Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File:                     HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier:          XwDkejlovaV2pV+eLPnOmr1X4VqRbn4BKRcUotsBmKM=
Subject key identifier:   6D:1B:D4:C8:93:F8:00:75:5F:F6:71:7E:28:3A:D5:2B:07:A5:B6:5B
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer:       /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial:       01A003945A76BAD9B41901F2FB1B9B7AB69F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number:          1775
Signing time:             Sat 15 Aug 2026 04:00:49 +0000
Manifest this update:     Sat 15 Aug 2026 04:00:49 +0000
Manifest next update:     Sun 16 Aug 2026 04:00:49 +0000
Files and hashes:         1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: jRpiW6I0UJhJG3jnvElAZ60D+ZmSNxkd2vEB9If6QSA=)
                          2: IMhrDeS7pt6POgdqkwhQn8NXjdQ.roa (hash: 8Co4GdnGTbaplfNAIs0VU0evrLpH3iNJkhwVpK6YVsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:5a:76:ba:d9:b4:19:01:f2:fb:1b:9b:7a:b6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
        Validity
            Not Before: Aug 15 04:00:49 2026 GMT
            Not After : Aug 16 04:00:49 2026 GMT
        Subject: CN=6d1bd4c893f800755ff6717e283ad52b07a5b65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:e7:b7:8c:91:4f:00:68:b5:2f:73:df:d3:
                    8a:e9:29:1f:42:84:d2:45:79:d4:19:19:af:6e:dc:
                    16:b1:86:47:6a:8b:50:91:c2:a4:00:37:ce:72:56:
                    64:44:44:27:cf:62:92:aa:70:60:10:ee:61:1b:a5:
                    35:eb:5e:1f:87:13:95:df:d3:df:7c:bc:b1:d6:c4:
                    c0:dc:3f:5e:15:de:04:29:e9:ff:8c:fc:21:ef:d3:
                    6d:19:e4:96:40:3c:a0:a8:91:6b:e7:48:5f:81:ba:
                    74:1a:17:fd:ea:5e:c7:69:37:8b:61:d3:3c:32:29:
                    bb:59:26:dd:fc:d3:80:16:41:6d:73:b2:2a:b3:74:
                    38:0e:4e:d3:24:cd:00:b9:fa:c1:e3:43:9c:ee:cf:
                    e9:92:0c:d1:3c:5a:0c:9c:db:3b:75:24:9f:d5:11:
                    ed:f5:ec:57:29:2a:3b:7e:b0:d1:91:b2:32:28:33:
                    7c:2c:fb:69:ff:a5:6b:ee:5b:ae:98:23:5b:bd:6a:
                    eb:22:8c:56:c7:fe:88:66:14:33:93:5c:93:4d:55:
                    93:9c:29:1d:ed:9d:99:5f:1f:fc:f9:e0:09:11:04:
                    7c:be:1d:f6:22:ca:db:9e:1b:4f:9c:11:bc:8a:be:
                    f7:8e:84:51:6f:d2:94:72:12:76:34:26:22:3f:39:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1B:D4:C8:93:F8:00:75:5F:F6:71:7E:28:3A:D5:2B:07:A5:B6:5B
            X509v3 Authority Key Identifier:
                keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e2:7a:56:38:26:36:b3:c0:4e:ac:57:b5:d3:30:99:58:a9:
         9a:f8:e4:65:77:91:21:27:55:11:21:37:54:26:be:d3:5b:8e:
         e1:66:39:ad:5c:49:f1:9b:e0:70:a7:e0:e5:d2:f3:21:c1:d6:
         67:c9:3a:7a:4a:cd:83:43:35:19:6e:a1:2c:04:69:f1:ff:18:
         b7:f1:4b:ba:e2:2c:4d:bb:3f:da:66:70:31:54:ea:52:f8:08:
         45:29:77:f5:11:7f:61:4f:73:3b:cc:c3:56:aa:55:f2:39:ae:
         30:46:71:6c:f6:66:0f:dd:19:b2:9b:cb:86:ac:4b:03:e4:0a:
         04:63:f9:81:63:79:dc:40:36:6e:18:52:cd:2a:0a:8c:92:7a:
         c8:ad:39:cb:39:71:0e:8c:19:ce:1f:2a:1c:2e:82:0e:0a:25:
         b4:a6:50:af:83:dc:63:6c:96:f7:03:83:a3:60:02:b1:94:5a:
         f2:bd:15:1d:94:94:62:8d:d5:d4:21:a3:5b:25:07:72:41:3f:
         09:af:c4:31:ca:5d:20:ae:0a:ec:04:b7:21:38:5f:f6:be:8b:
         3e:f3:04:6c:cd:e5:29:5c:93:ba:ce:b0:ee:ad:38:a3:e4:ed:
         8a:1c:26:57:1e:73:b6:54:6a:f0:54:7f:79:c2:2d:56:ee:07:
         49:08:19:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADlFp2utm0GQHy+xuberafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2RkM2M4MTZkODU5NjA4MDQ3MjA1NDM0ODA5NWVkMmI4
NTUxZTUwHhcNMjYwODE1MDQwMDQ5WhcNMjYwODE2MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg2ZDFiZDRjODkzZjgwMDc1NWZmNjcxN2UyODNhZDUyYjA3YTViNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7bnt4yRTwBotS9z39OK6SkfQoTS
RXnUGRmvbtwWsYZHaotQkcKkADfOclZkREQnz2KSqnBgEO5hG6U1614fhxOV39Pf
fLyx1sTA3D9eFd4EKen/jPwh79NtGeSWQDygqJFr50hfgbp0Ghf96l7HaTeLYdM8
Mim7WSbd/NOAFkFtc7Iqs3Q4Dk7TJM0AufrB40Oc7s/pkgzRPFoMnNs7dSSf1RHt
9exXKSo7frDRkbIyKDN8LPtp/6Vr7luumCNbvWrrIoxWx/6IZhQzk1yTTVWTnCkd
7Z2ZXx/8+eAJEQR8vh32IsrbnhtPnBG8ir73joRRb9KUchJ2NCYiPznGAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0b1MiT+AB1X/Zxfig61SsHpbZbMB8GA1UdIwQY
MBaAFBx908gW2FlggEcgVDSAle0rhVHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzkt
Y2MyY2Q3ZDMxYTI2LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzktY2MyY2Q3ZDMxYTI2
LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+J6Vjgm
NrPATqxXtdMwmVipmvjkZXeRISdVESE3VCa+01uO4WY5rVxJ8ZvgcKfg5dLzIcHW
Z8k6ekrNg0M1GW6hLARp8f8Yt/FLuuIsTbs/2mZwMVTqUvgIRSl39RF/YU9zO8zD
VqpV8jmuMEZxbPZmD90ZspvLhqxLA+QKBGP5gWN53EA2bhhSzSoKjJJ6yK05yzlx
DowZzh8qHC6CDgoltKZQr4PcY2yW9wODo2ACsZRa8r0VHZSUYo3V1CGjWyUHckE/
Ca/EMcpdIK4K7AS3IThf9r6LPvMEbM3lKVyTus6w7q04o+TtihwmVx5ztlRq8FR/
ecItVu4HSQgZ6g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:31 2026 by rpki-client