Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File:                     hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier:          Dstm61hkBpvB/lL9wMZ1xsM3KmNuSa6xAmjybScz8tg=
Subject key identifier:   D8:FC:8C:7D:15:C8:F5:2C:F4:22:F6:3D:BE:B4:1B:49:E9:27:2F:09
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer:       /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial:       019EC25BF79DBB189B1AC32681E98D5D603F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number:          1625
Signing time:             Sat 13 Jun 2026 19:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:07 +0000
Files and hashes:         1: 5yDhnFwC0iVn5DPcpR3QmCvoVv0.roa (hash: ZjrAq68K+mD03JUMhXQCJJAVWYAycmpN3p0OOOXApGI=)
                          2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: pSFtCBiBT5lRUDHKOU3V02GklGjUDzzFdXojvwPxBho=)
                          3: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (hash: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:f7:9d:bb:18:9b:1a:c3:26:81:e9:8d:5d:60:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
        Validity
            Not Before: Jun 13 19:01:07 2026 GMT
            Not After : Jun 14 19:01:07 2026 GMT
        Subject: CN=d8fc8c7d15c8f52cf422f63dbeb41b49e9272f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:48:da:60:6f:0a:e1:33:d7:ca:10:ab:4f:
                    b9:f6:35:17:e6:d6:64:2e:56:19:95:aa:f0:3d:33:
                    24:da:56:73:28:c3:05:eb:23:c8:da:3a:43:ee:92:
                    a5:5a:6e:91:f7:85:39:d3:f2:63:8e:2e:ae:4c:7d:
                    69:b5:bf:41:10:26:98:06:a2:58:dc:1a:6d:85:5a:
                    bc:a2:12:0c:7f:79:1c:cf:fb:71:ec:b8:6c:14:7a:
                    45:7a:ee:87:a7:9e:7b:e5:ee:72:9c:85:1a:28:fa:
                    c7:08:88:55:97:54:96:f2:42:56:ea:90:c5:aa:6d:
                    63:ae:cb:17:4e:da:ab:b4:0c:a8:e9:b7:92:59:f6:
                    40:0d:1c:50:fe:59:8e:49:7e:9b:bd:f9:cd:60:6a:
                    cf:38:37:68:b7:ec:30:14:fa:9c:ec:95:2a:e0:be:
                    c6:76:4a:75:7c:50:69:e9:c9:c5:0f:de:06:ed:d5:
                    06:a1:43:b8:79:22:18:da:47:6d:a9:e7:af:5c:85:
                    d5:14:12:2c:b2:32:a2:c4:5d:11:f2:7c:74:1a:6d:
                    55:b1:64:07:48:48:16:0c:9e:ad:ed:36:b5:35:02:
                    d4:59:c3:fc:aa:7b:53:b9:7d:f6:df:a0:3c:c7:32:
                    24:e2:7b:17:6e:d1:82:f2:3b:84:75:9d:13:65:b4:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FC:8C:7D:15:C8:F5:2C:F4:22:F6:3D:BE:B4:1B:49:E9:27:2F:09
            X509v3 Authority Key Identifier:
                keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d1:03:a3:71:04:53:d5:3f:23:a2:9e:de:1d:40:e4:3c:d1:
         42:68:a4:fb:13:54:fa:ca:57:20:1c:08:e2:c5:b5:6c:b6:2e:
         62:b5:86:8b:7b:b2:5b:0c:b4:6f:a1:99:12:07:0e:ea:77:af:
         77:11:7d:f4:f5:1e:79:9a:36:0f:e8:e4:dc:8f:ff:10:ec:3c:
         ef:75:46:f4:76:26:e3:ee:a8:28:8b:61:75:81:8f:da:0d:3a:
         83:6f:9d:26:19:a6:09:df:91:ae:0a:d0:63:59:30:72:e8:91:
         a8:a8:75:43:23:45:64:f5:e5:a8:16:91:6d:4d:10:42:bf:f3:
         64:b7:78:40:27:62:b3:8f:d0:79:9f:96:f5:8c:2c:b2:17:42:
         07:5f:2d:75:69:33:68:9e:d4:51:52:a2:1d:4c:7a:b0:8f:a7:
         9d:05:7c:64:d1:c2:1c:a5:e2:58:ab:e9:95:28:8c:47:c2:83:
         db:c8:e1:4e:e2:79:b2:20:a6:53:ea:6e:59:87:1c:10:b8:fd:
         97:f1:e8:9e:d3:8e:4c:46:48:bb:87:ec:90:87:70:d8:67:30:
         ba:24:2f:6f:20:8b:dc:f0:c2:20:60:16:44:ad:c5:9b:89:bb:
         fb:37:dc:71:df:9a:e4:18:4d:6b:e5:bb:0c:ca:3a:b7:e6:cb:
         21:d0:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:27 2026 by rpki-client