Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File:                     hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier:          4QrVEQ6g2vc6Q2DzSRr9B7vh4hz9hNAJbD36nO7fZWM=
Subject key identifier:   9B:8F:C3:EC:6D:D5:E7:53:96:61:28:D2:6A:BB:86:2C:36:07:97:EC
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer:       /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial:       019EB9C5EE10D6A657A09884905C85D3CDFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number:          1590
Signing time:             Fri 12 Jun 2026 03:00:16 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:16 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:16 +0000
Files and hashes:         1: EApMV8-N-zmao3CAo-NQpD3Lz2A.roa (hash: aR54mqSnxFgOPc79I9yN0jBUTDGkCFj+YEV/eOtu4c4=)
                          2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: t4rmTIaIzTOOLGNFVaL0qhg0jW0PA2vXYkAJ3BhcQTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c5:ee:10:d6:a6:57:a0:98:84:90:5c:85:d3:cd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
        Validity
            Not Before: Jun 12 03:00:16 2026 GMT
            Not After : Jun 13 03:00:16 2026 GMT
        Subject: CN=9b8fc3ec6dd5e753966128d26abb862c360797ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:6f:47:08:df:23:17:16:b0:aa:a7:26:f4:
                    d0:ab:9a:85:20:2a:f7:fd:93:33:70:1d:08:57:8b:
                    23:f7:92:3d:4f:b5:97:19:d4:7e:2f:b7:0b:0f:e4:
                    c5:25:e1:48:fb:60:3d:0c:50:97:58:a2:52:1b:49:
                    93:8c:49:79:37:f6:07:1c:b9:26:ce:12:f0:60:3f:
                    5c:59:b7:16:99:66:c4:41:80:77:e4:95:95:8c:19:
                    04:87:e5:2c:f6:bc:5e:83:10:1d:af:cf:93:8f:0c:
                    4c:e2:88:c0:3d:07:16:c5:c2:a8:0e:46:c6:e3:65:
                    ec:9f:e5:48:df:50:d1:68:9e:99:22:79:8a:7e:4f:
                    fa:40:37:0a:44:e0:dd:bf:28:06:2e:91:01:2b:0e:
                    f1:55:ad:ce:70:48:33:49:5d:20:27:33:88:2a:92:
                    a9:2c:d9:62:57:05:8f:a4:13:5f:f7:b0:87:3f:d5:
                    e8:0d:5c:83:63:ae:79:4b:69:39:c6:89:03:38:9e:
                    2f:c2:1b:51:11:45:b3:bb:be:0a:a6:34:7e:bf:3b:
                    b8:b8:ee:e2:48:25:a7:01:25:9d:c7:32:3f:08:d4:
                    a8:13:e9:59:f3:d7:f9:72:89:a0:4a:56:d6:df:52:
                    04:86:6e:d3:43:51:69:d0:b7:0d:8e:2d:a9:73:35:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:C3:EC:6D:D5:E7:53:96:61:28:D2:6A:BB:86:2C:36:07:97:EC
            X509v3 Authority Key Identifier:
                keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:21:19:c7:f0:10:9d:c7:02:f0:91:e7:11:d5:ae:e8:bc:
         94:d8:38:5e:53:d7:55:7c:07:58:4b:e4:ce:a3:0a:d4:ef:88:
         ee:59:a5:09:63:50:a7:23:a5:52:ea:cf:d8:cd:70:60:ef:c6:
         d9:15:26:76:04:bd:4f:b8:01:30:e6:1d:b5:3e:f6:28:fb:78:
         6d:0d:cb:5c:a8:24:da:6e:49:01:16:ef:97:c9:41:4d:e0:7e:
         74:8d:43:5a:e7:cd:46:c5:a4:40:4d:95:f1:98:c9:9f:20:02:
         d8:dd:38:83:e0:63:d2:ff:81:84:c2:09:32:e4:7b:f3:32:16:
         ca:77:8f:57:28:80:b1:e4:2b:73:7e:f2:af:02:d4:d9:60:74:
         be:1d:c3:12:b1:17:23:02:8b:3e:ea:15:ee:4f:04:59:75:54:
         58:10:fd:32:2d:9f:eb:5e:c2:e3:01:c4:c5:f7:0f:8d:ca:f5:
         41:fd:8d:e8:66:89:d8:81:5d:af:11:05:d2:03:57:95:4d:4c:
         67:a2:56:7a:72:fc:cc:4d:0e:c0:71:69:23:da:20:20:58:a9:
         ae:56:80:3e:20:19:51:c1:7e:fe:b1:ea:c7:a9:be:b7:e6:16:
         61:2c:59:ee:60:02:00:a7:b4:5f:c3:81:99:02:30:d9:9d:57:
         7c:62:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:19 2026 by rpki-client