55:4d:04:90:1a:a3:6c:71:61:51:ca:e3:cf:0a:19:3c:
         00:f9:90:18:a7:f2:4d:24:c5:12:be:11:bf:96:e9:b8:8e:61:
         0c:ea:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:08:26 2026 by rpki-client