Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File:                     hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier:          wZnRhHwC3Xj6zWzq0z6QjQVfyWXh58kjcl1/PsFZMwM=
Subject key identifier:   00:69:3B:83:0A:9E:A3:52:E7:F5:72:15:C7:90:A2:0D:E8:44:FA:78
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer:       /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial:       019FA11656E45756776C5DBC642785F4A108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number:          1591
Signing time:             Mon 27 Jul 2026 01:00:23 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:23 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:23 +0000
Files and hashes:         1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
                          2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
                          3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: totrlCxyg5YbSXCCYN2McKiQmUgi4HGEv6Fsq84ao70=)
                          4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:56:e4:57:56:77:6c:5d:bc:64:27:85:f4:a1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
        Validity
            Not Before: Jul 27 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=00693b830a9ea352e7f57215c790a20de844fa78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:fb:96:be:7b:bb:ea:82:9a:83:3e:04:10:
                    96:5a:dc:b5:d5:26:a8:55:70:2d:78:e2:c6:41:c5:
                    82:9e:be:7f:63:0c:10:3c:1b:22:ec:ce:27:7f:d2:
                    e8:cc:46:48:46:9f:03:3c:02:ee:73:37:83:6d:d3:
                    41:a5:fd:fd:0e:79:9a:92:6a:1a:a5:a2:69:ad:83:
                    18:18:c1:49:38:5b:87:3f:8c:6c:e4:aa:3d:7d:27:
                    76:63:fa:8f:e4:b9:a4:b4:49:6e:3c:e2:17:65:db:
                    7b:df:a5:1a:cc:0d:24:eb:09:70:4f:b0:fc:2f:3a:
                    31:41:b2:db:3e:62:8c:b6:d3:6f:f9:1c:55:89:5a:
                    81:c0:b9:df:53:57:e1:00:01:6e:be:4d:2d:dd:10:
                    a5:7d:d1:51:c5:b8:c6:63:92:17:f7:da:f3:68:52:
                    f6:d7:55:d3:ea:9d:d1:b6:4e:b4:e5:da:4d:18:22:
                    dd:7b:39:61:9c:4a:91:b5:f5:92:6e:77:0a:ed:27:
                    5e:d8:b1:ff:3e:17:7f:ac:90:cc:42:f2:75:71:a5:
                    33:c0:f4:35:58:51:63:2c:a1:e5:43:8c:ac:a9:e3:
                    1a:6e:fe:cd:80:71:70:0d:9d:b6:01:38:ed:78:7e:
                    d6:89:9a:56:e6:60:00:16:96:b8:97:1a:50:70:3a:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:69:3B:83:0A:9E:A3:52:E7:F5:72:15:C7:90:A2:0D:E8:44:FA:78
            X509v3 Authority Key Identifier:
                keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:36:46:a0:6c:e8:86:ad:2e:27:06:a7:b8:4d:ea:99:de:87:
         65:ef:ea:f5:ec:a5:d2:20:f1:b7:55:3a:a0:5d:bd:cf:41:90:
         2c:da:57:7b:61:0c:56:c8:bb:6d:f7:ce:2f:58:c9:80:75:7e:
         67:ca:a4:1f:8b:29:ff:41:21:5c:d0:d9:51:ed:3c:2b:77:bb:
         fc:f7:96:1b:0e:98:a9:53:06:02:34:c3:69:ee:e4:42:14:37:
         0c:bb:6a:02:0d:d0:9a:c2:a5:4b:65:7c:b4:4d:08:52:21:ec:
         dd:35:48:f2:0e:36:8e:9b:74:67:a9:e7:75:77:3a:53:d3:86:
         41:f3:ad:f1:0c:5c:28:9f:95:0d:93:8a:c1:0c:54:4b:aa:66:
         86:73:4e:2b:e6:2d:57:66:98:65:09:77:ff:bb:0f:ed:a6:4d:
         e0:6f:b1:f1:5f:35:3f:9c:9e:d5:a5:fe:36:87:8b:c3:1f:da:
         2c:c4:7a:63:e5:ae:8d:a6:fc:44:33:e2:46:f6:72:16:c8:1e:
         ac:55:a2:b8:e2:ab:22:01:40:28:f7:54:d1:72:d7:0c:ce:fd:
         15:d8:66:f0:6f:cb:08:e4:2d:74:1c:ca:ff:71:bf:01:95:a1:
         7f:87:c8:2d:f6:a6:6d:a8:14:be:8f:64:1f:b4:c0:bf:2d:98:
         9a:1e:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:12:35 2026 by rpki-client