Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
File:                     HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json)
Hash identifier:          YE6XzLm9Glk7w0TRAa/kR9dPWUleYXIXb47wlvvZp/k=
Subject key identifier:   AE:40:B2:2B:F6:49:C8:2F:91:50:01:A4:5E:25:A7:47:98:CC:F3:E4
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Certificate issuer:       /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial:       019CABA1BDEDCCBBDAD0433932218AFA2C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
Manifest number:          155B
Signing time:             Sun 01 Mar 2026 23:00:29 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:29 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:29 +0000
Files and hashes:         1: 4cLeBIUzolxvixomGkjZcKiBte8.roa (hash: N/jmOnjqMHqyGA9wdQXttd0JDYddztlZ/3k1FyNVxQU=)
                          2: 746QFPJyT0Rq24L0EZYCq84Zm3c.roa (hash: AeIcxvfsKv+u4oYl0aaRx7pmRMFAkAPk+AYZdKgn4Uk=)
                          3: 8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa (hash: /DvGyvGrOeXCAY+suzbyYJaZlIPzhL5zJA/RiuGPNH0=)
                          4: CjPEg_1_YC8pnKYDbVJlTX6LL9M.roa (hash: zyX+uPItpF4LWUTzRFEpi3sBDAJ/wqUUHQFbPwYtfPk=)
                          5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: GZKVTtlVqk6Kqa9L3bWOW1jVzppcUc5VGb0mPXFWLOU=)
                          6: RMb8Tr40WGqktnRvQ9k7HNh5paw.roa (hash: QKnRrBqaLeAjI9PH/jR6hgz76ZPuClSBgTtF3GK+KSI=)
                          7: VOEqbHkGWWPCfYghmq_qCzJyCks.roa (hash: DW2E3Bv+Uu/QtgNYK+Kni5CDezUiIfsMXJ3wb8ndf9s=)
                          8: _SvrltKT2d95s4aJXfwotwRjxTs.roa (hash: x78Dq5GqOFiqHEpOdeEmGfWK4U05pqaKZhv6jrrmznc=)
                          9: f9jkPBByxWpkqaavwL8qGLxgr5Q.roa (hash: SPZe+PWRSrXFLEuZHJmbPAOdsKTcAWkqgps/fPGP+cE=)
                          10: pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa (hash: eCE3WajmYZ6Pqwt3eSv6POPsJiPisCy+Hx33j9Wd8VQ=)
                          11: r29J5i1S1Gu8Uj_A_Wz6NKuvkEs.roa (hash: 8e0tYCtiI0iNQahlyYDb4Q4Izluuf3hdqVeE3n5XNmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:bd:ed:cc:bb:da:d0:43:39:32:21:8a:fa:2c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
        Validity
            Not Before: Mar  1 23:00:29 2026 GMT
            Not After : Mar  2 23:00:29 2026 GMT
        Subject: CN=ae40b22bf649c82f915001a45e25a74798ccf3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:a0:1e:36:d7:9a:81:96:85:54:10:41:c1:
                    3c:6d:dd:f7:69:de:14:7d:a5:89:e4:d8:3e:e7:57:
                    bf:a6:5e:0b:f5:34:57:d7:26:5c:b9:4d:64:06:64:
                    e6:95:59:4a:06:c7:e5:48:19:66:79:81:3b:52:84:
                    cc:13:39:e8:31:8b:c5:a5:b7:49:a8:9e:d7:a9:d1:
                    f6:60:7c:a1:db:a7:aa:39:fc:46:b6:c5:ab:42:f3:
                    c7:20:d1:85:94:fc:a3:b0:03:e6:c0:a2:ec:d5:57:
                    44:e3:90:41:c9:8c:56:b9:9f:2a:c2:e4:e0:eb:b7:
                    f8:f2:35:16:f3:7b:e3:d7:65:cc:cb:5c:8f:06:20:
                    be:c9:22:59:61:89:3b:b0:30:c0:97:44:e9:02:7f:
                    4f:46:a9:41:6e:36:01:b2:85:0d:e6:cd:8b:1e:a5:
                    79:49:bb:8c:6e:ca:24:7a:be:60:a1:89:af:40:79:
                    77:2e:86:0d:f8:cf:2f:7d:c0:14:9e:15:4f:60:e5:
                    cb:a7:01:d9:c6:b1:ed:77:91:73:51:2d:a6:d2:77:
                    4f:ad:73:85:43:e1:d5:01:03:c9:46:76:c0:44:ca:
                    33:d7:09:38:3c:aa:bd:cb:86:6b:81:54:31:e5:c5:
                    fd:94:55:b0:81:50:1b:c0:2d:e6:dd:19:c0:fb:34:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:40:B2:2B:F6:49:C8:2F:91:50:01:A4:5E:25:A7:47:98:CC:F3:E4
            X509v3 Authority Key Identifier:
                keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:aa:8d:2b:6d:4d:7a:6a:97:7b:2f:6b:69:30:c6:9c:13:42:
         c4:4c:3f:f1:51:f7:28:36:01:cb:c8:02:47:6e:e8:f0:79:63:
         47:05:b1:b3:92:46:7c:3b:9c:19:b6:6a:fa:8d:c0:b0:9e:cd:
         42:12:93:e3:12:0b:1c:dd:58:d3:6a:67:ad:b0:dc:04:a9:9f:
         e9:5d:d1:0e:48:37:1b:1e:49:cc:68:1f:58:a8:43:86:7c:8a:
         cc:43:f6:fd:52:06:87:4c:18:6e:50:4f:2f:77:68:3b:a1:4b:
         ab:e7:64:f8:14:1b:13:14:32:6e:f6:89:d4:2d:50:86:c0:38:
         2d:33:00:fc:e8:cf:71:74:75:53:64:17:ce:a8:46:0b:02:b7:
         9d:64:0d:d1:fc:94:3b:90:96:b3:41:a8:61:e4:86:d7:2e:e6:
         36:73:92:43:69:b0:bb:07:2e:fa:e3:6e:4c:7d:10:8b:b6:a7:
         cd:54:83:21:07:d8:de:bb:b7:cf:a3:2e:02:5d:b7:71:d6:ee:
         8f:f0:bf:7d:83:fb:e6:42:af:b5:50:4d:69:18:a1:50:8b:9f:
         fb:a7:d5:4e:27:f7:06:3b:f6:78:2f:05:9b:75:3f:62:11:18:
         56:07:7b:b0:a2:bc:05:d1:b1:9e:2f:14:c4:bd:a9:03:7b:5a:
         89:0f:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:26 2026 by rpki-client