Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File:                     HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier:          jYw06RZZikiG/hYWDC+ajarx6KkF2M//0bKzi5EBcy8=
Subject key identifier:   6F:83:83:83:21:61:0D:57:16:DB:4E:81:CA:8F:4E:4A:B2:B1:98:4C
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer:       /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial:       019F1A1F5DDF8BC78B7393AB719AF6B0B73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number:          175C
Signing time:             Tue 30 Jun 2026 20:01:30 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:30 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:30 +0000
Files and hashes:         1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: bkRpJzDFmrL6iT6mngh50adVtjt1WaFJavNay3XmMBw=)
                          2: ZoMbhLRe32uOkMK8hwS9ali-Eqw.roa (hash: JRuU+ZyopWBcMt/8KJluZ75llM4qdJd/sZ4QglM1TbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:5d:df:8b:c7:8b:73:93:ab:71:9a:f6:b0:b7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
        Validity
            Not Before: Jun 30 20:01:30 2026 GMT
            Not After : Jul  1 20:01:30 2026 GMT
        Subject: CN=6f83838321610d5716db4e81ca8f4e4ab2b1984c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:08:62:3b:99:c5:45:75:01:55:8c:f7:bc:
                    65:a0:bf:fa:46:84:7a:24:8f:26:cc:91:5d:e9:4e:
                    93:6a:77:48:b4:1f:9b:7c:02:41:39:3e:b1:e4:d5:
                    dc:b3:b3:21:3c:0a:73:cb:c6:d6:d9:e6:b8:91:58:
                    d0:e1:a0:4c:2b:ef:57:a3:75:9e:58:8d:09:23:22:
                    ab:7a:40:d0:7f:f2:9e:5c:a6:20:a6:da:ba:4e:88:
                    15:bd:f0:d9:4a:7f:87:e2:62:50:1c:e5:95:4d:d9:
                    85:ef:ff:85:b6:30:62:18:93:89:db:de:45:eb:9a:
                    54:32:47:69:ed:16:9d:4e:fd:d2:41:e5:f6:93:91:
                    91:dd:71:0a:8c:a9:13:af:f4:d8:77:67:1a:a7:62:
                    56:65:dc:50:45:d7:48:ba:6a:e7:a1:84:98:79:a5:
                    7a:7a:82:5c:5f:4f:8e:8f:1a:aa:d2:18:24:bf:ba:
                    d4:63:cc:a6:ea:b9:6c:19:5c:10:77:4f:19:90:13:
                    22:4a:30:5f:9d:58:14:76:25:dd:31:29:15:ea:bf:
                    37:5a:43:c1:c7:72:44:c4:50:f6:98:17:f2:fc:72:
                    7e:c5:81:cf:06:21:cb:45:a1:cf:59:01:e8:76:e7:
                    06:24:87:6c:8d:68:26:ad:ae:75:98:3b:77:94:45:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:83:83:83:21:61:0D:57:16:DB:4E:81:CA:8F:4E:4A:B2:B1:98:4C
            X509v3 Authority Key Identifier:
                keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c7:3f:db:e2:70:05:2f:0f:d1:a4:cc:ce:3e:8d:18:8b:bf:
         99:b9:ea:c1:30:c9:a8:a8:cc:df:91:db:7c:cd:e7:9f:38:49:
         37:8d:52:1e:2c:8a:2c:47:4b:eb:a9:c7:7f:c1:d4:59:a5:da:
         8f:70:0d:7c:bc:7a:ca:b8:a0:80:d9:e5:07:a1:be:a4:af:b6:
         15:4f:c1:1a:4a:7a:aa:d8:f7:e9:6f:12:96:c6:5c:88:d8:80:
         fb:75:7d:ff:e6:d7:e1:7d:68:e8:e1:5b:81:ca:f4:6d:a5:32:
         51:1c:dd:e9:6c:92:e9:66:b7:c3:cf:d0:71:77:47:2f:be:30:
         7c:1b:8b:66:3b:94:e1:6c:66:25:b3:3d:b9:bb:e4:4d:ab:99:
         ab:ac:01:f1:6f:c2:b7:e0:4f:74:d6:c4:be:21:7a:a5:9e:82:
         a4:d3:39:01:f6:32:53:2a:41:c9:e1:35:6c:aa:ca:a9:b6:b2:
         e1:49:b1:2b:08:83:c6:8e:a3:15:db:36:76:24:6c:6c:08:85:
         9e:f7:09:7b:0f:11:84:28:07:21:c0:40:8f:43:eb:65:ca:ef:
         e3:94:90:ce:b1:db:05:54:a6:5e:b3:64:f0:78:a9:d7:68:85:
         1f:78:0b:fc:77:c3:75:b9:17:b1:b6:8a:20:9c:84:44:1c:76:
         e9:fd:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:13 2026 by rpki-client