Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File:                     hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier:          Xvaf+vcbo8SpaLE7DpWbzvpjlk7iTVhMWTXHalmA71I=
Subject key identifier:   BC:0F:DD:73:16:7A:0F:80:A8:EE:61:BC:35:F6:80:81:3F:9D:F2:98
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer:       /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial:       019E92B04BFCA41DC7745384A41F1E2EA03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number:          09FE
Signing time:             Thu 04 Jun 2026 12:51:27 +0000
Manifest this update:     Thu 04 Jun 2026 12:51:27 +0000
Manifest next update:     Fri 05 Jun 2026 12:51:27 +0000
Files and hashes:         1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=)
                          2: FkErPbDIeaRtvt2mbo2Rn3cHaTE.roa (hash: Udc4j3pbjPbQNDOUkwyNVr+rebw3Mlt0Hcd+vSG/cyg=)
                          3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=)
                          4: Lx10w8QEiPDY7QbmkKm1WqjMKzY.roa (hash: 2Jg8RPIFYFJg9gr44bQNGOwxTHbO7QCXzzpqCpKGJY4=)
                          5: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: Gr7HnNlcAsDkk1auiLXk/3D7DVg0pUV6MrmJxka/EgQ=)
                          6: x0cR6jRtni_l8MuSLZAtEqFxSP0.roa (hash: yoZ8H34hrukbP1OK2g71bu2hsQg8D//pklb5IZbtw1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:b0:4b:fc:a4:1d:c7:74:53:84:a4:1f:1e:2e:a0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
        Validity
            Not Before: Jun  4 12:51:27 2026 GMT
            Not After : Jun  5 12:51:27 2026 GMT
        Subject: CN=bc0fdd73167a0f80a8ee61bc35f680813f9df298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:59:09:54:9c:fd:93:88:bb:1a:05:e6:88:6e:
                    83:2b:5c:a5:0a:53:a9:47:f7:e4:7e:46:9b:92:33:
                    54:24:ad:8c:3b:cc:5c:25:7c:48:82:23:0c:06:02:
                    d6:f1:33:b6:a9:8a:28:a8:dd:af:0e:7d:fd:77:91:
                    09:5e:aa:6e:aa:bf:e5:18:73:17:d2:c3:50:75:48:
                    38:1c:ff:c1:b3:d3:fd:9e:d8:13:ee:8d:9c:74:51:
                    e5:f5:45:f8:ce:43:bb:bc:91:9d:2e:4b:47:44:fa:
                    4d:69:d6:97:2d:76:f7:38:e3:5c:5b:87:7f:5b:f3:
                    ce:ce:9b:7b:d5:1e:bf:11:d3:bc:a5:f5:b7:e3:4b:
                    1b:8a:9a:4a:1c:6c:e4:f9:57:0e:99:30:5e:40:63:
                    cc:6f:a1:e0:f6:19:fd:4b:90:5b:1b:16:3d:8a:64:
                    01:bd:f2:13:3a:bc:6b:0d:39:54:c1:05:0b:f3:45:
                    71:f6:35:83:1e:18:27:c9:62:cc:6c:6d:26:c1:5d:
                    cc:3b:53:8b:61:5a:79:5c:cc:f2:31:0e:e3:ae:af:
                    31:29:2d:5f:05:9a:03:cd:6c:8b:f5:32:c6:64:f8:
                    4e:c2:50:32:6e:1b:84:d8:36:e5:a2:a0:d0:55:ef:
                    ab:66:3b:b6:1f:52:58:66:3f:2b:8f:68:07:4e:aa:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0F:DD:73:16:7A:0F:80:A8:EE:61:BC:35:F6:80:81:3F:9D:F2:98
            X509v3 Authority Key Identifier:
                keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:62:0b:a3:0d:56:5a:cf:a9:c3:af:75:01:00:20:69:cb:a9:
         8a:c9:75:90:f2:e5:33:89:e6:27:38:0e:45:e1:dd:34:54:f1:
         9d:a1:d9:71:88:ed:42:c1:7e:0a:43:f0:7d:39:8e:45:b4:2a:
         56:38:74:c0:83:4e:9c:da:c1:f6:73:2c:77:63:78:ff:2a:82:
         72:bc:3c:18:7a:a4:aa:fe:29:72:1c:3c:1f:14:94:8a:1e:4d:
         db:6b:c4:4b:2d:e3:5b:84:2f:2d:23:94:41:2c:ad:0e:21:3b:
         9c:5e:01:8a:fc:ef:bc:3a:44:15:ac:d2:3c:f5:e0:13:38:78:
         3d:bc:67:9e:c7:cb:4b:66:c0:8c:9d:71:1b:86:33:ec:a8:fa:
         f3:ca:9e:48:e7:d3:50:d7:f6:1b:db:58:4b:b8:54:62:57:f3:
         51:75:1a:37:62:1a:8c:98:6a:f7:9c:ec:16:8c:f4:e2:7e:cf:
         46:fe:bb:e8:9b:9c:76:be:ca:35:f7:21:25:c1:16:c8:57:cf:
         34:3f:cd:de:4c:d0:50:db:1a:d1:4f:c7:52:88:a9:6b:17:33:
         4d:7c:84:1e:27:c6:fd:bb:0d:39:f5:fc:4e:9d:46:e1:de:85:
         e7:29:bc:1c:a2:3b:f2:88:12:49:bc:2b:61:db:3d:3c:7b:0e:
         2f:d0:a5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:15:23 2026 by rpki-client