Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File:                     HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier:          PnMRO//MvGUVEGy8KDWtsItlfgvskQ2VmrPnQokISdc=
Subject key identifier:   E0:AF:6B:F8:33:C5:FE:74:F3:87:03:25:06:A9:23:7E:3F:49:CF:5A
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer:       /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial:       01A002F001E3AC0A14988BFD09FC4F1DE588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number:          19B4
Signing time:             Sat 15 Aug 2026 01:01:18 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:18 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:18 +0000
Files and hashes:         1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: ohxpNC8gl7HWcU12uCrkmFsdwO9rW0FaCFQx+ZNyx78=)
                          2: Y0yvGwL8N-nOEiU7zOM6SSHHJLQ.roa (hash: 8/QpRSCZ4OTmfd3cZORygSL1Lec3LinxRtnyUo2sHK8=)
                          3: j4FzHGNM-x8JCvJ06e6JApa0Mj4.roa (hash: F+UQE401zF1jsBTDqKt2hLCSf3ZWTZdmAcKzmrDSjF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:f0:01:e3:ac:0a:14:98:8b:fd:09:fc:4f:1d:e5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
        Validity
            Not Before: Aug 15 01:01:18 2026 GMT
            Not After : Aug 16 01:01:18 2026 GMT
        Subject: CN=e0af6bf833c5fe74f387032506a9237e3f49cf5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:bf:01:b5:64:76:fb:ea:dc:45:e6:16:52:
                    c3:cc:2d:06:ff:ad:95:de:71:9c:a2:2e:19:6e:a8:
                    11:25:76:81:cb:a1:de:19:f2:c7:60:e5:1c:0f:15:
                    19:f0:91:6a:54:9b:73:50:26:f2:8f:0c:f6:77:43:
                    e9:ea:79:7e:ac:66:e2:05:e0:37:ef:a1:98:25:f7:
                    98:99:01:0f:39:0d:73:c4:03:ba:b3:a4:40:ab:58:
                    df:84:cc:6a:66:2f:bc:e7:9f:10:ce:0f:8d:f6:a4:
                    72:28:97:0f:33:66:33:e3:3a:4e:d7:2f:ec:2e:cd:
                    f1:ce:0d:db:5a:f4:ea:40:06:49:76:a7:12:f5:02:
                    48:b8:ee:be:73:fc:18:3a:5f:e5:88:22:d3:4e:b6:
                    d9:6f:94:d4:96:63:bf:1b:f7:81:9c:c2:a6:21:b6:
                    e6:3e:a2:71:d7:23:71:04:2a:ae:74:a7:92:1b:3d:
                    97:6b:85:71:0e:8f:89:6c:c1:a0:18:82:8f:ec:b5:
                    18:58:16:d9:69:d9:06:1d:94:04:49:10:ed:b6:84:
                    a5:dc:a3:c5:52:71:71:8e:84:6c:d1:71:d7:1d:15:
                    a5:13:09:4e:0e:0e:30:6f:b6:7d:d5:1c:43:42:fb:
                    a0:e0:4b:1a:c4:63:d1:23:1c:a9:55:20:0b:1e:ad:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AF:6B:F8:33:C5:FE:74:F3:87:03:25:06:A9:23:7E:3F:49:CF:5A
            X509v3 Authority Key Identifier:
                keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8b:31:d5:04:d0:91:02:5e:8e:f6:c2:f3:09:6a:46:df:66:
         2a:b2:10:8e:d1:e3:eb:82:9e:2b:4f:61:2f:4d:d0:88:2f:be:
         1f:9d:65:31:58:1c:f7:78:f4:40:09:ad:e6:6b:89:28:bb:51:
         93:c4:3e:c2:3c:39:e6:ee:24:52:1a:32:f7:fa:95:4c:64:b4:
         47:df:f7:54:41:96:03:01:1f:df:06:27:52:52:1f:7c:db:a7:
         49:d5:db:a1:b3:05:f4:b4:b8:23:99:38:24:96:27:dc:58:22:
         cc:46:ea:7a:e2:3d:e4:d6:f5:27:af:70:3f:ba:f0:4d:aa:7c:
         9d:e8:03:55:f6:c9:7f:0f:04:7b:ff:3c:7a:01:dd:8a:81:83:
         a9:0c:db:f0:96:30:11:43:06:56:4b:0d:67:2a:fa:5a:31:bf:
         6b:2c:73:79:05:18:b9:34:c0:95:1a:29:d7:4c:fc:02:34:4c:
         9f:0c:52:cf:b9:ce:86:34:f1:d5:d2:c3:73:7e:c8:87:da:b6:
         bb:f8:06:ea:b3:33:41:71:08:cf:e3:f1:f6:ec:c2:48:ef:51:
         3c:35:6b:e6:34:3b:f0:84:57:9e:65:62:a4:e4:31:ab:09:7d:
         da:d8:3e:a5:43:fa:c5:bb:68:88:29:e4:03:24:0a:98:e0:77:
         4f:43:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:02 2026 by rpki-client