Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File:                     HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier:          zzjJrudUefMaiPlmwL0B3eT48f4arAvbLwE51oFdUZE=
Subject key identifier:   7B:2B:CD:40:B7:2D:30:59:AE:E8:0D:4E:5E:E7:8E:EF:13:A7:BC:07
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer:       /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial:       019FF9B64A7A86E9EF338C48C795044E40BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number:          1213
Signing time:             Thu 13 Aug 2026 06:01:41 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:41 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:41 +0000
Files and hashes:         1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: luVKdjjj41E/huvbLvyPDkx1q4tamPJwsN42oDd4FNM=)
                          2: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (hash: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=)
                          3: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b6:4a:7a:86:e9:ef:33:8c:48:c7:95:04:4e:40:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
        Validity
            Not Before: Aug 13 06:01:41 2026 GMT
            Not After : Aug 14 06:01:41 2026 GMT
        Subject: CN=7b2bcd40b72d3059aee80d4e5ee78eef13a7bc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:bb:2b:73:e9:cf:05:a8:cc:23:69:3b:8c:
                    a8:b9:29:ee:a8:12:2b:e0:81:68:db:65:e0:5d:10:
                    f9:29:5f:df:f9:82:4b:7f:65:2e:d4:da:57:1c:52:
                    97:9e:ee:ee:d4:32:b3:3b:f6:37:40:d4:6c:c6:67:
                    45:90:f5:4f:30:e9:9c:34:68:76:3c:77:d4:ca:4d:
                    20:ea:c7:58:2b:02:32:de:9b:84:c2:b0:13:3c:8b:
                    3e:70:52:cc:f5:63:a6:1c:45:71:ca:a1:3c:b5:30:
                    61:4b:d0:16:4e:65:7a:58:6d:4b:d6:ea:10:d0:5c:
                    3f:eb:a1:f0:89:bd:55:dc:b4:b3:0c:f6:8f:89:aa:
                    1c:fe:a2:77:2f:2b:14:07:ee:cb:37:18:3c:c2:1d:
                    59:7b:9a:52:38:ea:5b:65:e6:a2:3e:f4:ca:ce:c9:
                    ff:74:16:ad:91:f6:b9:f7:60:ba:fa:70:3b:4e:15:
                    3c:20:df:df:3e:c3:32:04:7f:ed:9f:fa:fb:be:16:
                    16:d4:ed:44:60:c6:41:63:e0:bd:14:2f:ee:83:6d:
                    dc:ef:d8:b0:13:43:f5:48:e7:24:48:a4:bd:ba:84:
                    54:14:4e:5d:ae:d3:26:ec:e4:48:22:32:5b:17:6a:
                    74:43:4b:11:21:3f:0f:90:49:b5:c8:3d:d3:2b:41:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2B:CD:40:B7:2D:30:59:AE:E8:0D:4E:5E:E7:8E:EF:13:A7:BC:07
            X509v3 Authority Key Identifier:
                keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:06:88:f1:ef:ab:7c:6d:34:0c:30:7c:bc:ad:61:bd:5a:53:
         d6:c8:4f:c8:77:69:26:de:30:e2:23:d4:76:99:0f:f6:87:b4:
         5d:d0:9b:d5:b4:dc:c2:ce:af:47:61:ee:8e:11:17:bd:58:3b:
         29:a0:31:fc:e7:e1:30:64:1b:ab:14:2e:22:f1:8f:0e:89:0d:
         4c:a2:d3:b6:fb:a5:67:17:c5:1b:b8:1f:3f:f7:aa:79:23:d9:
         20:0e:1a:6d:96:e6:f7:d4:13:de:af:62:db:99:3c:18:ce:51:
         69:c7:71:ef:f8:82:72:5c:22:7a:f7:0a:0d:df:d1:15:e6:fb:
         cd:40:00:f4:4c:2c:11:3f:fb:ba:60:e6:10:f6:48:6a:56:32:
         bd:04:9f:78:cc:89:91:bd:71:df:e7:57:ab:69:dc:d9:30:45:
         e3:23:fc:b6:da:f6:3b:d0:94:94:3e:f6:8e:15:06:14:97:8b:
         ed:67:dc:3b:d5:d7:3b:68:73:43:83:6b:74:c7:79:75:3c:df:
         38:20:d7:11:bf:d3:b1:14:ef:f0:34:94:34:67:9d:28:52:1b:
         d5:d3:0e:a9:33:1d:8c:e2:7e:f1:81:ab:07:36:87:33:b2:31:
         b4:44:9e:d9:bf:f7:8e:cc:c8:f1:78:b0:a0:39:20:0a:07:b9:
         91:f1:80:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5tkp6hunvM4xIx5UETkC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzhiMTgzNmRlY2FiNGZmNWJkZmE1ZTM3N2EzZGY4N2Yx
OGZjMGYwHhcNMjYwODEzMDYwMTQxWhcNMjYwODE0MDYwMTQxWjAzMTEwLwYDVQQD
Eyg3YjJiY2Q0MGI3MmQzMDU5YWVlODBkNGU1ZWU3OGVlZjEzYTdiYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6m7K3PpzwWozCNpO4youSnuqBIr
4IFo22XgXRD5KV/f+YJLf2Uu1NpXHFKXnu7u1DKzO/Y3QNRsxmdFkPVPMOmcNGh2
PHfUyk0g6sdYKwIy3puEwrATPIs+cFLM9WOmHEVxyqE8tTBhS9AWTmV6WG1L1uoQ
0Fw/66Hwib1V3LSzDPaPiaoc/qJ3LysUB+7LNxg8wh1Ze5pSOOpbZeaiPvTKzsn/
dBatkfa592C6+nA7ThU8IN/fPsMyBH/tn/r7vhYW1O1EYMZBY+C9FC/ug23c79iw
E0P1SOckSKS9uoRUFE5drtMm7ORIIjJbF2p0Q0sRIT8PkEm1yD3TK0HPFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsrzUC3LTBZrugNTl7nju8Tp7wHMB8GA1UdIwQY
MBaAFBx4sYNt7KtP9b36Xjd6Pfh/GPwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYt
ZWMzY2IzNmQxMDI2LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYtZWMzY2IzNmQxMDI2
LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwaI8e+r
fG00DDB8vK1hvVpT1shPyHdpJt4w4iPUdpkP9oe0XdCb1bTcws6vR2HujhEXvVg7
KaAx/OfhMGQbqxQuIvGPDokNTKLTtvulZxfFG7gfP/eqeSPZIA4abZbm99QT3q9i
25k8GM5Racdx7/iCclwievcKDd/RFeb7zUAA9EwsET/7umDmEPZIalYyvQSfeMyJ
kb1x3+dXq2nc2TBF4yP8ttr2O9CUlD72jhUGFJeL7WfcO9XXO2hzQ4NrdMd5dTzf
OCDXEb/TsRTv8DSUNGedKFIb1dMOqTMdjOJ+8YGrBzaHM7IxtESe2b/3jszI8Xiw
oDkgCge5kfGAdw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:04:28 2026 by rpki-client