Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File:                     hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier:          9w2nfwmY7ZwPKQpLeHrB403etUCInFHIZKRicMMJyhg=
Subject key identifier:   12:CC:88:D8:6C:D4:33:CA:25:BB:17:28:09:3D:2F:2E:25:FA:61:6A
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer:       /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial:       019FA229182136E87A4799A551CC8AA7E3CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number:          1A0E
Signing time:             Mon 27 Jul 2026 06:00:29 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:29 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:29 +0000
Files and hashes:         1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
                          2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
                          3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
                          4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: ea7FT/zxvpB+Wt/xq4URl7KfyhtIZlRHhOXB6JnJJ4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:18:21:36:e8:7a:47:99:a5:51:cc:8a:a7:e3:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
        Validity
            Not Before: Jul 27 06:00:29 2026 GMT
            Not After : Jul 28 06:00:29 2026 GMT
        Subject: CN=12cc88d86cd433ca25bb1728093d2f2e25fa616a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:09:f5:96:da:c6:99:cf:70:dc:d8:ef:94:51:
                    b2:6e:0c:3f:b3:32:f8:b6:85:81:e2:44:a6:8a:7a:
                    1d:26:51:76:06:63:f6:27:94:b0:48:1a:57:c3:72:
                    c8:6a:e7:ef:31:eb:0b:c2:76:f3:a8:09:61:b8:c4:
                    32:e9:15:25:a2:a2:f9:3d:72:a0:09:34:34:68:36:
                    5c:61:82:8c:36:12:57:47:f5:dd:e0:0a:8b:bb:1e:
                    95:f7:ab:c3:19:b7:e6:23:83:04:7d:e0:b9:03:4a:
                    51:ef:21:78:9d:f8:19:a5:d4:04:b3:e0:ee:95:ab:
                    c4:59:84:8c:6c:29:9a:4d:ce:03:4f:75:01:a4:55:
                    79:2d:54:2d:e0:21:e9:dd:6a:82:a5:b7:d9:4b:77:
                    cd:61:8f:ba:fd:13:03:b3:fe:05:31:8a:8d:8a:f9:
                    2f:08:b2:5f:db:43:a7:7a:c5:12:57:9e:16:f6:4c:
                    0e:be:cb:3b:54:6a:f4:8e:61:2f:18:ed:73:81:f4:
                    af:9d:09:13:a6:9a:da:56:d5:2c:7e:a0:36:55:9f:
                    c1:23:fd:c7:70:84:52:e1:7c:7f:64:da:3d:5c:e6:
                    4f:6e:ca:70:1e:fa:4e:43:1e:34:cc:18:9f:58:49:
                    44:2b:31:48:48:ac:c7:58:f3:0e:fc:be:34:f4:95:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CC:88:D8:6C:D4:33:CA:25:BB:17:28:09:3D:2F:2E:25:FA:61:6A
            X509v3 Authority Key Identifier:
                keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:13:79:1a:3b:85:40:44:70:a9:bf:24:46:ba:5e:a2:da:f1:
         00:08:db:96:ee:9d:7d:c2:23:f0:aa:52:23:26:7a:65:4c:ca:
         a3:39:e3:c6:4e:89:8c:fc:8b:c3:49:63:57:75:32:93:6d:e4:
         a1:2b:31:7f:7d:e7:64:89:8d:a5:1b:e3:49:4e:5d:58:f9:a3:
         e9:29:88:98:d3:0f:0e:32:d4:d0:8f:11:c2:78:4e:53:93:a1:
         30:e9:63:f4:d8:fd:6e:fd:73:c1:54:70:16:75:2a:75:42:91:
         e9:97:b7:87:35:39:67:ee:e8:8a:6a:fa:46:f6:3f:a8:6e:1e:
         d2:8a:f1:31:98:f2:92:30:aa:a1:49:e9:56:d5:8a:9a:b1:c5:
         34:01:bc:49:5c:3f:0c:0d:02:6a:64:c1:1b:51:d8:31:1d:a3:
         49:0b:b2:f4:08:92:32:3c:ec:2e:f2:3e:11:33:27:25:c7:79:
         a7:6d:f6:bb:ae:c2:89:b4:56:4d:29:cd:b7:60:c2:61:66:21:
         61:37:18:ca:20:ee:e6:02:59:a5:4f:e7:c0:de:37:f7:43:bd:
         93:fd:fe:9d:c9:34:18:9c:b1:40:3c:ea:63:c2:ff:15:ab:6e:
         59:1e:ed:96:e1:11:0f:7a:94:0a:91:2d:61:19:6b:eb:71:a6:
         20:62:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:28:04 2026 by rpki-client