Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File:                     HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier:          HcN/yetAvjxKZqg7l08rQFm/0EYOnLs3TFITVLj5Ryk=
Subject key identifier:   F3:51:F8:B1:62:8F:5A:37:D8:8B:03:B9:48:41:32:F1:D4:A3:F3:00
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer:       /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial:       019FA4BC3A0483D961BDBC8982C6D1E1BCFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number:          1963
Signing time:             Mon 27 Jul 2026 18:00:26 +0000
Manifest this update:     Mon 27 Jul 2026 18:00:26 +0000
Manifest next update:     Tue 28 Jul 2026 18:00:26 +0000
Files and hashes:         1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: VhHjW+UzhqoJ2v98716JPex1SoJ/BVfBkSnS6lK1EzM=)
                          2: LtF7nKZF5Eu_SugtCNfVkUGiFHM.roa (hash: DT5yTfPTZI2KTOuvzB4Bd0By5xLBRBjLmkPSrqIV9B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:bc:3a:04:83:d9:61:bd:bc:89:82:c6:d1:e1:bc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
        Validity
            Not Before: Jul 27 18:00:26 2026 GMT
            Not After : Jul 28 18:00:26 2026 GMT
        Subject: CN=f351f8b1628f5a37d88b03b9484132f1d4a3f300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:e0:ea:c4:9e:93:7d:c9:49:1c:60:92:6e:
                    68:9a:9b:9a:a9:43:ec:0a:7a:f4:f5:06:a8:f1:d8:
                    94:75:a1:d5:14:c3:7b:d0:e3:71:29:1b:5f:de:ea:
                    5a:d8:a8:f8:96:76:2f:89:c4:50:51:1a:ad:f7:4d:
                    cc:c1:93:19:d4:38:2f:1e:04:47:71:a8:2e:e2:f1:
                    d0:51:38:4b:25:a7:b0:a1:6e:0a:b1:a3:ee:18:d5:
                    df:ba:71:59:be:98:f2:07:03:da:e4:c4:d9:86:0a:
                    0f:a3:f4:f6:65:96:02:c2:c6:5a:81:2a:85:71:ff:
                    6d:1b:dc:94:81:d0:ee:c4:7f:54:61:63:45:f3:71:
                    7b:80:84:48:f8:cb:78:84:6d:af:40:9a:d3:a3:73:
                    db:1b:05:8c:7d:8c:b7:42:fd:ca:0d:c1:fa:87:ae:
                    9b:e6:bb:43:64:a7:fe:76:0d:06:35:20:63:7c:e6:
                    f8:58:20:4b:a3:13:35:24:43:74:12:ec:5f:b6:1a:
                    6a:d1:e7:b9:d4:34:ea:ed:b6:58:b2:a5:5d:ca:93:
                    13:e9:97:7c:b6:6f:98:b2:8c:7d:a8:da:5d:be:3a:
                    26:4a:71:a3:f2:75:9f:f0:b7:a4:36:3e:da:a3:b0:
                    06:71:15:8f:70:0c:82:aa:d4:a9:2e:c0:da:ad:bb:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:51:F8:B1:62:8F:5A:37:D8:8B:03:B9:48:41:32:F1:D4:A3:F3:00
            X509v3 Authority Key Identifier:
                keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:52:dc:33:d7:f8:8a:49:86:14:8c:12:5d:e1:06:eb:7b:5a:
         77:25:8b:96:61:bc:d2:82:e0:8a:52:85:4e:a0:8c:d3:7c:e0:
         89:dc:70:f5:a2:22:b5:e6:be:83:e5:41:83:95:cd:ce:99:e7:
         36:fd:43:dd:93:27:c6:26:af:44:6a:83:2c:e7:3b:f1:f1:7e:
         cd:f8:29:1f:5a:db:60:05:1f:80:59:54:19:55:06:30:74:08:
         82:c0:2a:c5:91:b3:58:79:3a:28:d6:df:43:fc:53:78:a9:ee:
         0d:43:fb:60:34:20:d6:65:d0:99:9b:fb:06:40:18:b3:1b:7b:
         4e:b1:b0:1f:43:f1:16:50:65:50:c6:42:0f:6a:b6:ff:27:1b:
         6d:5d:a6:2e:b6:7f:a3:df:84:7b:b3:fb:bf:b9:90:ad:e3:77:
         22:c7:38:ab:36:82:4e:37:16:e1:7e:63:4d:e0:bf:de:5f:0b:
         8f:33:d4:f6:b2:45:46:07:a3:ce:42:2b:5b:2b:03:52:b8:98:
         6d:bb:b9:44:11:02:f0:83:14:e6:e4:b5:67:ea:bd:83:3a:e1:
         65:ab:13:5b:ff:41:04:91:d8:6b:d5:a0:52:2c:d4:03:13:6e:
         52:1d:22:fb:7a:3e:cb:b0:5c:e1:7f:6e:60:68:66:54:5b:3a:
         08:18:b2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+kvDoEg9lhvbyJgsbR4bz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOTAzNDRkY2FmZmJkMzNlNjhkODQ4OTVkODdkOGFiZjUz
Yzc0YTMwHhcNMjYwNzI3MTgwMDI2WhcNMjYwNzI4MTgwMDI2WjAzMTEwLwYDVQQD
EyhmMzUxZjhiMTYyOGY1YTM3ZDg4YjAzYjk0ODQxMzJmMWQ0YTNmMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsebg6sSek33JSRxgkm5ompuaqUPs
Cnr09Qao8diUdaHVFMN70ONxKRtf3upa2Kj4lnYvicRQURqt903MwZMZ1DgvHgRH
cagu4vHQUThLJaewoW4KsaPuGNXfunFZvpjyBwPa5MTZhgoPo/T2ZZYCwsZagSqF
cf9tG9yUgdDuxH9UYWNF83F7gIRI+Mt4hG2vQJrTo3PbGwWMfYy3Qv3KDcH6h66b
5rtDZKf+dg0GNSBjfOb4WCBLoxM1JEN0Euxfthpq0ee51DTq7bZYsqVdypMT6Zd8
tm+Ysox9qNpdvjomSnGj8nWf8LekNj7ao7AGcRWPcAyCqtSpLsDarbto+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNR+LFij1o32IsDuUhBMvHUo/MAMB8GA1UdIwQY
MBaAFB2QNE3K/70z5o2EiV2H2Kv1PHSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYt
ZTUwNjRkYjIxYjIwLzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYtZTUwNjRkYjIxYjIw
LzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFLcM9f4
ikmGFIwSXeEG63tadyWLlmG80oLgilKFTqCM03zgidxw9aIitea+g+VBg5XNzpnn
Nv1D3ZMnxiavRGqDLOc78fF+zfgpH1rbYAUfgFlUGVUGMHQIgsAqxZGzWHk6KNbf
Q/xTeKnuDUP7YDQg1mXQmZv7BkAYsxt7TrGwH0PxFlBlUMZCD2q2/ycbbV2mLrZ/
o9+Ee7P7v7mQreN3Isc4qzaCTjcW4X5jTeC/3l8LjzPU9rJFRgejzkIrWysDUriY
bbu5RBEC8IMU5uS1Z+q9gzrhZasTW/9BBJHYa9WgUizUAxNuUh0i+3o+y7Bc4X9u
YGhmVFs6CBiyJQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:34:05 2026 by rpki-client