Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
File:                     HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json)
Hash identifier:          n+wkp27PY6czd2Mlnp8+fTkPUKjMKp8wUhlTPirYM4w=
Subject key identifier:   E0:25:25:00:DC:46:FC:A4:19:86:F3:41:08:DF:D2:17:03:61:F9:95
Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66
Certificate issuer:       /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
Certificate serial:       019F12658C0007E7BBADA175FD906CA8A1BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
Manifest number:          0241
Signing time:             Mon 29 Jun 2026 08:01:12 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:12 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:12 +0000
Files and hashes:         1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: qY7Mqv1HnPhXUfYOPNO3i3X3gBFOItbpAypB8sJtG/E=)
                          2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:8c:00:07:e7:bb:ad:a1:75:fd:90:6c:a8:a1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
        Validity
            Not Before: Jun 29 08:01:12 2026 GMT
            Not After : Jun 30 08:01:12 2026 GMT
        Subject: CN=e0252500dc46fca41986f34108dfd2170361f995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:55:5e:9e:6e:67:06:d2:7d:01:1a:2f:fd:
                    0c:b6:95:08:ae:f1:a1:17:e7:f8:ff:ef:0d:f9:31:
                    77:e3:cc:09:6f:33:9b:81:6d:bd:42:a5:21:47:18:
                    08:59:cb:bc:12:27:1a:99:2d:7f:36:3b:0e:e8:32:
                    81:a7:a4:88:27:bb:ed:a1:e8:82:98:b6:cf:a1:9c:
                    bf:db:2b:94:56:21:bd:f2:6d:6b:9c:81:c9:b6:2d:
                    ed:0a:8d:d9:35:df:05:25:93:27:49:84:55:fc:9b:
                    e6:33:9e:b0:cb:70:75:9b:11:95:cb:d7:72:4b:ca:
                    85:f1:75:68:7f:79:d5:de:41:d9:e3:a1:f6:31:04:
                    cf:3f:37:46:ea:f1:1d:c0:04:c1:19:74:e9:62:20:
                    64:8e:d3:7d:de:0d:c2:6b:f1:1d:92:7a:7a:5c:61:
                    00:b9:9c:cf:c5:1b:1e:04:f9:26:10:b8:5d:3c:2a:
                    85:84:16:ec:c7:05:8e:a3:6e:2f:25:23:d6:62:bf:
                    65:22:5b:cb:c7:c4:c8:47:2c:4b:b5:24:d8:4f:bf:
                    e0:42:df:65:b0:4b:89:f9:64:e3:3f:34:f7:37:0d:
                    bf:fd:13:b8:79:e6:97:77:6c:dc:e7:af:54:5d:ec:
                    62:e4:f8:50:68:b0:a7:bd:91:51:41:4c:e2:a6:f3:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:25:25:00:DC:46:FC:A4:19:86:F3:41:08:DF:D2:17:03:61:F9:95
            X509v3 Authority Key Identifier:
                keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:36:3d:14:83:de:40:6f:3d:be:4e:03:c8:84:2f:73:71:
         71:69:f4:38:cd:78:16:0c:f6:3b:e8:a8:58:c9:de:58:34:18:
         c6:54:c8:29:e9:d4:cb:7e:c4:31:f0:8a:6e:0f:24:c2:73:77:
         d7:4a:77:e5:00:40:bd:0b:97:e8:97:c8:ed:56:e5:8c:28:1b:
         1c:35:db:95:56:c6:27:58:ba:b3:fa:55:be:44:35:90:d6:b7:
         f1:e1:a6:34:73:34:b7:73:32:fc:a1:af:a9:72:5f:9a:53:d5:
         6b:db:7c:05:2f:48:40:8d:1b:e3:d9:88:c5:e1:80:67:09:6d:
         7f:e9:07:f2:5b:75:81:97:f9:5d:58:8a:4e:15:14:d7:03:39:
         34:34:90:46:bb:30:f3:a8:e0:5f:0a:ee:7f:74:6d:fa:e6:49:
         45:f0:7a:7f:3c:0d:90:e4:c0:21:5b:3c:74:bd:cc:92:56:96:
         f6:80:01:13:2d:cb:a7:f4:24:4e:e7:23:c3:e1:d0:4d:e2:d8:
         c1:a1:6b:4a:27:14:ff:03:b9:a7:4f:40:f0:21:7f:f7:3c:23:
         f1:27:f2:c0:19:f4:3d:d8:bc:bf:b2:52:d6:db:3c:ac:9c:9a:
         46:47:22:ab:df:60:71:be:a7:8a:47:1f:ba:ed:4e:3a:12:6e:
         a3:df:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:07 2026 by rpki-client