Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File:                     Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier:          AHW2J2gxwMVr/0NDJbXvLY63v2AT2T4gb1JJZ0nbKKg=
Subject key identifier:   9D:D0:BE:F3:E8:0D:77:28:B1:07:E1:4B:7F:E4:B8:37:75:31:82:2A
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer:       /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial:       019F9EF22787AB606E97C3446E1FE216C302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number:          19D4
Signing time:             Sun 26 Jul 2026 15:01:37 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:37 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:37 +0000
Files and hashes:         1: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: AtwK3Ajoq63RHfR+17R8/gWLsmBluJEty8Jo2b2akLQ=)
                          2: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
                          3: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
                          4: qEPeih-d-b5ejLQMGiGo36Qnv5w.roa (hash: 29cMx+RjFTGtIezVTC2prGXPBgmOX8SjbmN1gmtAbFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f2:27:87:ab:60:6e:97:c3:44:6e:1f:e2:16:c3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
        Validity
            Not Before: Jul 26 15:01:37 2026 GMT
            Not After : Jul 27 15:01:37 2026 GMT
        Subject: CN=9dd0bef3e80d7728b107e14b7fe4b8377531822a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:66:96:72:4c:c7:9c:df:1b:2a:2a:0e:ab:
                    60:78:e5:e1:3e:7b:8c:70:27:3e:40:c1:2f:4b:2f:
                    09:77:58:57:b1:76:be:fd:08:6b:09:df:4d:21:eb:
                    38:76:8a:b0:6f:56:81:c8:2a:0d:45:fb:90:d9:c1:
                    65:7f:2b:99:06:ad:c4:ae:d6:41:85:bb:28:7d:30:
                    36:6e:a2:dc:cc:05:e3:9d:00:a5:fc:0c:bd:2e:82:
                    a6:68:f0:1e:1b:88:16:b9:da:c3:f1:fa:91:69:93:
                    64:01:ab:b4:9a:f1:d0:81:e4:c2:08:eb:b9:64:c8:
                    a8:ab:42:10:0c:d8:aa:f5:31:5d:dc:06:df:fd:b4:
                    13:28:7b:ec:15:41:72:cc:05:de:3d:ec:65:d1:b0:
                    28:b1:39:e0:16:49:f2:09:00:a6:1a:d9:ce:dc:f5:
                    37:26:17:c0:f3:40:17:0d:b2:60:a9:98:0e:09:4e:
                    e6:d0:53:5d:50:86:52:0e:b1:ce:3d:bf:f0:20:36:
                    ee:59:eb:be:e7:94:4d:82:11:80:86:7b:74:a9:6e:
                    f8:83:47:f9:24:f9:0b:78:e4:f7:ab:53:06:c3:bf:
                    71:2c:11:83:84:04:ed:1c:3e:1c:c2:68:d8:cb:3b:
                    30:a7:e0:6f:51:b1:c3:31:79:94:1c:c8:46:f6:e5:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D0:BE:F3:E8:0D:77:28:B1:07:E1:4B:7F:E4:B8:37:75:31:82:2A
            X509v3 Authority Key Identifier:
                keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:7f:cb:8e:b8:b8:e6:34:e2:cd:6e:15:05:a1:f3:10:44:
         5c:5e:b6:e7:67:62:ee:77:72:17:47:46:9e:de:56:90:23:a4:
         c4:e3:79:c2:59:b2:2e:7c:c8:60:b3:e9:b1:ac:ca:fb:58:61:
         b4:4d:43:d5:7d:56:3d:ef:20:e6:d3:95:45:e7:ab:49:21:2e:
         bd:a4:e2:d2:7b:e0:d6:13:d0:ff:14:c7:3a:3b:9e:44:bd:91:
         17:ab:23:51:b2:4f:5b:36:28:e9:75:36:4d:7c:e9:1e:7b:8b:
         79:a5:82:c0:8e:77:fe:86:55:b5:fb:03:c4:e5:6e:d3:da:fa:
         3c:20:f3:77:85:e6:6e:86:d9:d8:d0:7d:27:ca:d0:06:5c:58:
         cc:5b:a3:58:1c:4b:6f:01:c5:b4:6b:c4:db:85:8f:b6:f1:91:
         28:3b:24:c8:da:d8:ca:59:fb:00:12:5a:f6:80:7a:c9:72:7f:
         7d:6b:5c:fb:22:cd:ea:a2:8c:52:72:95:d3:4c:54:aa:81:2a:
         0f:cc:07:76:06:9d:78:d5:61:96:58:19:34:d4:f3:4a:eb:e6:
         e1:67:d4:1c:b8:a2:2d:bb:e4:24:71:2a:a3:f7:34:ad:03:05:
         d9:43:12:b2:27:20:6c:dd:21:d9:72:67:12:42:20:70:e6:fc:
         f9:41:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:07:20 2026 by rpki-client