Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
File:                     HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft (raw, json)
Hash identifier:          Q2WnUX741lh3QRDyUALgurFOT8f+n35IC5kKbf2k8iY=
Subject key identifier:   32:35:37:00:30:B3:F3:F2:FD:07:AA:BE:70:D8:87:90:10:F7:89:CE
Authority key identifier: 1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8
Certificate issuer:       /CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
Certificate serial:       019FF5DA331ADBF7F0342D7AC82F446FBA55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
Manifest number:          74
Signing time:             Wed 12 Aug 2026 12:02:25 +0000
Manifest this update:     Wed 12 Aug 2026 12:02:25 +0000
Manifest next update:     Thu 13 Aug 2026 12:02:25 +0000
Files and hashes:         1: HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl (hash: Erj7qkfMThr0XpCyjBSOWLXz+vPwAQETahMoqCNM6TU=)
                          2: fr2U1ETSBDaYtpmel9S6z2AF8Q0.asa (hash: vnqoM5a+GH/Bcj8OwND/TYSLxt03hi6ZcbKX0HMYzDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 12:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f5:da:33:1a:db:f7:f0:34:2d:7a:c8:2f:44:6f:ba:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
        Validity
            Not Before: Aug 12 12:02:25 2026 GMT
            Not After : Aug 13 12:02:25 2026 GMT
        Subject: CN=3235370030b3f3f2fd07aabe70d8879010f789ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:df:49:7f:1f:e5:96:b9:b1:05:c9:67:46:
                    5e:83:bc:65:65:ad:3f:83:d9:48:60:76:08:94:76:
                    90:bf:d6:5f:11:f9:63:99:ef:62:2d:d8:e1:b8:02:
                    8e:82:9f:56:18:73:e3:9c:1b:56:00:a2:92:8d:15:
                    ec:0a:8c:e9:b0:df:63:18:7e:05:93:e5:cb:1f:b4:
                    6b:db:f1:35:10:ae:89:d7:2a:89:80:28:bd:a7:01:
                    a7:b1:8e:60:6b:23:6a:78:60:2d:c1:ba:b8:25:1b:
                    06:ba:fd:35:e5:64:d6:48:3e:50:f6:f1:52:05:d2:
                    16:f9:c6:a2:2c:fb:5c:da:c7:ba:9e:40:a1:12:f1:
                    5a:11:44:e7:8b:10:5e:ef:3f:b1:74:fe:62:c1:16:
                    ef:c6:a9:0e:d0:92:30:b2:21:99:3e:f7:98:92:6f:
                    6a:ba:8f:9f:ec:89:70:b6:70:f1:fb:15:87:40:ab:
                    ee:c3:52:20:69:5a:d8:74:bb:69:b9:65:55:30:8f:
                    b8:4b:9f:4d:c0:09:e8:36:e0:70:62:25:c7:f3:63:
                    92:7d:42:00:0c:c4:a7:9e:8e:82:ad:92:fa:fa:68:
                    fb:70:9e:40:63:88:76:f8:3f:ea:78:d9:14:0c:c6:
                    3f:06:ef:af:a5:5f:bd:e2:58:e7:70:8c:46:30:fd:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:35:37:00:30:B3:F3:F2:FD:07:AA:BE:70:D8:87:90:10:F7:89:CE
            X509v3 Authority Key Identifier:
                keyid:1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:a7:fb:4c:ba:3e:aa:5f:d0:37:b2:9f:b4:70:27:c4:a8:
         4f:a5:90:6a:28:ad:0e:df:f4:ff:05:00:fd:f3:56:3a:5a:52:
         f6:21:58:23:25:7e:48:8f:13:80:8a:0e:81:ae:02:cf:7d:bb:
         0f:53:f8:e4:1e:65:12:f5:65:f6:f3:bf:18:68:a4:13:27:25:
         f7:03:ea:c2:a7:2b:3e:03:6a:5c:bd:a7:be:c3:b4:f4:6a:77:
         ba:e9:52:a7:67:e7:dc:b3:9f:ed:55:c2:c5:ea:03:79:57:50:
         08:4f:ca:ad:34:4e:fa:aa:32:db:1b:e6:e3:b4:5e:39:91:7e:
         35:05:a8:75:b5:2b:6b:79:8f:ea:68:5d:54:31:66:96:10:33:
         88:5d:0a:56:8e:71:fe:23:7c:4b:4b:6a:ff:85:e1:29:4e:d0:
         d6:78:62:4e:79:3a:de:37:2b:df:44:19:d0:de:0e:98:c1:e8:
         a5:e3:10:a4:08:f4:b4:b9:1a:2c:8a:8f:67:42:1f:0d:ad:b6:
         8c:d7:bb:49:4f:0d:38:3f:88:b5:89:39:dc:d1:a1:77:67:e3:
         b0:10:2d:0c:13:3b:47:2d:2a:d4:78:7e:e0:81:b0:f5:a3:19:
         eb:4d:5c:55:a4:eb:98:0e:4a:99:37:0a:4b:c7:75:d3:be:42:
         f4:9f:d5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:29:34 2026 by rpki-client