Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier:          IGPGq4gJcylYbvgLHanZ6CrN8lUaSgHCY1kaZdBEBoM=
Subject key identifier:   CF:31:F1:4B:25:62:CA:02:C5:D6:EA:94:A6:3E:69:A5:C8:C0:E4:4D
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer:       /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial:       019F122E9E11CBF9E1DA23575E78369C75B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number:          1916
Signing time:             Mon 29 Jun 2026 07:01:12 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:12 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:12 +0000
Files and hashes:         1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: +PS+X7Uq77v+rmgZBzQPzwRu7a5jhcLdry53TytFU6I=)
                          2: jeVYoAlmG_sEvFtGiKgaPSf17pw.roa (hash: 1XW/CIVJ1Xt4kEijZkBhaCtanmPdLXj+hDRhskw3N+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:9e:11:cb:f9:e1:da:23:57:5e:78:36:9c:75:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Validity
            Not Before: Jun 29 07:01:12 2026 GMT
            Not After : Jun 30 07:01:12 2026 GMT
        Subject: CN=cf31f14b2562ca02c5d6ea94a63e69a5c8c0e44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:81:c8:46:57:5b:ef:ff:5d:14:c0:3c:e9:
                    4f:c5:e4:5c:4c:ba:9c:b1:3f:16:1a:4d:ce:0d:55:
                    8c:1c:ee:9d:c7:8c:84:07:5f:62:b4:33:5f:ca:fd:
                    80:0f:a6:eb:8f:76:af:ae:e3:8b:02:7c:53:2e:0c:
                    9e:45:63:32:72:5a:07:2c:18:cf:a7:62:dc:b6:83:
                    f7:bb:37:d2:21:24:aa:ae:72:4c:df:59:f8:42:87:
                    9e:4c:07:a4:cf:e7:a0:7f:1d:19:6c:94:17:f0:22:
                    af:22:bb:15:a4:78:c9:31:03:db:d8:74:1b:ed:56:
                    38:86:72:55:14:c5:c7:78:8e:60:34:86:3b:97:27:
                    65:06:69:c4:0b:29:44:fa:26:ad:c2:90:4f:f2:0f:
                    e3:5a:91:09:e3:4c:a2:52:01:42:3a:a9:dc:30:61:
                    40:80:ca:01:b5:f3:36:36:f7:60:bb:dc:d6:d0:3f:
                    2c:59:77:98:c4:6c:76:e2:8f:87:f7:ee:7b:a6:e7:
                    a3:49:de:5e:1c:87:8a:7c:11:8b:13:cc:1e:46:d2:
                    5a:b1:b5:f2:93:82:25:bb:c1:9d:d6:43:b4:07:85:
                    a2:d5:89:4c:be:24:59:03:d6:dc:05:b7:ab:60:40:
                    54:70:6f:bf:b1:72:82:f1:3b:e2:49:ba:72:9b:f8:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:31:F1:4B:25:62:CA:02:C5:D6:EA:94:A6:3E:69:A5:C8:C0:E4:4D
            X509v3 Authority Key Identifier:
                keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:b4:fd:58:b4:42:8f:75:eb:7b:fa:6c:ca:e5:fe:4c:9c:
         8b:2f:01:fc:71:54:ce:65:18:c8:c3:fe:a1:c2:4a:a8:85:70:
         13:22:76:4d:95:d9:f5:e6:49:36:f8:1a:1a:70:22:13:57:3b:
         56:da:2e:f9:1a:37:4d:ff:83:56:d5:f1:f8:70:d6:36:2d:e4:
         e3:11:0c:71:53:d7:18:58:7b:3c:23:ca:73:42:ca:6a:b0:d7:
         bc:34:b1:58:7f:51:03:bc:c3:b0:0c:16:c2:96:64:da:26:54:
         28:ca:a6:5a:da:5e:6b:4b:f8:0f:88:13:fa:74:5e:1c:2e:cb:
         5d:c6:25:37:4a:50:a0:c2:4e:82:29:7f:a6:f8:c0:4c:45:c3:
         17:f0:36:e0:70:56:b2:fe:e5:9b:d2:1a:2c:ad:29:f7:69:f0:
         0e:21:fa:5e:03:73:4c:03:cd:84:84:91:8a:92:40:5a:51:68:
         f1:26:b9:2e:32:21:a3:56:a5:07:38:a3:6d:35:4f:24:4a:12:
         43:76:1d:fc:00:9c:1b:d2:38:d7:b4:0f:5c:85:fb:c8:13:0e:
         a0:e8:58:9f:a1:aa:7c:13:65:79:75:64:5f:f5:f4:9d:1b:06:
         99:2c:ab:4f:8e:f2:7c:f4:77:cc:b6:0c:fb:aa:52:18:fa:b2:
         ac:d7:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:21 2026 by rpki-client