Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File:                     HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier:          vbnpRB9Hed6qTtZ8XnmjCbIcHuFJcUqkmmdM6tYeISA=
Subject key identifier:   3D:47:23:B8:E1:34:21:FA:96:31:EA:0D:C2:AA:FD:2A:01:5D:AF:37
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       01A004701298BF403F83FA9963F32C52183C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number:          1595
Signing time:             Sat 15 Aug 2026 08:00:48 +0000
Manifest this update:     Sat 15 Aug 2026 08:00:48 +0000
Manifest next update:     Sun 16 Aug 2026 08:00:48 +0000
Files and hashes:         1: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: a2i3teY7925Uh105ywtO3/ysKkZymVDR07IX5zfCgG0=)
                          2: WrV4ZemJwrw_kjB05-5Id3wYxlE.roa (hash: eepRF61Uwq1JqMLzpuul90ksZb6fVRDXJtYxt1swjFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:70:12:98:bf:40:3f:83:fa:99:63:f3:2c:52:18:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Aug 15 08:00:48 2026 GMT
            Not After : Aug 16 08:00:48 2026 GMT
        Subject: CN=3d4723b8e13421fa9631ea0dc2aafd2a015daf37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:50:bc:2d:38:ba:ff:17:26:58:d6:c9:38:
                    cb:c1:90:58:38:6f:60:87:31:a3:9b:cb:d9:a0:0e:
                    80:1e:41:8e:c2:ce:a8:53:61:aa:3f:4d:07:dc:ca:
                    61:e4:b4:3d:0d:2d:96:2f:12:64:17:1b:a5:80:db:
                    c7:29:0e:84:24:e4:86:72:cf:87:6c:47:81:85:95:
                    aa:46:27:f2:10:8b:ed:d5:f3:e3:d1:6c:71:b8:89:
                    2d:dd:17:8f:e0:5d:cc:f5:67:e4:a2:01:e8:08:1f:
                    13:5b:0f:d0:7a:73:17:53:cf:27:77:7d:26:9d:da:
                    dd:38:24:6a:04:b3:de:44:9c:4c:a0:ea:4c:c8:29:
                    88:37:09:3f:13:01:44:7d:13:84:5d:ac:9a:80:61:
                    19:2f:6d:44:72:46:39:b1:9f:29:01:4e:a8:c7:61:
                    57:55:61:79:b1:87:1d:92:25:09:e3:2b:1b:9f:e7:
                    39:88:ff:33:f8:84:81:da:25:ab:86:f1:70:2c:da:
                    15:8a:6e:22:a5:fc:52:25:70:54:b9:b7:7b:1a:a8:
                    e0:56:83:bf:57:6d:31:0f:ab:cb:79:87:b7:2e:45:
                    e4:63:5d:5c:be:f8:21:74:e6:53:07:ee:73:9f:2a:
                    f2:68:91:37:db:9d:b9:ad:06:66:c9:84:0f:d3:77:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:47:23:B8:E1:34:21:FA:96:31:EA:0D:C2:AA:FD:2A:01:5D:AF:37
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:82:55:f2:3a:b9:c3:fe:c5:38:5d:29:79:53:47:65:ea:03:
         44:98:a2:ce:75:09:38:37:f8:0a:df:fa:87:a4:8e:a9:f7:26:
         c5:27:3b:1d:22:82:6f:4c:cd:62:89:6e:19:8c:f8:0d:b2:c5:
         55:02:cb:eb:7b:1b:f3:2b:aa:2b:83:2d:79:e8:28:0d:1e:dc:
         56:99:22:a5:1f:e8:ea:e4:8e:59:49:75:6d:74:6f:28:8e:52:
         2d:58:7b:5e:f3:72:f8:4c:91:2c:58:40:34:90:ea:67:13:74:
         c3:0c:2c:68:1d:0c:ce:31:06:03:d9:0e:22:30:e6:88:40:a1:
         6f:44:db:9b:3a:e2:5f:79:f2:56:e2:e7:57:99:2a:dd:3d:1b:
         72:b7:21:6d:0f:26:3d:2c:24:b6:89:36:fb:0b:59:88:bb:e6:
         e7:2d:b4:d8:9c:13:10:01:2a:16:de:f3:7e:52:88:00:7c:db:
         8b:29:b7:1e:39:7a:c8:48:db:b7:2f:f1:a0:27:7f:d8:13:b1:
         12:31:ef:8c:c8:29:a3:b3:b8:fc:2c:1e:dc:eb:0b:b9:7c:db:
         e2:47:f1:1d:23:b4:bf:c5:0a:d4:19:9b:f4:d8:26:fd:01:de:
         6d:22:24:ae:ef:a9:d6:09:4a:39:7b:3b:30:d7:7a:78:60:00:
         2e:5c:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:56:58 2026 by rpki-client