Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File:                     Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier:          tMdRqilPxdDA664EtLju94yvVukvNQmRy6xEa9dUn0c=
Subject key identifier:   54:04:C0:17:94:AF:CF:9B:73:4E:41:2F:A0:E1:93:55:CB:DD:63:FA
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer:       /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial:       019FA1F25347C0FAE4D267CCA9ADE65C7829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number:          0F14
Signing time:             Mon 27 Jul 2026 05:00:40 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:40 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:40 +0000
Files and hashes:         1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: 6/eJeSRHsl6U1kROwmjqgdOpBOj5DHQMKaRAIKCeCu0=)
                          2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:53:47:c0:fa:e4:d2:67:cc:a9:ad:e6:5c:78:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
        Validity
            Not Before: Jul 27 05:00:40 2026 GMT
            Not After : Jul 28 05:00:40 2026 GMT
        Subject: CN=5404c01794afcf9b734e412fa0e19355cbdd63fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:b6:b7:f5:37:ef:77:a8:b1:5d:6f:3a:1f:
                    a8:b2:4a:68:8a:7f:a8:af:1a:8c:63:a0:b8:46:d0:
                    28:1c:cb:14:ca:4d:52:2e:9b:15:d6:f5:d8:13:74:
                    f7:b4:bb:ff:53:a2:48:89:a2:7d:a6:73:93:c9:4a:
                    a7:16:f8:06:16:4c:9d:4f:65:a0:b2:3c:33:b2:80:
                    a5:91:91:64:8c:04:b8:fb:73:82:13:e3:c5:bd:93:
                    18:4d:de:a9:36:7f:fe:7a:8b:31:19:cc:1c:b6:63:
                    16:4d:71:79:07:eb:f7:2e:e4:49:b5:33:fc:9a:d7:
                    23:37:8b:0c:7a:2d:c4:22:33:9f:a6:f7:1a:1c:93:
                    6b:c7:90:0f:29:f5:a4:c3:ff:02:53:01:29:4c:84:
                    a8:b7:fe:9b:9e:8e:0e:2a:e4:fd:35:6c:cd:d3:0c:
                    f5:a2:b9:15:1e:ab:29:3f:be:e9:3d:e3:01:77:08:
                    fb:12:ce:bb:35:4c:ff:1d:06:a8:25:ee:7e:0e:19:
                    9f:e7:de:e5:b3:d5:bf:41:75:f5:fe:cc:e8:91:7f:
                    04:3d:a6:5f:e4:d8:1e:40:1e:09:1e:fa:3e:29:2c:
                    30:8c:d2:3d:7e:99:05:32:03:66:fe:d3:3a:2b:65:
                    76:6a:fb:e9:44:d4:86:82:cf:a5:06:53:56:93:d6:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:04:C0:17:94:AF:CF:9B:73:4E:41:2F:A0:E1:93:55:CB:DD:63:FA
            X509v3 Authority Key Identifier:
                keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e8:a0:5f:b7:53:66:39:88:19:02:4a:89:67:95:f9:b6:f2:
         e6:59:91:25:08:ef:ec:20:69:55:0f:d9:43:e9:cb:43:cb:9c:
         32:ad:8f:cb:8c:79:2d:36:61:a5:72:9a:f4:7c:10:5b:20:08:
         9b:fd:76:11:d2:ca:86:48:73:4f:de:49:9b:90:8a:19:cc:32:
         67:d8:1c:6e:57:b5:1d:0b:07:0f:bb:17:fd:c7:a2:b7:69:b6:
         0e:68:d9:91:99:21:e4:2c:23:a5:bb:b4:11:60:6a:27:b5:45:
         e8:d2:c9:e1:e7:a5:e5:44:cb:03:e2:6c:6d:78:c8:64:80:38:
         4e:40:12:23:cd:e8:55:be:ab:aa:59:15:3c:7f:35:a4:66:04:
         4e:24:57:28:30:9e:69:93:9c:47:c4:23:98:a2:69:57:af:d7:
         d7:33:08:24:39:5e:06:91:49:cf:62:e3:de:9e:b4:fe:9a:3c:
         d0:81:4f:57:44:b5:3c:8b:0a:3b:0b:31:e4:95:24:ee:98:a2:
         1d:89:cd:82:40:80:f1:b4:7a:3a:ec:81:85:91:7a:be:1d:a1:
         57:81:50:b5:db:43:4c:f3:9c:f0:5f:46:25:df:87:92:1f:cf:
         ca:93:11:12:12:f4:a0:56:84:80:dd:7f:42:e1:52:b9:a7:b3:
         11:7d:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:35:38 2026 by rpki-client