Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          HjpPg4ZuEl0VUphoc7PjjLbufUHvaefd8D0L6QsAj9I=
Subject key identifier:   B1:44:66:8D:FE:B1:20:92:2C:1C:E1:EF:2A:0A:1A:6C:4A:88:05:E7
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       019F27A483D20FB79A55BB5809354E60F4F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          15F0
Signing time:             Fri 03 Jul 2026 11:02:00 +0000
Manifest this update:     Fri 03 Jul 2026 11:02:00 +0000
Manifest next update:     Sat 04 Jul 2026 11:02:00 +0000
Files and hashes:         1: Kix4kTPQLQIQBS24-RxgbmJP4uM.roa (hash: IZRFChFiccTGrMi/xaHD/Y4tJtbN4JDWbyxQCJ6ZGnE=)
                          2: PjKNrzs98ZdtJ-2groduxlQr3TI.roa (hash: AGUANunYg5ZMjpAMIYuWSYyo7zh4erXZq7j8d3Oabq8=)
                          3: U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa (hash: nQFt4KKc4aLyiGsSy8KXsL646+IOodr1L6IOWwHG5ek=)
                          4: hM7CfSn8drcnZkcdIRN3S1LEFVo.asa (hash: /5csPNyf4bfqaOm9kt5mgfw6Bh4ZhcZytbR8gv3Eb34=)
                          5: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: sCdBm66+hcp1fy1dxTIABBLXdJevNYGfOXMvLJehfX8=)
                          6: k_1EWr6TT4OeQM7j9nrbpaIqcOA.roa (hash: 2HdlKCer6OR1eYI5oco+zFvSBQWIdH/6nbjqpzGMvtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:27:a4:83:d2:0f:b7:9a:55:bb:58:09:35:4e:60:f4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Jul  3 11:02:00 2026 GMT
            Not After : Jul  4 11:02:00 2026 GMT
        Subject: CN=b144668dfeb120922c1ce1ef2a0a1a6c4a8805e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:57:7f:81:5a:23:b0:f1:5d:16:24:2d:9a:
                    9a:86:10:18:ff:e6:a2:29:24:00:e4:93:58:40:17:
                    e3:2c:51:bd:a8:86:ee:18:6f:50:ce:39:77:de:8c:
                    2f:4c:57:de:fd:5a:14:70:c7:c5:d0:1e:1c:14:d2:
                    5e:cd:83:33:a4:6b:e0:19:00:25:15:72:74:25:b6:
                    d9:98:f6:9e:89:e4:63:bd:03:30:69:6d:3e:bc:8c:
                    51:66:30:85:70:ca:b3:33:4c:49:1c:c3:6e:6d:e6:
                    91:2d:a1:6a:a9:dd:01:15:51:25:41:11:5f:c9:72:
                    91:56:9b:8e:b0:91:01:e2:64:5f:39:26:f3:a3:0e:
                    bd:92:99:8a:12:c8:4d:b8:74:57:88:70:0a:7b:ec:
                    fb:0a:80:a8:a2:77:da:38:17:92:1a:4f:17:5f:f1:
                    ed:e6:79:8b:42:06:6e:16:a0:fa:60:85:48:26:c2:
                    15:13:6d:1b:04:dd:2a:6f:a0:4d:eb:cb:8c:88:79:
                    1d:a7:a8:e0:b4:20:66:86:23:ca:6e:6e:7c:26:c6:
                    06:f9:ff:c1:e3:00:da:23:c6:8d:77:d4:a1:5b:8b:
                    cf:c3:92:91:b9:0c:1f:a2:c2:eb:08:66:3b:06:8f:
                    f6:54:3c:4f:87:fa:42:ca:e6:b3:bd:14:e0:81:e7:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:44:66:8D:FE:B1:20:92:2C:1C:E1:EF:2A:0A:1A:6C:4A:88:05:E7
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d6:69:68:83:1d:82:69:10:de:2a:8f:d3:86:cb:5e:74:08:
         7e:25:54:09:24:c6:78:9c:db:64:d5:f6:bc:93:1a:67:16:cb:
         b0:c6:f4:65:dd:bf:a5:34:49:45:85:f4:16:31:72:83:00:24:
         ba:e1:d5:87:4b:af:d1:9d:62:a9:db:a0:09:a5:17:96:c1:a3:
         49:db:36:b0:75:9c:9b:80:cb:68:b2:c9:27:8e:aa:a1:88:50:
         45:29:29:c1:26:fa:43:da:94:07:38:2b:0e:81:c5:04:ea:c6:
         41:10:2a:a0:23:d7:4c:7f:dc:df:78:07:2c:b7:8e:4a:30:b0:
         8e:8f:1a:f2:91:7b:5a:bb:f5:d6:3b:aa:bc:5e:5a:6a:54:2e:
         9f:c7:ab:51:cc:3f:02:2f:ed:b5:33:f5:a7:c5:fb:d2:88:fd:
         8c:d0:25:ef:b8:b9:4a:fd:5f:ae:fa:02:f1:5d:e6:8a:27:41:
         e6:69:9e:bf:0d:c4:71:00:b8:73:a7:89:2d:61:eb:1a:0b:56:
         a0:22:dd:e3:23:bd:94:d8:b0:60:43:3f:5f:b3:35:88:bc:b4:
         44:76:eb:55:df:c9:29:52:0d:88:89:e0:46:1e:f4:4b:de:bf:
         63:cb:7c:7b:31:7a:f5:a7:52:18:59:a5:d4:e4:f8:20:7f:f8:
         1d:af:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:39:06 2026 by rpki-client