Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File:                     HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier:          ka1prjhrZMY7WvzKyX7aMeTTrNBn1YY26cXReJMlTfw=
Subject key identifier:   13:A4:D5:8A:B9:F2:FD:49:0C:2F:26:7F:65:AE:6B:05:58:20:18:CF
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer:       /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial:       019EC36E8A57EFCB36EC21B9E2221AFCB35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number:          1968
Signing time:             Sun 14 Jun 2026 00:01:01 +0000
Manifest this update:     Sun 14 Jun 2026 00:01:01 +0000
Manifest next update:     Mon 15 Jun 2026 00:01:01 +0000
Files and hashes:         1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: bgTTkqlB3JSiCLBIliQtFISKozkS3qHB7/LzHx7Z8Ko=)
                          2: ewpu37-_zVa2ciUPDCprYExVMeE.roa (hash: J4xvO1VX5LQIo6ESckSvrBALshEalA/u4gMAKH5WVJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:8a:57:ef:cb:36:ec:21:b9:e2:22:1a:fc:b3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
        Validity
            Not Before: Jun 14 00:01:01 2026 GMT
            Not After : Jun 15 00:01:01 2026 GMT
        Subject: CN=13a4d58ab9f2fd490c2f267f65ae6b05582018cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:97:87:94:5f:8f:9d:a8:cc:96:22:58:6d:
                    d7:92:a4:87:08:5e:47:e3:bf:40:75:34:8f:dc:3f:
                    76:01:63:a5:10:80:7a:90:4f:67:80:1e:25:ee:76:
                    f6:2d:c5:7b:fa:a2:64:6d:26:86:37:3a:07:96:e1:
                    06:98:f8:86:64:e8:34:7e:c8:15:7d:59:b3:d8:a1:
                    0c:5a:7e:27:f5:0f:05:78:f5:66:1f:25:0d:fa:c5:
                    bf:39:ef:f0:40:7f:d8:7b:24:7c:ee:6f:a4:f3:67:
                    e0:49:fd:3a:5b:23:15:23:8d:57:e5:b7:a7:02:cc:
                    96:20:e4:5c:27:a8:f1:7b:9e:16:f0:d1:a4:c4:83:
                    8e:a8:df:e0:ff:22:ac:0e:cc:13:11:b1:fe:a9:21:
                    c8:6d:41:7f:f9:cc:8b:94:74:c3:64:51:ec:95:1e:
                    10:43:c6:6c:86:fd:c2:c9:9f:d3:ba:f6:66:6d:7e:
                    74:95:b2:45:88:29:70:48:53:40:4f:5e:7d:89:09:
                    fa:3d:8b:8c:ba:8b:79:09:4f:7e:fd:88:eb:e2:ea:
                    90:e7:c0:f7:65:52:62:a9:fd:dd:79:5c:d8:3d:ec:
                    04:4e:00:f5:17:7e:dd:4a:0c:af:5d:e6:82:0a:9d:
                    a7:be:b0:a4:6a:bd:46:f1:84:ab:6b:c4:a3:ad:16:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A4:D5:8A:B9:F2:FD:49:0C:2F:26:7F:65:AE:6B:05:58:20:18:CF
            X509v3 Authority Key Identifier:
                keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:3a:da:54:95:0f:00:a1:49:a0:35:3a:40:b7:a7:15:5b:
         7f:c0:79:b3:45:44:f1:ea:93:c0:9b:78:2b:c8:fd:f9:c6:ee:
         f7:b7:a0:1d:3e:14:1c:89:dd:28:b0:71:67:1f:88:bf:b9:fa:
         a5:2f:b3:da:72:07:4d:69:1c:cf:0c:1a:a7:ac:bf:a6:83:61:
         2d:b4:a9:8f:a8:da:96:0c:1b:4c:c0:70:46:cd:e7:ce:f6:ea:
         5b:df:26:40:b1:98:28:ab:a1:69:23:84:f9:ac:b1:44:c3:4e:
         79:c2:ec:fd:af:27:03:a7:fd:f0:a4:8b:af:97:3f:6f:12:2b:
         dc:b0:68:21:20:ad:7c:54:29:48:7c:35:5b:f8:75:6e:88:cb:
         e9:13:37:2e:a2:75:cb:82:c6:31:e2:a9:c3:da:fc:66:a4:5b:
         07:3b:5b:d4:e4:79:a1:d3:21:d9:eb:6d:24:31:a9:9f:40:9a:
         4b:9e:9e:7a:39:78:c5:df:9e:07:11:0e:86:58:a0:94:c1:10:
         a3:8d:be:fd:21:c4:72:fb:01:8f:0d:cd:5f:85:22:1d:db:bb:
         c2:42:e7:cc:78:a6:fa:bc:26:49:bf:71:2f:ec:15:50:cf:b8:
         5d:60:57:d3:3a:85:a4:75:00:ff:65:cd:fd:11:23:1b:cb:23:
         96:51:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:39:33 2026 by rpki-client