Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
File:                     hcEp31AMjfmKQosomcbNYSTxaKE.mft (raw, json)
Hash identifier:          MXdA09YBzPFzXYSjcupBgL/N2AyOu4hUqaYO7z72dGg=
Subject key identifier:   E4:28:61:73:99:26:E0:E2:32:65:FF:B7:91:56:D5:C2:E5:CB:AA:44
Authority key identifier: 85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1
Certificate issuer:       /CN=85c129df500c8df98a428b2899c6cd6124f168a1
Certificate serial:       019FCF39A2A0E1D46657D9D776D64ED52AAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
Manifest number:          60
Signing time:             Wed 05 Aug 2026 00:01:28 +0000
Manifest this update:     Wed 05 Aug 2026 00:01:28 +0000
Manifest next update:     Thu 06 Aug 2026 00:01:28 +0000
Files and hashes:         1: JHT6ESoo6q0bOi3_neOwXu64U4c.roa (hash: 1z9FjYu9NjkAWLtxnb2DnFiLMcGnPYdwdwCvpCkxJqM=)
                          2: hcEp31AMjfmKQosomcbNYSTxaKE.crl (hash: Bar9lnaMNEkBhyTwISZ4/snDlV1fiLBx5xlQbmeonfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 00:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cf:39:a2:a0:e1:d4:66:57:d9:d7:76:d6:4e:d5:2a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85c129df500c8df98a428b2899c6cd6124f168a1
        Validity
            Not Before: Aug  5 00:01:28 2026 GMT
            Not After : Aug  6 00:01:28 2026 GMT
        Subject: CN=e42861739926e0e23265ffb79156d5c2e5cbaa44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:62:ca:c2:01:cf:a9:d3:10:3b:41:b8:16:
                    75:29:f3:e8:77:d3:85:1f:cd:e9:1f:33:2a:ab:0f:
                    de:6b:d3:49:ec:f5:f6:b0:71:4e:fe:40:a6:46:ed:
                    03:c4:03:5c:a1:25:2c:16:26:02:3a:3c:59:c3:91:
                    d4:7a:d1:fb:fb:ed:64:6f:8d:25:b1:83:30:43:a5:
                    42:b5:b5:8c:db:e9:1e:93:d8:7a:ef:85:a6:f9:ba:
                    4a:e3:4b:dd:a4:c7:b4:83:14:fc:26:05:a2:87:e9:
                    65:72:57:e6:f6:73:88:4d:ab:7e:6e:ed:fb:7b:a1:
                    c9:10:15:b3:b2:ae:08:1e:d5:ab:29:1f:9b:4e:1a:
                    42:87:92:da:ff:92:75:27:00:e5:d7:e3:01:02:bb:
                    84:f4:be:da:5c:cf:11:f1:e9:c1:6a:63:01:9e:54:
                    b4:0e:ed:57:2d:28:e2:40:4b:f2:86:5f:49:16:40:
                    51:6f:f9:a3:77:83:6b:18:b9:25:65:f2:8a:f4:50:
                    8f:8d:f0:25:70:72:d7:f6:6c:89:7e:9a:4e:9b:d5:
                    35:6f:8a:31:77:f1:3e:8f:36:21:1b:9c:76:f3:dd:
                    50:8d:17:a8:73:d8:b4:d3:87:e5:15:bc:b6:f4:85:
                    1d:52:94:21:73:6c:a9:1b:1e:00:b1:0c:ed:c3:1d:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:28:61:73:99:26:E0:E2:32:65:FF:B7:91:56:D5:C2:E5:CB:AA:44
            X509v3 Authority Key Identifier:
                keyid:85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0e:78:38:29:20:49:3f:95:4d:ff:86:d1:01:be:70:aa:69:
         2c:c8:df:e5:a5:e1:d7:85:3c:92:bb:9f:39:10:5c:c0:d9:37:
         68:6c:af:8b:ca:6c:81:6d:e4:42:28:77:c9:7f:dd:21:10:69:
         c5:e5:30:56:38:b6:14:35:fa:ae:fe:45:d8:3c:db:4c:ec:21:
         b7:f2:d3:af:cf:70:3b:f3:33:75:ed:e4:5f:9d:14:b8:45:f3:
         ab:b0:b4:e4:ea:1c:78:5d:1a:29:23:d4:9f:08:da:4b:d7:24:
         28:3a:22:6d:da:aa:3d:04:05:b0:05:a8:ea:64:15:1a:33:41:
         c5:d3:f0:e7:26:d4:4a:e2:20:c9:1e:5a:12:32:21:f7:c0:09:
         61:5c:43:f9:b7:18:1d:db:3e:36:1b:96:25:af:6e:86:69:78:
         a3:4d:d2:70:75:e1:8c:d7:71:a3:ee:3e:fc:29:e6:e0:cc:65:
         74:aa:75:81:44:58:42:76:51:fa:21:a2:d3:5d:5e:00:0d:5b:
         66:12:f6:c2:5a:c3:fa:3f:e2:f0:ab:58:57:19:14:76:43:bc:
         19:2e:69:31:37:6f:08:08:f9:93:a6:b2:83:f8:af:70:ef:e0:
         a7:1c:03:ee:2a:0d:d6:30:5b:58:5f:c9:6a:9a:92:ce:a9:7c:
         79:f3:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:50:04 2026 by rpki-client