Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File:                     HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier:          L7UURZtRf23rsE5InPeUip7CybUKx0lOgNOUBY12qQE=
Subject key identifier:   56:BF:C4:EF:72:42:D0:04:C0:0A:57:CE:50:C0:80:51:51:BD:31:23
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer:       /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial:       019D9AABA579BADE2DBDEB96B436708A898C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number:          1607
Signing time:             Fri 17 Apr 2026 09:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:33 +0000
Files and hashes:         1: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (hash: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c=)
                          2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: it/Q9UMuEihc6nCmgt/caKHUWHtn0i7LbSi3InWbHjE=)
                          3: lJxYVzr-KS-fYsC57OKvflP8A4c.roa (hash: 4pvbPMsGzdgVlC585Dyoz1kyokZkz2DdP27jl7Yydb4=)
                          4: r-1SzrZjoEXcWaVFk74aF23TjJ0.roa (hash: sRjFv0mWTbb1HZj7c7GM888be2VPScRA9imdmTy3Guc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:a5:79:ba:de:2d:bd:eb:96:b4:36:70:8a:89:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
        Validity
            Not Before: Apr 17 09:00:33 2026 GMT
            Not After : Apr 18 09:00:33 2026 GMT
        Subject: CN=56bfc4ef7242d004c00a57ce50c0805151bd3123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:09:a5:df:f4:5b:27:1e:27:65:c7:02:c7:
                    a7:7c:33:ec:b1:a3:ee:71:17:89:8d:08:bd:76:44:
                    ac:ee:22:41:b8:7f:f9:9d:7f:c4:51:15:2b:b8:0e:
                    1c:3b:34:8e:12:55:eb:5f:88:c1:7e:c1:82:5e:84:
                    15:5d:df:a9:ae:b9:42:c0:bb:ad:66:60:c5:31:67:
                    b3:7f:17:a1:0c:d4:5a:fa:ba:99:a3:46:3c:77:86:
                    3e:9f:0f:0b:11:1b:e5:7a:1e:41:b3:27:15:87:1d:
                    c7:f9:5f:a2:b0:87:4e:d3:bb:47:80:0b:66:39:71:
                    f5:ff:3b:2f:d7:68:22:e8:8a:75:02:a6:7b:e9:e1:
                    66:be:44:3a:b9:f2:84:4c:a4:3c:5a:b2:c8:21:ca:
                    8e:5d:2b:7f:fe:72:8c:4f:1d:51:06:3a:cf:52:2d:
                    16:cb:b8:d5:b2:1f:5b:38:62:84:08:e5:f3:d4:01:
                    6a:9a:28:6f:9d:ff:e1:9b:80:c8:00:a5:8d:9a:c6:
                    9d:3c:23:e5:bc:08:5f:da:2e:8c:f4:ef:a4:c1:7a:
                    58:82:c7:50:40:fa:f5:1f:4c:08:fe:59:c9:9f:f5:
                    59:91:8d:8a:ce:c4:0d:4d:2c:f3:50:6b:dd:9f:15:
                    8d:a4:77:b2:02:a8:ee:ab:f5:78:d9:94:32:4d:6c:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BF:C4:EF:72:42:D0:04:C0:0A:57:CE:50:C0:80:51:51:BD:31:23
            X509v3 Authority Key Identifier:
                keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b4:b7:37:47:e0:86:75:3a:4b:8e:58:0a:08:06:8b:c9:2e:
         57:e8:7d:92:4f:db:8e:f4:07:a1:9e:10:4d:c5:1d:6d:53:22:
         ca:56:73:b0:44:a7:ba:58:6c:0c:b0:ba:b9:54:56:c8:fb:17:
         c7:02:c0:b7:ae:9f:51:76:2c:7d:a6:a8:3f:50:70:9f:1f:32:
         36:24:a2:89:46:d7:28:8d:fa:e6:fd:d9:e2:1a:9a:40:78:e1:
         7e:00:4b:64:ee:a0:00:b8:22:fa:f8:73:4e:56:69:0f:11:2a:
         26:67:29:ee:b4:de:54:30:1f:42:c7:f8:fb:ab:52:5e:e1:b0:
         e9:c6:bc:99:5d:ad:a1:99:b8:01:84:a4:37:1e:20:61:e9:9a:
         63:62:62:c1:6c:b3:3a:ac:c8:21:d6:53:13:0a:b1:df:b8:f0:
         80:d6:39:db:17:17:db:38:72:16:7a:49:19:43:d7:38:a5:bc:
         a1:4c:51:dd:ab:7b:00:d0:be:0b:b7:ab:9c:f7:16:d7:16:ed:
         70:15:4e:c1:43:0a:9a:43:6f:58:ce:fe:e9:59:20:76:96:8e:
         48:e9:63:bf:f5:b0:63:82:a1:7a:a2:2c:2e:c1:82:1e:49:a8:
         4d:f5:66:f6:6f:e8:41:94:24:eb:27:62:0f:9a:e1:0b:a4:5d:
         67:7f:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:00 2026 by rpki-client