Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
File:                     HSXQyIRbeYhsGZNFuJD16KzVFtg.mft (raw, json)
Hash identifier:          0/pcp/xg3sAmJmnTNKSWxDWXF67DdF//oifwkOj+1Xs=
Subject key identifier:   5C:0A:CD:B8:B5:39:6A:65:18:CD:51:4F:FA:FC:76:08:84:5C:E7:6F
Authority key identifier: 1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
Certificate issuer:       /CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Certificate serial:       01A0046FEDA96ECB9871C17A056A00863C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
Manifest number:          19FF
Signing time:             Sat 15 Aug 2026 08:00:39 +0000
Manifest this update:     Sat 15 Aug 2026 08:00:39 +0000
Manifest next update:     Sun 16 Aug 2026 08:00:39 +0000
Files and hashes:         1: ACAlli7g0O4SaAuBMEG33oqVDNg.roa (hash: LR3cThLmPZU74WiY2Hs/Bqsbtxc4sKTKodU0FrsSnhI=)
                          2: HSXQyIRbeYhsGZNFuJD16KzVFtg.crl (hash: BUyZqvCyo2wPGfcwOCgAySypRAf0ZZj6bnQDAK1Jx08=)
                          3: fn4zzf2P7WlF_T3nuMRC7T2bgIM.roa (hash: 7qSjgY4PIPvMkUzYF/SCHnCfOJSbqzIxeuFxHsWJbOo=)
                          4: rGcSVw4JD2TsggxvzCf49t06ktI.roa (hash: N2TX307/s4VGRh8knONcDQ4y4hYb3c4Kd8kYYSngeNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:6f:ed:a9:6e:cb:98:71:c1:7a:05:6a:00:86:3c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d25d0c8845b79886c199345b890f5e8acd516d8
        Validity
            Not Before: Aug 15 08:00:39 2026 GMT
            Not After : Aug 16 08:00:39 2026 GMT
        Subject: CN=5c0acdb8b5396a6518cd514ffafc7608845ce76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7e:0a:d3:94:6d:d3:e2:e3:d9:82:22:97:92:
                    86:f1:d7:dd:20:91:61:b4:7d:f6:18:7c:f4:b1:75:
                    95:5e:7e:83:29:97:53:cc:0c:04:ab:02:e4:0b:08:
                    26:3b:ba:c1:a3:e6:35:04:71:75:2c:4c:9d:43:56:
                    56:29:65:5a:fd:d7:8c:ea:c8:5c:72:bd:81:62:79:
                    19:bc:9f:64:d9:d4:d9:89:80:7e:7c:1c:a5:f8:51:
                    9c:98:46:b7:12:ba:6f:90:a4:ff:16:b5:2f:2a:ba:
                    9b:0d:fa:db:05:1e:20:97:36:b4:9e:ea:73:96:0e:
                    8d:fc:bf:ed:61:6d:b3:e0:8f:c4:d1:f5:d2:c5:81:
                    1b:14:c9:78:c1:52:7a:41:07:ff:9d:3f:b9:ff:62:
                    a1:f2:31:71:7a:44:89:96:dc:06:e9:fa:47:93:f1:
                    f6:f9:b8:aa:77:b1:cc:76:12:9c:a6:db:1c:db:c7:
                    88:40:41:cf:48:c9:de:90:e7:17:aa:97:01:78:8d:
                    ba:a5:20:ad:1a:72:9d:cb:05:fb:42:5e:24:56:70:
                    ed:09:30:67:46:1d:ec:b2:70:36:3f:71:07:71:8c:
                    78:68:de:01:12:f1:b1:c9:c4:8a:d3:12:77:89:4c:
                    60:c9:32:bb:a4:b1:7c:18:3d:ac:db:01:5d:9a:bd:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0A:CD:B8:B5:39:6A:65:18:CD:51:4F:FA:FC:76:08:84:5C:E7:6F
            X509v3 Authority Key Identifier:
                keyid:1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:7b:12:cc:b1:8b:af:c1:40:99:a4:38:3a:a4:8e:0f:55:
         af:ff:50:60:fa:71:a7:c1:f9:28:3d:74:34:e8:5b:3b:2f:a5:
         ec:f7:ee:75:7b:a0:4c:e6:2b:38:e2:26:93:f5:b6:19:cb:84:
         0a:cf:c0:0d:a6:85:06:ce:3d:e1:59:3b:62:11:86:b0:a6:22:
         06:9f:22:76:25:b6:5f:48:22:8e:da:45:cf:a5:57:fd:e7:b1:
         8d:6c:63:1d:f8:68:37:fa:0c:b0:7b:49:36:80:83:0f:61:f2:
         bd:09:fa:29:28:85:f5:85:58:7a:af:e1:e9:29:33:78:39:ed:
         05:3b:ba:3a:a7:bf:8a:b2:d7:0f:18:7a:ef:ea:8a:65:e1:96:
         06:bb:f9:3b:fa:52:bf:90:e6:dd:d5:6f:a4:91:a0:70:c8:87:
         19:25:44:78:e2:a3:06:e1:25:3d:de:4f:cc:5f:4a:4e:83:c6:
         85:b1:b3:f8:25:d2:74:11:13:fc:08:d8:07:bb:89:1c:28:7c:
         43:aa:64:6a:5c:0b:cd:93:57:2f:32:27:70:91:fd:4d:4f:db:
         dd:7a:9f:8a:36:56:0b:0d:8f:58:0a:e6:0d:53:b9:50:b6:8c:
         97:cd:69:e7:99:ac:4c:a5:d7:e8:9a:15:11:d6:50:8e:6c:61:
         ad:6c:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 17:50:34 2026 by rpki-client