Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File:                     hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier:          Vb8bQIZ3qnGN+f62+jiDGqqc4kBrY7wNo9Mk6ruM6EI=
Subject key identifier:   49:A0:42:9E:85:2A:A1:48:2C:5C:49:39:31:36:19:34:34:94:0D:89
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer:       /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial:       019F1152ACA212B04AE9F63AA937E4878EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number:          1988
Signing time:             Mon 29 Jun 2026 03:00:58 +0000
Manifest this update:     Mon 29 Jun 2026 03:00:58 +0000
Manifest next update:     Tue 30 Jun 2026 03:00:58 +0000
Files and hashes:         1: 3iVHpX-aI-uO_RI8pv6ypgQCjZo.roa (hash: OKIRtCTmfn3CX5OuE5iLMX8UqmpBTkzwx6j0pTi8lPo=)
                          2: 4Y83xopR719SxF-9mkYVsuZPdvU.asa (hash: /BV9IR8XDZzpSpeeWi2TROvl4WlMh3YhpQRzOXZVJPc=)
                          3: 55OoBUFOM9TPPI-OW3WxlpfgGa0.roa (hash: ou1iN6OdQpzMZzlgWVrt2SECYX2pZ/j1SqKBwaQnptk=)
                          4: Ke8dRoJirH5sttFYCwiO0qmo8d8.asa (hash: 9z4rwbkYRmg1s501aTWgWzIblUDGnI/cKBSZyE4AZAU=)
                          5: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: 5coar1XPqrdPWBv1ziUAIchdDJ1CtcxZAl8uZlABgCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:52:ac:a2:12:b0:4a:e9:f6:3a:a9:37:e4:87:8e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
        Validity
            Not Before: Jun 29 03:00:58 2026 GMT
            Not After : Jun 30 03:00:58 2026 GMT
        Subject: CN=49a0429e852aa1482c5c49393136193434940d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:fc:fb:ce:2a:a7:1d:22:d2:a8:59:99:8d:
                    b6:76:cc:d4:45:e7:23:40:5d:80:57:e5:f2:b2:9f:
                    13:c2:f9:e7:4b:d1:a2:0a:57:be:10:41:78:54:de:
                    1b:0b:58:03:0b:77:fc:70:cd:f7:2e:49:88:8a:53:
                    38:a6:eb:e9:57:83:3f:fe:1e:dc:f4:d2:13:7f:ba:
                    e4:d1:3c:13:fb:2e:9c:7b:60:33:9b:0c:2b:09:63:
                    cc:a4:24:6c:3e:9b:93:14:e9:26:da:d5:73:a2:6c:
                    17:06:de:ce:f5:07:7e:19:a3:97:73:0b:0c:79:3f:
                    17:53:88:78:bc:da:46:9f:ca:12:bf:ab:b9:cb:98:
                    51:d1:2e:13:61:11:c1:59:37:31:74:73:75:09:ab:
                    a6:60:49:fc:cc:b9:74:a5:a5:dc:a1:0d:86:bb:b6:
                    c3:71:17:27:f1:25:c7:4c:61:60:8e:37:34:6c:10:
                    d4:96:b0:10:6c:fd:b6:f9:12:c1:bf:54:7e:e4:d7:
                    27:76:fc:7c:eb:8f:76:25:d8:24:5e:af:0f:9d:5d:
                    7a:85:84:99:d9:82:d6:af:f6:53:ea:cf:87:25:1e:
                    27:44:8d:2b:42:46:be:17:b8:fe:0f:27:e1:5d:0c:
                    e3:7b:6f:67:a8:8b:35:fe:ef:57:94:1a:a8:15:f9:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A0:42:9E:85:2A:A1:48:2C:5C:49:39:31:36:19:34:34:94:0D:89
            X509v3 Authority Key Identifier:
                keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:db:ce:26:29:86:64:28:27:31:28:76:f6:56:69:4f:2b:e3:
         80:17:fd:2c:3a:91:89:1a:1e:fc:62:b1:e2:05:d6:25:9a:41:
         5b:c0:dc:4f:df:99:4e:35:fa:7f:d8:52:db:cc:8c:d2:cc:3d:
         b8:63:3f:f0:69:de:0b:4e:b3:6c:0c:83:d2:9f:0a:c9:36:d3:
         5b:e4:cf:f4:00:11:d0:f4:74:f8:65:1e:de:b6:8d:b8:9c:db:
         bb:e6:fb:be:01:02:21:20:89:f0:bd:d0:78:fe:04:4f:96:b1:
         1e:e1:22:b8:8e:20:ee:b9:32:f3:fc:35:17:dc:e7:b5:a9:b5:
         1f:60:e0:20:fe:0d:0c:4e:6a:d8:85:71:89:18:2c:b4:f7:44:
         7b:83:66:35:0e:84:16:2a:4c:b1:ff:16:be:d1:54:d8:70:31:
         09:32:47:f8:ae:9d:a4:e3:6d:81:fd:ea:ac:58:03:df:96:44:
         49:a9:9d:da:55:b2:3a:2e:0a:95:35:79:95:c8:32:f1:c4:bc:
         ef:ca:37:27:fb:e0:a6:47:00:f3:78:0e:9c:1f:1e:86:e4:04:
         6c:98:4c:01:8b:9a:20:11:8c:4b:c5:5b:c7:49:3b:f3:21:2b:
         b7:9a:ff:d7:d9:66:18:c8:9c:02:0f:73:0b:50:76:08:05:6a:
         b1:69:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:22 2026 by rpki-client