Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File:                     hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier:          6KXHwaY6IJHCbuxqwEiVNDOnNHHFK3onSjQToIPu1lQ=
Subject key identifier:   FF:64:EB:71:ED:E3:81:67:28:A4:F7:F1:08:DB:0C:9E:54:ED:07:E6
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer:       /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial:       019FA18447C2FF083D5F8A50B753CFC7ADF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number:          1403
Signing time:             Mon 27 Jul 2026 03:00:28 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:28 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:28 +0000
Files and hashes:         1: Kj0HsXicjlUn-679OFq2n6YXriA.roa (hash: oCViwBHC3VWx+KMwr83UJNJcJLGK68aAWyXoMhEGcUQ=)
                          2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: ZqozGbLVDNllQgt64fW6HHEdg/R6YyUZmyyAmnAlhic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:47:c2:ff:08:3d:5f:8a:50:b7:53:cf:c7:ad:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
        Validity
            Not Before: Jul 27 03:00:28 2026 GMT
            Not After : Jul 28 03:00:28 2026 GMT
        Subject: CN=ff64eb71ede3816728a4f7f108db0c9e54ed07e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:71:ea:7b:bc:f9:c2:42:39:42:e9:9f:e0:
                    dd:2c:e3:5b:23:e5:5f:01:49:f0:22:29:13:32:e4:
                    76:19:b6:35:e4:74:da:04:67:bf:07:7c:9c:da:a9:
                    27:c7:c1:63:40:eb:25:07:c0:7c:54:74:b9:57:ec:
                    5a:79:3c:60:2b:e0:0d:26:e4:cc:91:81:a1:c4:f3:
                    72:8a:9d:3b:69:44:fa:ce:6e:0c:a9:d0:f3:73:61:
                    a0:32:48:ec:45:9f:b0:02:dd:cb:d9:ab:21:b1:42:
                    af:8f:c1:84:06:d6:5b:e5:63:97:b3:36:98:27:20:
                    3a:5e:85:f5:f6:fd:df:40:bb:97:f6:f6:42:22:f7:
                    d1:30:17:4d:20:f1:da:90:73:38:40:15:d7:62:8c:
                    98:02:28:82:b3:74:eb:a4:74:b0:56:6e:b7:c1:54:
                    b2:d1:78:fd:4d:0b:6b:ce:51:4d:0f:f3:c0:11:e9:
                    6e:35:b2:27:d7:cd:c8:d8:50:ce:ca:b8:99:cb:18:
                    02:e8:87:8c:5f:ec:fd:3e:89:a8:e7:c1:14:98:53:
                    fb:d4:00:77:c5:57:37:11:11:09:b7:37:77:1c:e1:
                    6f:f9:a3:dd:d0:46:37:5f:f6:b3:77:ad:8d:fd:d0:
                    ee:eb:09:51:4d:8f:62:51:cd:cd:1e:0d:80:a8:2c:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:64:EB:71:ED:E3:81:67:28:A4:F7:F1:08:DB:0C:9E:54:ED:07:E6
            X509v3 Authority Key Identifier:
                keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0a:79:76:db:bb:d4:c5:0a:19:67:d5:55:33:3b:e8:b8:76:
         a8:f9:2d:a2:8c:3e:d8:e0:ee:c5:69:0c:02:ae:ec:60:89:3e:
         8e:e9:5b:c9:c2:1f:3f:df:ce:3b:42:53:c5:c7:cc:ab:cf:41:
         4c:a1:d5:d6:9f:b8:cd:7a:81:c4:4a:5a:4c:18:83:03:cb:b2:
         36:4b:26:0a:eb:99:ae:0d:6a:ab:a5:af:ff:d8:c2:e9:b7:d9:
         23:8d:9c:ba:fb:0c:c8:8d:1e:35:2e:15:e5:a9:45:75:d0:a5:
         8b:04:37:74:dc:9d:41:d9:87:9c:6e:95:7d:a2:78:5a:ae:26:
         61:a9:aa:23:68:fe:b1:e9:1a:7f:fd:92:9b:89:13:e3:fb:23:
         6e:c7:40:f1:33:4c:8b:c6:c9:84:a4:51:6e:13:7e:4b:a6:32:
         ae:e4:a8:d3:51:0e:7e:bf:c2:6f:57:b6:77:2e:ea:93:03:7b:
         f9:05:c7:49:23:d9:62:a4:7c:08:96:d8:c0:c7:1a:5b:7b:00:
         8a:bc:f8:5b:b9:b2:0b:55:d1:bd:68:21:b8:aa:fd:c8:3b:40:
         ad:71:6d:93:a1:a3:25:1e:0d:51:92:79:c8:71:d6:67:cc:eb:
         e5:66:b9:ff:10:70:4b:42:ef:d8:52:26:79:df:66:78:3a:63:
         85:c4:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:20 2026 by rpki-client