Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File:                     HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier:          i8wczQLYukh7RaMxvPKZRksxbS0DROA+0M3PNkXWhFk=
Subject key identifier:   35:9F:50:AC:8B:3A:4E:4B:B5:48:1F:AC:D1:2A:CE:1F:B2:02:4F:36
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer:       /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial:       019EB7D7E8C20230C01D7F894F1293768871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number:          07B5
Signing time:             Thu 11 Jun 2026 18:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:40 +0000
Files and hashes:         1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: w3OqcsER3/xxKA6sfQeWCs4vRgKVwnlHwJceqXshrXE=)
                          2: rFR6ifvFvE2ynV2hmLnL9rHW-es.roa (hash: S4CeuRl2W6crNxhLlfTzDmJqM3oGkzLJPZkdIsK+MO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:e8:c2:02:30:c0:1d:7f:89:4f:12:93:76:88:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
        Validity
            Not Before: Jun 11 18:00:40 2026 GMT
            Not After : Jun 12 18:00:40 2026 GMT
        Subject: CN=359f50ac8b3a4e4bb5481facd12ace1fb2024f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:b7:18:c0:83:29:e7:dd:0c:e5:80:fe:36:
                    a2:51:3d:6f:14:13:15:b8:d6:ca:57:2c:04:d8:45:
                    d2:13:b7:b6:fc:d5:ba:63:2f:4c:5a:13:24:80:03:
                    5f:e3:86:2a:ae:88:f7:70:47:60:9d:6f:9f:d6:84:
                    60:97:46:3b:28:a2:2b:b9:1e:b4:95:fd:98:f1:56:
                    83:8a:98:81:a6:03:6e:18:1e:dd:e2:5f:f8:2f:05:
                    92:93:6d:9c:2b:6f:6a:27:7a:71:de:e3:0c:fc:77:
                    7f:4c:28:4f:67:06:4a:7d:bf:34:a5:2b:46:f7:8d:
                    11:cc:09:11:30:e4:8d:e0:fa:cd:94:f3:21:49:a2:
                    e5:2f:98:e1:e3:a2:3c:96:bd:4d:42:a7:64:0b:e3:
                    c6:a2:69:4d:d4:bc:35:35:af:ab:75:85:b4:c0:a7:
                    91:d8:69:d0:03:ac:c9:4b:2b:b0:4c:a9:38:06:ae:
                    7c:c2:c9:fb:31:b1:66:01:41:d9:6e:28:3d:1f:a3:
                    5b:3d:2d:8b:19:ae:b9:4f:49:4e:4e:a1:bb:5a:54:
                    79:98:6b:28:6f:12:ed:53:79:68:ed:0f:5a:4e:1e:
                    6e:50:73:f1:12:1a:d2:4b:72:bc:4d:1d:65:78:0a:
                    ce:ca:19:95:2c:a7:49:15:7e:b1:78:6a:1b:f4:04:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9F:50:AC:8B:3A:4E:4B:B5:48:1F:AC:D1:2A:CE:1F:B2:02:4F:36
            X509v3 Authority Key Identifier:
                keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:cf:97:2d:bd:0c:df:53:d7:69:e4:f2:58:b1:bf:2f:df:
         9b:c6:fe:be:63:03:6b:79:72:65:d0:97:6d:b4:1a:3c:46:2d:
         40:4e:9e:f7:b3:3f:e4:52:be:79:2c:c5:18:a2:46:d2:a5:35:
         97:15:3a:23:f3:f1:36:c2:c8:b6:27:8b:73:61:f1:ca:8a:b1:
         45:ac:23:8e:d7:1f:16:df:a3:53:fa:4d:ea:2b:1c:72:6c:03:
         fa:8b:ef:80:de:f7:29:1a:3a:60:81:f1:c2:89:c1:ee:33:9f:
         c3:fd:82:bd:02:e7:08:cd:12:6b:f2:78:dc:2d:4a:3a:c1:0c:
         87:db:70:34:6d:56:b9:d8:1e:25:d6:44:75:53:91:04:ea:e8:
         5b:73:c0:df:f6:b4:95:ba:f4:b5:8b:c6:bf:04:d3:bd:3c:bd:
         49:6e:27:b0:fc:a6:5c:79:24:17:52:da:3a:2a:51:3f:12:2a:
         f5:0e:e5:7c:82:a5:16:fb:89:4e:f1:e2:62:d1:9b:33:41:0e:
         2b:27:94:28:1b:2b:cf:be:d7:a4:d8:44:90:8c:97:2e:57:1d:
         ea:1a:bd:6a:72:64:ee:a6:9b:07:66:8a:36:e3:c4:f1:43:b5:
         98:af:53:ec:ba:75:19:70:a9:3b:89:20:65:8b:8c:22:84:d3:
         59:76:4f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:13:41 2026 by rpki-client