Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File:                     hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier:          MoOdBECTMOPXnunOZNtF5VdrIbRbpqdYtNgscnskfOw=
Subject key identifier:   F8:90:C0:DB:BA:88:54:C7:0D:69:25:4A:2D:4A:E8:19:45:12:9F:91
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer:       /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial:       019EB95802B0DECA233335773613B6D520CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number:          1959
Signing time:             Fri 12 Jun 2026 01:00:13 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:13 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:13 +0000
Files and hashes:         1: H6AvCEiySRywPqnoqPga4bVAQxg.roa (hash: nQJRt0EmcoJ2XDzeO3DLhVTm+C2u2iMFsb1catI5sW4=)
                          2: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: 7HHfFGJ4LfFD07JjJJfAEyF0xWtX3ApYZtPrx0SKl8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:02:b0:de:ca:23:33:35:77:36:13:b6:d5:20:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
        Validity
            Not Before: Jun 12 01:00:13 2026 GMT
            Not After : Jun 13 01:00:13 2026 GMT
        Subject: CN=f890c0dbba8854c70d69254a2d4ae81945129f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:7a:d1:6e:f5:61:d2:e4:5a:04:c0:cd:63:
                    38:e3:fc:60:36:f8:9a:93:9d:1d:70:27:ee:64:2e:
                    f8:a7:60:62:f6:1c:14:46:c5:84:70:24:7d:26:21:
                    98:d2:98:4c:13:28:8f:cc:68:b3:ad:64:79:b4:34:
                    86:bc:ed:75:9f:56:9e:15:8d:fd:70:c6:35:dc:fd:
                    74:bd:76:ab:27:27:1f:89:8e:69:22:bd:98:be:42:
                    17:65:0c:88:66:d7:f4:14:a6:c7:85:cd:55:48:0e:
                    a9:84:00:13:60:34:8f:4a:28:d8:da:46:c7:ab:ff:
                    70:47:1a:b3:f3:ee:0b:a2:51:98:0f:d3:3c:73:20:
                    bc:a2:77:97:c2:53:78:32:ea:f0:4b:d6:41:f0:7c:
                    98:83:a4:9d:98:61:fe:0a:82:38:2c:ca:cf:56:1e:
                    9f:d1:a7:3e:21:b0:72:87:5e:a7:e3:d8:2f:91:c9:
                    98:86:0b:67:ef:e3:53:a5:d7:22:4b:ee:68:e1:cf:
                    75:ac:1c:0b:e5:d3:ee:2e:78:19:ad:f2:6d:33:36:
                    90:13:94:51:32:42:d2:9e:b3:4f:39:bb:21:ef:a9:
                    55:dc:0c:ce:9e:e1:dd:f3:15:b3:88:26:3c:a9:1f:
                    85:28:c3:db:c0:73:c7:c3:34:39:f2:9f:43:9a:fd:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:C0:DB:BA:88:54:C7:0D:69:25:4A:2D:4A:E8:19:45:12:9F:91
            X509v3 Authority Key Identifier:
                keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e6:66:ba:31:c7:90:5e:09:25:33:a2:99:1e:cd:5e:72:f9:
         e9:47:4e:64:3e:39:3c:b8:29:bb:7b:82:a1:74:7b:e7:70:8b:
         f2:9a:91:f8:0a:03:aa:83:e8:0c:48:2a:91:d0:a4:ed:b8:75:
         22:26:b5:ec:1b:5f:57:ed:11:6b:98:0a:2f:9d:13:4e:42:0a:
         fe:20:6b:19:9a:b1:e7:01:1b:94:91:03:22:2d:f4:2f:f3:e2:
         2e:d2:8b:f0:dd:dc:30:93:f6:3d:d7:f9:ad:90:8a:c3:75:c2:
         d7:eb:33:c5:8d:45:92:0e:4f:f8:f7:26:56:c2:34:55:a4:40:
         6f:96:ba:8a:0c:c6:9c:f6:a5:42:d6:eb:85:60:44:6c:86:a5:
         e5:69:ff:0f:97:22:79:01:4d:27:d6:a6:84:70:ec:24:ba:fd:
         2e:60:60:32:fc:85:5d:1e:05:08:67:24:f6:d9:3c:c0:da:97:
         a9:db:9b:48:9e:a8:03:6d:29:4b:49:b3:8b:be:49:83:d8:46:
         fe:e9:8a:3b:fe:8c:10:b7:6a:8b:d4:38:62:e9:39:0c:d0:0e:
         fe:c6:f0:f8:a2:93:b2:58:89:a1:63:17:3d:cf:38:11:31:0e:
         75:cc:ff:a3:ed:8a:19:39:4d:79:73:b0:3f:5b:0d:49:93:19:
         46:98:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:31 2026 by rpki-client