Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File:                     Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier:          LqHIBDb/mTbG5UdkOBtViXMG3PRJUA1Wvv+LGzdt+4I=
Subject key identifier:   74:B6:75:DF:D8:4C:65:4D:6A:1C:3E:0A:79:8C:D8:E7:DD:79:E2:A6
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer:       /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial:       019EB733389ABAEDE233F0279D023FC1A81F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number:          195C
Signing time:             Thu 11 Jun 2026 15:00:47 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:47 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:47 +0000
Files and hashes:         1: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: 6Qy0Mft2tqJIOs/EtQP3VZ4X9+xnCeGsIZknFlKsDPU=)
                          2: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
                          3: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
                          4: qEPeih-d-b5ejLQMGiGo36Qnv5w.roa (hash: 29cMx+RjFTGtIezVTC2prGXPBgmOX8SjbmN1gmtAbFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:38:9a:ba:ed:e2:33:f0:27:9d:02:3f:c1:a8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
        Validity
            Not Before: Jun 11 15:00:47 2026 GMT
            Not After : Jun 12 15:00:47 2026 GMT
        Subject: CN=74b675dfd84c654d6a1c3e0a798cd8e7dd79e2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:6e:59:6d:6f:03:05:be:58:42:73:f0:5b:
                    3b:0a:3b:cc:e5:05:3c:7a:c5:26:21:0a:d5:52:84:
                    ec:8a:c9:dc:b9:1d:9e:63:1e:e0:5c:bd:67:c5:17:
                    6f:79:fc:f4:fb:fe:62:2e:20:03:79:08:87:2d:0a:
                    2e:fc:e5:cb:3f:ae:74:cd:32:9a:65:9e:e6:44:93:
                    88:dd:9d:79:f3:e8:58:72:4b:33:93:0d:f8:68:12:
                    6c:c8:f0:df:49:d7:7c:e2:34:d2:a9:92:2e:01:90:
                    50:9e:9e:86:86:5d:3a:2c:6a:3d:97:1b:50:0a:60:
                    f6:72:6b:c1:97:94:ad:98:96:74:47:7c:13:82:99:
                    80:07:81:8f:08:d7:c5:d1:86:b3:4f:69:f6:1a:38:
                    10:03:99:28:d6:1f:1f:78:3b:38:65:f2:ab:66:8f:
                    16:19:79:f8:65:2b:38:ad:68:fa:2b:f1:9e:6c:de:
                    41:4b:c6:32:05:93:18:5d:0d:cc:c6:1f:ab:8b:dd:
                    be:46:cf:12:6c:bb:9d:2f:46:f5:49:d4:fa:67:9a:
                    1f:0b:f5:8d:d7:74:87:aa:d8:2b:99:2b:e6:dc:ad:
                    ff:ed:ce:9d:1a:0c:2f:3d:74:89:3d:08:47:91:8b:
                    a1:63:a1:7a:f4:18:2c:24:96:a7:07:66:9d:df:09:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:75:DF:D8:4C:65:4D:6A:1C:3E:0A:79:8C:D8:E7:DD:79:E2:A6
            X509v3 Authority Key Identifier:
                keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f1:c8:f8:0c:3d:b6:b2:ac:64:37:8b:e1:72:d6:d1:ed:c9:
         1e:39:e5:1a:97:4b:ab:7c:32:ea:2e:7b:d2:cd:f3:a6:31:01:
         69:9a:b0:a3:fe:4c:94:65:df:2a:56:f4:7c:17:33:76:c0:0c:
         21:77:b4:ca:08:91:9a:ad:98:36:d5:a4:aa:f7:f5:da:3f:80:
         45:3d:55:29:b3:31:ff:ce:69:9f:7d:61:c6:38:30:8b:c2:3d:
         2d:48:59:c3:9f:ba:d1:c8:3a:f4:f3:2f:bb:d0:dd:a7:b7:77:
         fa:4e:9a:30:73:32:f3:83:db:37:68:82:86:44:2d:f9:6f:04:
         84:73:c6:70:ea:13:0a:d9:b4:95:40:51:ec:9e:ef:d0:09:39:
         d6:28:56:a6:e4:2c:f1:2c:e7:98:02:3a:d1:6c:59:35:0b:25:
         8f:40:c3:24:eb:be:39:82:16:d3:d6:af:e6:9d:6a:36:bd:5d:
         1f:b1:86:5f:d5:2c:04:8a:28:41:f2:47:8b:04:6d:07:ee:13:
         91:c9:b5:ee:70:88:1b:a8:be:51:26:2c:89:4f:d8:ad:70:0f:
         16:d1:64:6f:82:1b:3e:f2:94:99:4a:49:4d:10:c0:9c:2d:53:
         7e:35:7f:31:1c:fe:df:4d:18:7f:4b:18:aa:65:65:0e:c4:11:
         73:ab:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:45 2026 by rpki-client