Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File:                     1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier:          AE5wayA4WLFbPXHSb1OAUmSWvu4NZcQUIJeXtWuNWM8=
Subject key identifier:   7C:B8:79:30:E4:5D:BC:69:DB:7F:58:F3:E5:69:CE:5A:09:2D:E2:9F
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer:       /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial:       019EB87C7554CA43A48B79FA75D7B36B9358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number:          0A80
Signing time:             Thu 11 Jun 2026 21:00:24 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:24 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:24 +0000
Files and hashes:         1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: x0at4naW8rn0I0Uns7ePiU9xtvqKPXtqHfVziH69j2E=)
                          2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
                          3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
                          4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:75:54:ca:43:a4:8b:79:fa:75:d7:b3:6b:93:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
        Validity
            Not Before: Jun 11 21:00:24 2026 GMT
            Not After : Jun 12 21:00:24 2026 GMT
        Subject: CN=7cb87930e45dbc69db7f58f3e569ce5a092de29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:71:20:0d:f3:5e:9d:7e:a2:fd:54:a2:11:
                    ca:d7:e1:13:92:ad:76:6c:21:d9:27:58:ac:41:2f:
                    d1:5d:f4:26:94:48:bf:50:28:92:14:88:5e:70:9c:
                    03:dc:60:17:fa:0b:87:60:8f:4d:8a:fa:69:1b:8b:
                    58:74:a7:9f:af:34:2b:95:41:61:87:a7:72:b3:3a:
                    d9:38:7c:85:34:d9:0e:0b:54:c7:71:04:b0:f2:45:
                    90:d8:0b:5f:ab:70:55:c3:c3:c0:60:9e:fb:16:76:
                    3d:7c:ae:df:a0:5e:f6:4f:64:d3:8b:3f:c8:4d:52:
                    3c:83:36:26:72:ce:07:62:67:b9:6f:5c:08:c9:5e:
                    22:47:1c:1b:cb:ef:c0:de:ff:d6:8a:62:72:46:ae:
                    a6:e8:12:53:36:37:16:75:9c:ac:d9:02:28:63:64:
                    5a:e1:ea:db:74:a7:db:40:81:03:fe:fd:26:f3:5b:
                    18:aa:a7:03:f3:1d:1c:53:9a:03:eb:e8:d7:8a:b7:
                    4a:9d:a4:37:fd:71:25:a8:63:ca:f5:cd:a8:26:c0:
                    37:e0:1d:b1:67:d0:e8:c9:56:fb:dc:58:45:9a:56:
                    e9:4d:02:4e:ff:4c:03:ed:d4:1f:ad:ef:b7:cc:89:
                    3b:32:80:5d:82:58:3d:ad:74:b1:32:6c:c1:fc:47:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B8:79:30:E4:5D:BC:69:DB:7F:58:F3:E5:69:CE:5A:09:2D:E2:9F
            X509v3 Authority Key Identifier:
                keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:85:6f:b5:e6:f0:b4:ad:1b:b1:6a:5c:51:1a:6f:14:b3:35:
         b2:3b:f8:12:61:69:70:21:5e:cb:6d:ef:2e:50:17:ca:b2:26:
         1b:df:7f:bd:db:ce:25:1f:64:f4:6e:02:a9:0e:79:71:43:27:
         68:5e:92:61:31:3c:9f:07:40:23:14:97:af:b8:03:09:2c:69:
         ca:56:9e:26:5d:03:13:57:ee:da:a8:68:9a:2f:ca:b3:6d:4c:
         ba:a4:46:72:7d:12:6a:75:d2:fe:e9:33:bc:d1:44:76:41:7d:
         c8:f5:7d:cc:e9:06:7b:9e:68:a3:18:cb:b8:84:f5:99:72:1e:
         09:0c:a7:af:5c:b0:ec:f2:8e:50:7b:c8:dc:f8:11:aa:de:f0:
         15:7e:16:a5:ac:7f:fb:41:0d:f5:56:ae:72:c3:c3:3e:11:dd:
         60:0a:3d:43:40:9e:18:16:71:9a:f1:2e:29:7b:ca:a3:7a:44:
         74:87:70:f6:2f:03:7c:86:65:64:9b:fc:0a:f6:17:9c:9b:45:
         c3:f2:22:3f:3e:54:3c:02:18:47:90:c4:ee:25:d4:73:b3:f7:
         6f:94:eb:7a:e5:5d:cf:75:c0:d8:bc:72:78:df:d5:14:de:7c:
         a1:b8:0d:6d:4f:03:f8:39:a9:2a:5b:a4:3a:54:26:90:67:01:
         c4:a9:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:14 2026 by rpki-client