Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          HbpuRweg0SaRHkfR8RCX9N2n3bRgrPBC4dCiNtgti8g=
Subject key identifier:   E7:C9:0B:43:BA:B8:FF:31:FD:AC:B6:84:0F:9D:A2:F4:DE:54:80:AB
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       01A00F6196AD04ABB5E1E057ACE08D6FF5B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          1668
Signing time:             Mon 17 Aug 2026 11:00:48 +0000
Manifest this update:     Mon 17 Aug 2026 11:00:48 +0000
Manifest next update:     Tue 18 Aug 2026 11:00:48 +0000
Files and hashes:         1: Kix4kTPQLQIQBS24-RxgbmJP4uM.roa (hash: IZRFChFiccTGrMi/xaHD/Y4tJtbN4JDWbyxQCJ6ZGnE=)
                          2: PjKNrzs98ZdtJ-2groduxlQr3TI.roa (hash: AGUANunYg5ZMjpAMIYuWSYyo7zh4erXZq7j8d3Oabq8=)
                          3: U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa (hash: nQFt4KKc4aLyiGsSy8KXsL646+IOodr1L6IOWwHG5ek=)
                          4: hM7CfSn8drcnZkcdIRN3S1LEFVo.asa (hash: /5csPNyf4bfqaOm9kt5mgfw6Bh4ZhcZytbR8gv3Eb34=)
                          5: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: At3WAZxTWuUY87KW17cxSmZHudrOTvzeI4gIHrqclpc=)
                          6: k_1EWr6TT4OeQM7j9nrbpaIqcOA.roa (hash: 2HdlKCer6OR1eYI5oco+zFvSBQWIdH/6nbjqpzGMvtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:0f:61:96:ad:04:ab:b5:e1:e0:57:ac:e0:8d:6f:f5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Aug 17 11:00:48 2026 GMT
            Not After : Aug 18 11:00:48 2026 GMT
        Subject: CN=e7c90b43bab8ff31fdacb6840f9da2f4de5480ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:18:11:9b:1b:d0:98:0b:dc:cc:45:0d:3c:
                    66:f8:51:e7:af:52:67:41:9d:ac:1a:ed:01:51:4e:
                    48:07:7a:cf:9b:00:8c:57:fd:1b:b4:fb:dd:7c:4a:
                    b6:71:6a:f2:77:38:36:85:46:d4:52:95:73:5f:d3:
                    a1:d6:77:28:74:51:80:29:8d:89:f6:5d:db:2b:d7:
                    76:46:c6:f2:07:1d:c1:7b:ef:06:fa:85:f3:d6:e8:
                    7b:b8:ae:94:42:17:10:3f:6b:30:4f:53:b1:b2:c1:
                    8f:6e:5d:fe:57:83:e6:05:1f:99:61:89:d9:73:43:
                    1e:f0:28:02:4c:2b:44:6a:4a:18:84:c0:a2:3d:6b:
                    8a:7c:ea:d1:04:ac:4d:37:69:18:58:b7:86:54:4f:
                    80:f2:09:4b:54:29:bf:31:b4:45:cf:b8:90:8f:c4:
                    59:cd:5b:3f:17:7e:da:29:80:53:02:01:42:08:38:
                    51:00:6f:49:40:f8:55:f4:64:75:2d:4a:dc:8c:ee:
                    bc:b7:29:11:c5:e1:5f:0c:2d:79:46:00:78:c9:81:
                    11:2a:04:3a:1c:76:2e:3d:63:fa:da:24:e1:5a:54:
                    27:fc:d7:b6:86:b8:99:93:59:d5:f2:1c:6f:a9:c9:
                    09:07:96:03:3d:b9:18:8e:31:98:00:76:b5:38:b4:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C9:0B:43:BA:B8:FF:31:FD:AC:B6:84:0F:9D:A2:F4:DE:54:80:AB
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:a2:a5:fb:2d:72:45:43:9d:7e:b5:6d:b0:1c:a4:00:23:
         91:4c:e6:57:c7:2f:3d:f0:b6:9e:e0:e8:cf:79:58:45:17:38:
         9d:36:ba:c1:7b:7e:e8:79:8c:37:72:07:5f:72:54:94:41:b3:
         73:34:ed:66:70:5f:71:fd:19:ac:1f:4a:5f:69:5d:56:c5:fc:
         d3:d6:19:c6:15:7e:ab:b5:ea:31:29:8b:06:27:49:47:98:24:
         8c:65:aa:06:8b:85:96:a2:84:9c:43:34:18:01:61:1f:76:3f:
         7e:ab:71:97:9f:4c:44:cc:61:fc:6e:36:b1:5a:2e:b3:9d:4a:
         b6:84:35:c8:e0:26:d5:18:d2:cc:f2:9c:44:86:6d:4e:6b:ad:
         14:7b:be:5b:66:53:6d:55:d2:1e:d2:52:06:01:8d:aa:8e:97:
         e0:76:28:57:77:a3:f3:90:c1:d3:fd:98:46:c6:5b:51:19:d7:
         c2:2b:44:bf:71:93:2e:e8:96:88:51:87:44:59:47:8f:63:35:
         9e:c4:da:34:30:7c:36:95:20:73:5a:fa:30:ab:83:64:60:9a:
         27:8f:2f:74:75:70:8f:15:f6:b6:f8:f2:db:c3:bd:1a:ec:ca:
         ab:b4:a0:01:ed:2b:25:e8:90:2b:5f:8c:48:b4:cf:83:46:e5:
         a0:c0:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:17:51 2026 by rpki-client