Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File:                     HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier:          RPZGrXMda6oV0gCVP79Rp4cLLdUKAlXKQ+/bx8fTgaA=
Subject key identifier:   A1:64:54:78:2C:2F:C4:80:EA:52:51:62:65:06:EA:58:96:B6:CE:97
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer:       /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial:       019D9AE30164C89C3A8BAE2893C86C613F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number:          1858
Signing time:             Fri 17 Apr 2026 10:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:01 +0000
Files and hashes:         1: 3GAPsMTYGBgdaWsuRskeq9GU52o.roa (hash: dhH4cdTldQtlsGjr6YNc5jjdZoo6HChKtzPMin0Yqxw=)
                          2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: 1yHXHkLWmKcUiL2zJAN5YXEx1PQaUpIAPVpx0r5u8bQ=)
                          3: _Zz8VQ7MI8grviAkY8_zaADFei8.roa (hash: LJuW+ggL7EdFwcEegbo8DIuepwgPOczDjMEaP85LPEY=)
                          4: a_V5J3Vi7G28PHlX5WI1gqWWPqQ.roa (hash: V7Qb7O3ayDy2ziDj46g/EQOgoAU5eN5xUch4BkUXkak=)
                          5: iWpXIGhiwH7fwofoLu2xcq86kzE.roa (hash: X0PfgdblFhAyZnopcIvEudnKhwK5PlO/KEXA8MHJFq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:01:64:c8:9c:3a:8b:ae:28:93:c8:6c:61:3f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
        Validity
            Not Before: Apr 17 10:01:01 2026 GMT
            Not After : Apr 18 10:01:01 2026 GMT
        Subject: CN=a16454782c2fc480ea5251626506ea5896b6ce97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:e8:b9:14:13:78:97:73:af:65:3f:79:e5:
                    57:0a:fa:02:73:ac:cd:f7:ad:53:53:0e:6e:d2:eb:
                    c8:0f:05:4f:8f:b2:7e:ea:b3:cb:b5:5b:5d:12:e3:
                    8c:d4:e0:d5:13:78:1b:d6:c5:c9:1b:ed:49:c4:2a:
                    ae:bb:84:46:4a:f1:88:58:6d:98:dc:97:9d:0f:1e:
                    f7:fd:e5:1d:36:29:88:ef:40:1b:ca:fc:ff:f5:db:
                    cf:74:36:e3:79:ff:e0:e7:3d:7e:f6:6f:e9:ff:eb:
                    a7:5e:b4:9a:ad:87:e2:c5:33:49:2a:b1:de:36:68:
                    ed:31:68:55:9e:8c:df:06:a5:b0:23:77:90:14:e3:
                    e0:34:3a:d7:4a:be:d1:42:02:f6:40:9f:94:23:38:
                    57:d4:78:93:fb:ad:06:b5:5d:55:34:ec:b1:29:3b:
                    3b:5c:17:fc:d8:59:a7:db:7b:08:dc:80:64:72:f0:
                    3b:c9:55:61:e1:5a:88:86:e9:fe:8d:f0:3f:52:6a:
                    4a:85:5a:a1:39:a2:3e:66:f6:eb:9d:67:a8:23:65:
                    62:d0:9c:90:41:27:52:5f:3e:4c:ee:35:54:19:44:
                    0a:75:67:9b:51:70:fb:77:f8:8a:64:c1:86:4c:86:
                    b7:81:fa:38:2d:9f:56:7f:ab:ab:b6:45:ec:8f:b2:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:64:54:78:2C:2F:C4:80:EA:52:51:62:65:06:EA:58:96:B6:CE:97
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:89:96:a8:a0:f2:36:51:81:8f:25:af:f5:4b:ca:fc:ce:e4:
         33:a0:cb:46:17:77:8f:b8:df:a1:33:17:3a:52:7b:b1:21:1a:
         fe:3e:55:1a:31:34:ee:5b:9e:01:87:ac:66:36:4a:50:66:f6:
         17:b4:6e:8c:b8:a7:c3:c6:03:2b:bb:22:c6:6d:9d:b5:a5:03:
         29:2e:25:cd:2a:68:e7:79:87:e0:c6:7e:f7:2f:20:c7:1a:e2:
         56:72:0b:8a:d9:5f:5a:25:61:d7:17:8b:8f:97:a9:2a:ed:95:
         e9:fe:5e:78:5a:b1:66:71:37:45:af:77:27:fd:ab:03:36:87:
         32:24:02:99:69:07:86:51:b3:80:08:1c:d3:65:7e:4c:e4:47:
         da:e0:d1:4c:52:de:8c:9a:6b:45:c5:80:a8:4a:83:0f:1b:8e:
         d0:eb:1c:d7:35:13:8a:74:44:ec:90:48:ee:1e:17:68:75:10:
         98:71:1e:ae:83:e7:8a:51:53:e2:f6:81:a9:14:a3:a5:c8:ae:
         cd:f5:a4:73:63:1b:69:56:ef:82:1f:52:86:2b:66:8c:92:80:
         6a:fc:7c:aa:38:41:3e:ea:03:e2:62:07:a0:be:2c:75:e5:17:
         96:9a:02:20:12:fa:55:51:60:3b:24:f0:d0:c7:aa:91:9f:e5:
         77:05:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:08 2026 by rpki-client