Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File:                     HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier:          yjNbC38hYcB/F2nNR8rDIdXgeZByHsr9Yx5jmKX3A+U=
Subject key identifier:   40:98:CF:58:E1:3F:69:18:06:E0:FA:45:E8:6D:29:71:1E:DD:1C:3E
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer:       /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial:       019F189EB13F3BC7FD5966BAE98E6CE76CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number:          191A
Signing time:             Tue 30 Jun 2026 13:01:20 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:20 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:20 +0000
Files and hashes:         1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: VSDgGRDuP6kMWjEKdpFnVj4u++o2oE9WylaTZ62eOJc=)
                          2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
                          3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:b1:3f:3b:c7:fd:59:66:ba:e9:8e:6c:e7:6c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
        Validity
            Not Before: Jun 30 13:01:20 2026 GMT
            Not After : Jul  1 13:01:20 2026 GMT
        Subject: CN=4098cf58e13f691806e0fa45e86d29711edd1c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:11:35:02:89:0c:4b:a0:57:8d:3e:fa:2f:
                    5f:02:3d:18:fe:72:26:11:5d:6a:e3:a2:9d:88:22:
                    4f:c1:6d:e8:1d:94:f1:57:9c:e0:a3:6e:c1:96:fe:
                    fb:16:f0:bd:0e:c8:a0:f8:a1:26:9c:b9:62:16:06:
                    f0:82:8f:d7:6c:4a:c7:19:e5:80:9f:41:85:47:b5:
                    0e:dd:0f:8d:54:ab:e5:e0:71:94:51:31:d4:a4:31:
                    bb:fd:64:cf:a7:ba:41:ca:04:d7:e6:09:62:83:df:
                    59:1d:1f:6c:4b:85:9a:e0:57:b6:f6:1d:79:3c:63:
                    de:61:e3:13:c5:1a:80:dd:de:3e:e0:b2:cd:ee:77:
                    38:26:b8:22:e8:e1:04:2a:78:0e:fc:cc:d8:4e:c8:
                    fb:a7:c8:a4:d1:da:52:82:52:f5:87:dc:43:8a:dc:
                    8e:5f:d1:74:c1:db:58:11:33:3c:46:8a:35:f1:f2:
                    f9:7a:e0:90:bd:a6:89:a9:03:d6:10:61:2c:57:d6:
                    f8:e0:b1:be:cb:ed:ad:ea:72:4f:e8:6c:3b:0e:a2:
                    4f:c3:64:0a:c2:c5:28:e9:a6:0b:08:97:3f:d8:bf:
                    72:55:8a:0e:f8:70:f9:05:6f:1a:42:97:5d:1a:88:
                    ea:47:c8:1f:0d:1b:48:cf:fc:76:d1:18:32:bd:66:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:98:CF:58:E1:3F:69:18:06:E0:FA:45:E8:6D:29:71:1E:DD:1C:3E
            X509v3 Authority Key Identifier:
                keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7f:47:40:66:37:85:e4:33:69:4f:76:6a:7c:0b:a0:fb:4d:
         f2:a9:57:31:be:ba:9e:28:60:a8:18:ed:62:19:82:f0:99:16:
         7b:44:39:2f:7f:33:34:81:a1:e4:25:d1:f6:27:cc:0a:04:f2:
         b6:2e:de:88:50:39:d4:6c:0d:0d:75:50:96:76:2c:11:f8:32:
         e7:fb:bd:e8:f3:a7:17:8c:d6:e2:da:ed:c1:dd:c9:3f:6a:82:
         18:fa:ec:a5:e1:91:fe:b7:e1:15:d2:61:84:19:23:70:86:24:
         24:53:c7:b1:d0:14:7c:d1:ae:76:55:a9:63:f1:f6:01:ea:1f:
         cb:6b:08:7a:6d:a4:48:43:02:50:55:cc:71:0f:48:65:3a:6e:
         95:f9:9d:f3:75:76:0a:2d:1a:71:09:c0:60:ba:78:20:ee:17:
         0a:80:a7:4b:d9:b2:cc:f6:78:bc:68:86:ff:ff:9a:b7:b6:ac:
         0c:8b:fc:8f:11:73:41:52:fe:35:b3:f1:5d:f1:8d:0d:9c:fa:
         1d:14:34:f4:21:88:d2:6e:8f:b0:4e:1c:fd:90:8f:8c:f2:e9:
         38:f4:a9:e3:9e:a5:37:c2:4f:55:5a:86:e8:0b:35:e4:72:a1:
         80:20:8f:df:ba:3b:ff:38:8f:31:38:33:d6:2f:c9:f0:a3:b5:
         e6:7b:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:43 2026 by rpki-client