Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
File:                     HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json)
Hash identifier:          TZnCazLmy7nd1+JcxvE2gFqoAVjk/RFNj+bW7Js9HJ8=
Subject key identifier:   80:71:B7:58:64:83:F2:B4:4F:F6:6A:71:23:CE:16:04:BE:1E:92:F7
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Certificate issuer:       /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial:       019FA1BBB15AD98AE8EE58DBF049620C6E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
Manifest number:          0551
Signing time:             Mon 27 Jul 2026 04:01:00 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:00 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:00 +0000
Files and hashes:         1: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: GXvOlmSWdS/mH/a/6gGByc8AclJ3S6DSAD/0w+pjATI=)
                          2: emamOYQH7VSgnUMUP8mvfhqm5dQ.roa (hash: MSxhtnoAd2af3qlANifc6U+2SnTTVeaXrUw3+bcJ3Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:b1:5a:d9:8a:e8:ee:58:db:f0:49:62:0c:6e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
        Validity
            Not Before: Jul 27 04:01:00 2026 GMT
            Not After : Jul 28 04:01:00 2026 GMT
        Subject: CN=8071b7586483f2b44ff66a7123ce1604be1e92f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ec:da:26:c3:b5:76:b2:33:7a:ad:be:5c:03:
                    be:37:d5:97:38:20:ec:14:87:95:49:de:e7:32:73:
                    fc:5d:3d:ae:d1:f0:04:77:97:cf:1c:d3:fb:9e:83:
                    6d:f8:1b:42:0f:74:ad:62:68:63:ff:7f:f4:1a:fb:
                    ee:65:22:04:4a:5f:fb:77:4e:8a:bc:c8:97:d4:d1:
                    90:4b:32:5a:11:c0:b8:14:1e:d0:f6:e6:a4:3a:73:
                    8f:33:00:7a:67:10:b2:4f:64:d0:34:d6:96:da:09:
                    b1:e9:bf:59:2b:35:3b:ec:39:f1:88:46:82:8f:fa:
                    1b:d8:a3:c4:c7:49:a0:e7:f0:0f:12:81:1b:37:ab:
                    3e:e8:48:fb:4f:1b:4c:c0:db:72:8c:08:e5:0e:01:
                    cc:03:ca:9e:04:a6:a8:72:e0:73:93:75:c1:02:66:
                    5c:3a:6c:93:19:b4:19:47:99:ef:d4:94:57:14:7e:
                    a0:1a:f4:30:08:71:b8:ba:d5:d2:6b:71:6e:f4:90:
                    f7:5d:e2:61:0e:97:c6:f5:b3:f7:29:f0:4f:64:23:
                    6d:95:26:fe:27:d9:2f:01:f1:82:91:f5:13:e5:56:
                    b9:7b:a4:01:d5:3f:6b:1c:e7:bc:3d:e9:f5:93:c5:
                    fd:5a:17:69:16:8e:ff:79:48:ed:19:2e:6e:ce:62:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:71:B7:58:64:83:F2:B4:4F:F6:6A:71:23:CE:16:04:BE:1E:92:F7
            X509v3 Authority Key Identifier:
                keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:61:ad:bd:50:31:06:f5:4f:75:49:f5:69:de:28:94:56:71:
         f7:dd:08:0f:4c:13:80:1b:38:15:71:ec:d3:8b:eb:ae:39:e7:
         81:a4:9c:f3:62:31:92:ce:c2:4c:f9:ae:05:85:18:3a:0a:4a:
         55:b7:ae:96:e7:95:70:38:c7:91:8c:11:01:f0:65:e4:93:35:
         d0:a9:dd:9e:b0:6f:b6:d9:59:0b:6a:14:46:5b:b8:02:ec:71:
         c8:34:b9:d1:80:46:8c:b4:18:e5:81:65:1c:89:df:4f:e6:42:
         47:90:a0:ba:f5:7e:ba:84:1c:96:3c:87:70:dd:0c:76:1a:3f:
         1a:51:7e:de:3d:aa:bc:5a:62:05:9e:ff:0d:5e:78:63:3d:e0:
         59:69:ac:68:1b:16:18:24:81:b7:dd:9f:38:c4:71:8c:ac:a8:
         23:9b:95:12:0b:34:5f:8f:88:e2:f4:ca:4c:a1:82:d7:a7:78:
         19:d6:a0:6b:81:d8:d3:e1:35:17:a7:40:7a:e9:1b:68:8d:cd:
         6e:3f:cc:d2:a7:6e:05:75:a0:49:57:20:f8:3b:51:e3:cb:20:
         da:4b:e1:f0:37:24:50:87:00:d4:6e:37:33:6d:73:2e:45:c5:
         d3:ea:39:fa:18:a3:ca:42:76:02:ea:ae:c2:1f:ef:1e:35:5e:
         f0:46:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:06 2026 by rpki-client