Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File:                     Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier:          tWXH7WEtwTFLdh1wjgGL4uMzYHnpdwoYwNouqh0pwvI=
Subject key identifier:   9D:F4:74:7E:B0:2D:00:5A:3C:46:4F:76:58:48:EE:C6:28:C5:0A:5C
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer:       /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial:       019F3FE37E1F2DEC5A9AC9395E122E341B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number:          19EC
Signing time:             Wed 08 Jul 2026 04:01:41 +0000
Manifest this update:     Wed 08 Jul 2026 04:01:41 +0000
Manifest next update:     Thu 09 Jul 2026 04:01:41 +0000
Files and hashes:         1: 3CQPBvwQSy9_cPU5cEP39d2nObQ.roa (hash: mHzia9yQ9jVnKOVKmS0n7GXa6oQoerRG/9Ani8Cxtyw=)
                          2: 3V_tc1VzoiWK-sjOXpgAIRxNRto.roa (hash: nDebzFUErSWza+ioan4kmKHt89UK+APHM9KMAH7YVy4=)
                          3: EBeni4pRP0nfIWaoObl7rqIDxP0.roa (hash: RB+tAlC3yRIVwKOlg0JxFse1lwSpxsHF8d7G3GqHQUs=)
                          4: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: b3mOcPBTum5Q95Ibt0Sx3h2F3GeMee2KmlzhqrtOkMc=)
                          5: QP3K5CO3QpkKtU8-zftATbopp3w.roa (hash: XdFv/OYKJHuBMEUZpOTIQ4KgaoA0cL9feVSv0vcJu1Q=)
                          6: eL4d8R0XPXOB08vdB-uDqIZexg4.roa (hash: vcYlrcvZrfJt1r/9g7R9mGWxXMvFlZGH/WtZB2y0BDM=)
                          7: kJ-0390pMyeu9zSL9Uf7in-Aw2Q.roa (hash: KMWMkUFXEoHmMKezDEO3/QBBoNUsTTb/dAM8aKHwmn0=)
                          8: wLzSs2dPdRRWgA6exvCL5X-7yw4.roa (hash: n5giWzLva6AwNMrFYo/SZx0WnLNJlcTvoDCsWYhzTo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 04:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3f:e3:7e:1f:2d:ec:5a:9a:c9:39:5e:12:2e:34:1b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
        Validity
            Not Before: Jul  8 04:01:41 2026 GMT
            Not After : Jul  9 04:01:41 2026 GMT
        Subject: CN=9df4747eb02d005a3c464f765848eec628c50a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:59:29:0a:9b:84:36:c6:ac:af:64:ad:70:91:
                    82:b0:3f:5d:b0:c6:32:77:e0:7e:7e:f4:c8:03:e8:
                    d9:19:7c:18:a7:69:23:62:16:20:f1:d3:28:08:0f:
                    a0:e0:98:f5:ed:aa:1c:b8:8e:5f:85:b0:37:ad:69:
                    ad:1b:34:e7:ed:5e:1c:34:a2:d9:59:76:9a:55:4d:
                    80:03:81:1d:89:9e:99:99:ed:d8:ad:7d:11:15:7e:
                    0a:15:23:cb:1b:1b:69:58:d8:7e:e2:31:3b:c1:41:
                    ed:0c:04:ad:f5:12:22:1d:88:79:ae:da:19:dd:df:
                    48:15:69:08:13:2e:f7:bb:dd:e1:f8:3e:43:50:ba:
                    9b:39:25:c1:a5:4a:02:f9:07:1a:2f:7f:16:33:2f:
                    5c:59:6a:3b:0c:45:af:1a:0f:a3:77:40:99:8d:92:
                    ac:79:06:9c:fa:f9:70:e8:b1:35:e3:29:8a:d1:b4:
                    27:55:52:70:3b:e5:45:68:02:63:5b:59:72:eb:16:
                    ce:18:dd:af:18:e8:6b:da:c0:44:94:23:04:0d:f0:
                    fc:60:c6:32:a4:d6:91:d4:a9:a9:dc:b8:f9:1f:c8:
                    36:38:2e:a8:9a:8a:16:40:3e:3b:6b:67:63:e0:10:
                    18:f8:f2:35:b5:b9:95:2e:d1:0a:35:26:0b:f6:a3:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F4:74:7E:B0:2D:00:5A:3C:46:4F:76:58:48:EE:C6:28:C5:0A:5C
            X509v3 Authority Key Identifier:
                keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:46:c6:ff:bc:ab:74:37:b9:d3:79:6f:ec:d0:64:20:97:95:
         04:05:ed:3b:55:23:73:6f:81:f4:b9:a7:81:89:1c:83:16:43:
         5c:ac:12:35:db:44:63:2b:2d:f1:45:86:c8:21:ba:96:3f:31:
         ed:96:e5:1f:d4:1c:89:a5:23:d2:89:d1:dd:66:4b:e4:fe:d5:
         27:58:5a:2d:8d:f8:5b:e0:d7:96:3e:bc:36:a6:88:ba:f5:fd:
         d1:87:a2:07:bb:c2:18:a5:51:b8:81:b2:8f:40:43:33:a8:8b:
         7d:1b:1e:a0:8b:4d:fa:e9:ed:37:7b:b1:1f:d6:1b:58:60:9e:
         9d:10:cd:e1:33:ca:cc:b2:c5:fa:9b:01:f1:d5:12:9b:12:b3:
         d3:56:da:f5:34:ce:bf:5f:c4:50:8e:23:d3:b1:da:23:d2:07:
         bf:5c:46:19:c1:c9:07:c6:09:94:72:04:3d:c8:f2:9a:f8:37:
         c7:e7:01:e5:0d:f2:0c:0e:22:df:2d:e2:de:5b:37:eb:c6:10:
         97:e8:58:e7:df:a5:52:05:0d:f4:a6:74:dd:36:41:e1:48:33:
         19:fd:05:fa:f4:d8:2b:09:cf:75:93:79:df:49:49:65:2f:0a:
         a5:18:5d:04:58:78:b2:16:35:4f:e4:15:da:53:93:89:3a:bb:
         51:28:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:24:46 2026 by rpki-client