Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File:                     hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier:          QiH5vjzaCf6fFxFCFGDFgxDzVrrwzkq6Do3lUF7C/2g=
Subject key identifier:   01:47:30:C3:62:1A:2E:17:45:7E:96:1C:0A:BD:C6:5A:0C:DD:16:77
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer:       /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial:       019FA1F2B9B46CE3AAFECB83C2376DB734A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number:          186D
Signing time:             Mon 27 Jul 2026 05:01:06 +0000
Manifest this update:     Mon 27 Jul 2026 05:01:06 +0000
Manifest next update:     Tue 28 Jul 2026 05:01:06 +0000
Files and hashes:         1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
                          2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
                          3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: e3pDYSn4rdnQYxkEogGHoEUMlk9YMFss7qDu0fVf5Ng=)
                          4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
                          5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:b9:b4:6c:e3:aa:fe:cb:83:c2:37:6d:b7:34:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
        Validity
            Not Before: Jul 27 05:01:06 2026 GMT
            Not After : Jul 28 05:01:06 2026 GMT
        Subject: CN=014730c3621a2e17457e961c0abdc65a0cdd1677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:a0:8a:bf:ed:a9:3e:3e:c5:07:4b:7a:77:
                    10:18:4e:4d:c9:44:b4:da:b2:a4:67:05:ef:7f:dc:
                    ab:95:23:d6:42:5d:3e:b9:32:48:2f:87:7d:83:f1:
                    d0:24:fd:f0:54:24:5d:8d:56:e3:31:8f:00:28:eb:
                    bc:4d:2a:b2:ef:4c:ff:17:97:ed:5e:e0:d6:6e:5b:
                    66:bc:f6:94:9b:36:a0:9d:0a:f2:6a:50:67:69:b5:
                    32:e8:d5:58:65:9c:c4:34:87:ad:d7:8f:14:e3:57:
                    7d:ab:0c:aa:6f:99:80:e0:d2:2d:72:d2:06:0d:86:
                    4a:28:9d:1a:66:97:5b:76:58:ec:3a:45:4d:83:45:
                    3d:e8:12:8c:96:a2:a2:f7:6d:25:ab:fe:61:9d:aa:
                    09:58:8d:5c:fc:98:5a:fc:b9:23:b3:fc:12:45:d1:
                    d0:56:58:45:eb:a7:78:eb:47:15:bf:52:91:21:f3:
                    19:79:7e:4e:06:bb:76:6b:e3:60:d1:21:32:41:01:
                    ea:a6:d3:41:eb:03:60:b6:fc:5c:ec:16:2c:54:bf:
                    32:5b:90:bd:46:c7:29:25:59:54:e6:70:c1:bb:a9:
                    95:a0:3e:7b:fc:16:3b:45:8f:de:0c:21:fd:48:17:
                    7b:83:ec:52:ce:d7:0d:2b:cf:db:a8:b7:b2:32:38:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:47:30:C3:62:1A:2E:17:45:7E:96:1C:0A:BD:C6:5A:0C:DD:16:77
            X509v3 Authority Key Identifier:
                keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:05:f7:0d:21:45:2f:a6:cc:49:5a:cf:12:9d:06:98:f8:76:
         62:50:a9:cf:6c:a0:e0:ab:f5:95:52:80:b5:6a:01:c3:32:b2:
         f3:b9:9b:8d:a0:9b:a7:a6:f5:24:3e:f7:70:7c:5c:58:b4:bf:
         2f:77:e1:79:49:a0:a6:5b:cc:1d:d6:e0:0a:05:81:07:33:54:
         fd:d7:39:db:b8:2b:0b:af:31:72:23:87:8b:55:b1:6a:cd:80:
         69:14:88:3f:15:cb:2a:f4:3a:2d:f0:8b:e4:a7:bb:df:4c:cc:
         58:59:98:5f:1d:a5:27:d4:c9:0e:f0:6b:38:33:41:f2:ae:09:
         63:ab:ab:2b:71:fb:09:12:8c:af:de:11:d6:db:0b:6c:02:cb:
         58:bd:17:2c:47:83:1e:ce:5d:d1:fd:71:19:62:2d:58:2e:7c:
         75:ce:67:34:cd:be:fc:d7:d7:83:69:c6:55:4f:ff:55:e1:a3:
         dc:ee:17:f6:11:c3:b1:a3:f2:0d:e3:f1:59:19:5c:30:38:93:
         fa:be:0c:ff:ff:78:fb:c5:00:d1:66:9d:9e:75:e0:c3:ed:fc:
         00:f5:43:91:af:1b:56:f9:e0:52:72:a8:1f:68:5f:50:2a:e0:
         d3:bf:c9:17:2a:b5:57:06:18:b9:db:70:bb:3b:01:93:af:2c:
         74:68:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:45:16 2026 by rpki-client