Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File:                     hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier:          1J3LHB00czlZT8m0XlzIRvIJgMkGfttKu5zdvXqaSSY=
Subject key identifier:   81:D3:5E:6C:80:4C:9B:58:09:F1:CD:94:71:3A:AC:B8:4F:D8:64:DB
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer:       /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial:       019EB87CA18A303B172712EABBDD274DE26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number:          05D1
Signing time:             Thu 11 Jun 2026 21:00:36 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:36 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:36 +0000
Files and hashes:         1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
                          2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: 4Rw4MFyCGzRgGWqB2NyjbSzMbIFTTcOdP4LYN3hdttw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:a1:8a:30:3b:17:27:12:ea:bb:dd:27:4d:e2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
        Validity
            Not Before: Jun 11 21:00:36 2026 GMT
            Not After : Jun 12 21:00:36 2026 GMT
        Subject: CN=81d35e6c804c9b5809f1cd94713aacb84fd864db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:54:31:aa:03:4d:4c:47:e4:a7:04:33:7f:
                    c9:2c:e7:49:a4:1c:51:25:19:be:4e:a2:ba:4b:1a:
                    0b:71:b1:73:49:4a:7c:3e:27:0c:69:31:ef:31:09:
                    f3:ed:1b:0e:5e:4b:6d:5a:b7:e8:72:45:44:82:b5:
                    0c:9d:79:f9:0f:c1:47:c7:27:28:ef:fa:ef:6a:99:
                    58:5f:db:cf:e5:f3:5d:4f:5d:2e:d3:e6:e1:97:65:
                    f4:47:c2:dd:2b:dd:95:fc:bc:c0:ce:ed:b1:26:f2:
                    f2:40:8f:a9:ca:86:cc:25:5e:0b:6d:2c:d9:7a:f4:
                    26:4c:d5:5a:18:61:cb:f8:6d:01:4c:bd:39:10:c0:
                    9a:ba:34:14:9b:12:d9:21:b6:41:fa:45:19:2f:7e:
                    0b:b5:dc:40:40:68:7e:95:37:25:93:d9:ec:45:97:
                    d5:24:95:b4:bd:70:6a:f1:a2:c5:c6:a4:ac:ec:4b:
                    4f:61:ed:1c:72:a0:a6:56:c9:2b:f5:0e:fd:32:1a:
                    77:83:da:a8:8a:2e:7d:43:d7:1f:a2:73:c6:15:4a:
                    2c:a0:6c:27:65:cd:4c:67:7d:29:47:71:2e:3a:42:
                    c7:79:c7:4d:fc:76:8a:6d:a0:90:4c:26:cd:9b:b2:
                    75:d9:3d:e9:f5:00:63:66:23:36:6e:54:b1:a8:94:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:5E:6C:80:4C:9B:58:09:F1:CD:94:71:3A:AC:B8:4F:D8:64:DB
            X509v3 Authority Key Identifier:
                keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:77:7b:1a:a3:62:29:42:7c:8f:4e:24:56:5a:f9:66:bd:2a:
         28:81:14:5f:ca:19:c0:79:09:1e:cf:38:4f:a6:f8:c2:a4:82:
         d6:9b:0d:ab:f2:7e:35:2e:b5:a6:8e:e6:f7:9e:e3:df:40:05:
         cd:cc:a5:77:41:b4:27:4e:c2:de:e4:d4:df:e1:28:57:c3:fc:
         58:21:4e:de:e8:de:e0:84:4e:00:4a:84:b6:e7:8c:d3:db:94:
         49:37:d6:04:43:8e:84:aa:54:4b:d8:50:c1:fc:04:9e:6a:73:
         fb:b8:07:5a:9e:3a:ba:31:c5:2a:ed:0d:75:cb:81:ca:9b:7c:
         50:46:04:4a:9a:1d:75:a5:12:48:2f:dd:d6:f0:19:32:b3:aa:
         96:18:de:a6:9f:a4:9d:3c:e4:2e:06:cf:5f:63:2b:47:f7:89:
         5b:cb:49:18:a6:6d:fe:17:4f:00:4e:78:02:ee:db:a0:a1:77:
         65:97:8d:98:ce:a4:48:67:6c:9e:27:d4:df:d0:93:da:1f:67:
         8b:73:8f:99:9e:15:4d:be:95:44:0a:7c:6b:fe:4f:b3:ef:60:
         39:43:ce:e3:67:df:d7:cd:d7:d1:29:4f:fe:7a:09:11:a9:d7:
         11:fe:01:2c:68:85:0a:1c:af:d2:59:66:5e:4f:5d:c8:c1:1a:
         fd:fa:f8:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fKGKMDsXJxLqu90nTeJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw
NmJlOTkwHhcNMjYwNjExMjEwMDM2WhcNMjYwNjEyMjEwMDM2WjAzMTEwLwYDVQQD
Eyg4MWQzNWU2YzgwNGM5YjU4MDlmMWNkOTQ3MTNhYWNiODRmZDg2NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueNUMaoDTUxH5KcEM3/JLOdJpBxR
JRm+TqK6SxoLcbFzSUp8PicMaTHvMQnz7RsOXkttWrfockVEgrUMnXn5D8FHxyco
7/rvaplYX9vP5fNdT10u0+bhl2X0R8LdK92V/LzAzu2xJvLyQI+pyobMJV4LbSzZ
evQmTNVaGGHL+G0BTL05EMCaujQUmxLZIbZB+kUZL34LtdxAQGh+lTclk9nsRZfV
JJW0vXBq8aLFxqSs7EtPYe0ccqCmVskr9Q79Mhp3g9qoii59Q9cfonPGFUosoGwn
Zc1MZ30pR3EuOkLHecdN/HaKbaCQTCbNm7J12T3p9QBjZiM2blSxqJQSsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHTXmyATJtYCfHNlHE6rLhP2GTbMB8GA1UdIwQY
MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt
ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm
LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7Xd7GqNi
KUJ8j04kVlr5Zr0qKIEUX8oZwHkJHs84T6b4wqSC1psNq/J+NS61po7m957j30AF
zcyld0G0J07C3uTU3+EoV8P8WCFO3uje4IROAEqEtueM09uUSTfWBEOOhKpUS9hQ
wfwEnmpz+7gHWp46ujHFKu0NdcuBypt8UEYESpoddaUSSC/d1vAZMrOqlhjepp+k
nTzkLgbPX2MrR/eJW8tJGKZt/hdPAE54Au7boKF3ZZeNmM6kSGdsnifU39CT2h9n
i3OPmZ4VTb6VRAp8a/5Ps+9gOUPO42ff183X0SlP/noJEanXEf4BLGiFChyv0llm
Xk9dyMEa/fr42Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:31 2026 by rpki-client