Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          FxlDfT38fq1Pa0DA0fa5vjezuOltuOw7LMCvEFbK2W8=
Subject key identifier:   7E:94:C4:7E:9A:E1:73:F0:BA:CE:E4:69:C7:10:94:94:CF:54:84:90
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       019EB68E905C1B21D86725DC12A1E30868D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 12:00:56 +0000
Manifest this update:     Thu 11 Jun 2026 12:00:56 +0000
Manifest next update:     Fri 12 Jun 2026 12:00:56 +0000
Files and hashes:         1: 3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa (hash: iEhzHIRnRxzpQUWkwXpH8+wLuqzBi2WgNixBv2cWr5c=)
                          2: 4dtT2zpOkX0M7815CYFyhrrEj7w.roa (hash: pUvuTTzJiPGDI0tk56sxaLiwIp0+DLwoX1SaGdq6b1Q=)
                          3: DPEXaJsdpwunEHWISAhP8hFXOUI.roa (hash: +8xOQY/MLqFDz3F9RapHgwM88JkcxWRhi/gr4+Z5Fes=)
                          4: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: 4Ohs6/kMiP2cVurDnsBnxSJaSD04x0hwUMT2gNGEwAg=)
                          5: nJNnJik0D06rHfwp0JH-RW1i8d4.roa (hash: PZkJCh1a5eNPEm8fstSBrrfjyNUedpDjFwbI97jj8c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:8e:90:5c:1b:21:d8:67:25:dc:12:a1:e3:08:68:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Jun 11 12:00:56 2026 GMT
            Not After : Jun 12 12:00:56 2026 GMT
        Subject: CN=7e94c47e9ae173f0bacee469c7109494cf548490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:8b:94:ac:48:45:51:1a:51:9a:18:51:0f:
                    12:16:cb:da:ba:15:e5:21:2e:04:fe:3e:be:6c:49:
                    f3:a1:d6:05:5c:d8:01:75:50:43:cc:40:03:76:d1:
                    9c:0b:7f:47:e7:e3:96:a5:e6:92:06:c1:65:21:18:
                    95:89:7e:47:c1:2c:aa:c5:b2:96:0e:2a:66:cd:4f:
                    80:02:14:21:e4:13:bd:15:8d:a0:b7:0a:c2:4c:8c:
                    88:3a:57:4a:f6:11:f1:5a:d3:81:e1:7b:bb:d0:33:
                    27:94:65:93:bb:55:58:1a:39:84:05:b7:5b:95:54:
                    a6:db:51:ba:29:c0:00:e4:85:50:d5:31:46:e8:76:
                    67:0f:29:fa:21:d3:28:9f:86:ce:ee:1e:43:ee:ed:
                    77:d0:ed:ec:e3:92:86:22:65:be:c0:72:77:c8:33:
                    a0:81:1a:49:e3:b5:c4:17:63:bf:6b:b1:e9:d0:70:
                    da:a7:44:5f:3d:e3:1c:f0:23:3c:a7:82:e6:c8:1b:
                    18:22:83:56:5b:66:9f:04:5d:ab:ac:ce:07:a5:17:
                    16:98:3d:61:ea:22:7e:94:9c:31:20:5b:b9:fa:7c:
                    d4:2b:9d:0c:ce:b1:1c:d3:c4:e8:ef:ad:c7:7b:dc:
                    fd:79:66:6d:60:56:b7:5c:5a:5e:3c:18:8a:37:90:
                    9d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:94:C4:7E:9A:E1:73:F0:BA:CE:E4:69:C7:10:94:94:CF:54:84:90
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:a6:b9:66:9f:4c:77:84:db:d6:7b:8b:f4:9c:d2:fe:34:
         92:28:20:0b:fc:9e:ee:26:6c:ce:be:b2:99:11:fa:a7:9d:cb:
         e0:08:dd:c4:fe:d3:c2:e0:fd:6c:5b:ec:56:ec:64:b6:a3:c2:
         bc:4c:ce:5a:e9:f9:84:ca:84:5c:e9:45:1c:6c:5d:77:d2:0d:
         8e:92:bb:e6:e1:85:08:a2:83:41:a9:37:47:49:f9:49:4f:66:
         79:2e:5d:0d:91:8e:a9:a6:64:d5:6c:ff:2b:83:1f:62:50:3d:
         79:86:07:0d:86:48:f4:c7:59:13:08:d9:3e:2f:60:4f:36:fc:
         8e:be:27:9c:33:fc:ae:df:74:91:de:00:56:9a:e0:20:33:13:
         62:14:bb:e3:8a:bb:41:48:3a:37:ce:d5:79:23:78:aa:5b:ab:
         8b:8c:bb:3a:de:d9:9b:39:a3:4b:69:7b:53:26:d3:1c:d7:d0:
         ac:12:dd:ea:7d:27:ad:4e:9e:44:3f:a5:c8:3b:40:ec:2f:f5:
         ea:c4:8c:d3:43:a4:e8:69:0a:eb:30:e9:16:42:69:32:4a:94:
         d1:b4:dd:ee:d7:b6:4c:2a:3a:1b:29:fd:85:cb:5a:97:c1:e7:
         c1:88:96:b0:a6:e1:16:3c:fa:0a:7a:74:b4:b2:76:44:4a:95:
         73:e2:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:27 2026 by rpki-client