Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File:                     H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier:          UqcmLFoZqlLg1vppFzV0xoZfUtMJZkv1grov8R6IjO8=
Subject key identifier:   F6:4B:42:E2:93:F2:55:98:93:5A:EE:DA:67:9D:39:15:8B:4A:90:53
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer:       /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial:       019CAAFD198F843A2F9CBA8978B9F0BCE0B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number:          070D
Signing time:             Sun 01 Mar 2026 20:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:39 +0000
Files and hashes:         1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: 53QDEtThQi4rAE+oAzpYZLYs/NtfKfbjM7umy4KSrrw=)
                          2: k6iypoa6LHwlwb2qIMXLLBYL54M.roa (hash: mfnNfPCGzWqdDV2YD4QQcqHG+UEJW0CMtavWwVN5thM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:19:8f:84:3a:2f:9c:ba:89:78:b9:f0:bc:e0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
        Validity
            Not Before: Mar  1 20:00:39 2026 GMT
            Not After : Mar  2 20:00:39 2026 GMT
        Subject: CN=f64b42e293f25598935aeeda679d39158b4a9053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:60:90:58:c6:4d:e3:59:85:73:6d:6f:bb:
                    50:07:73:2a:7a:ff:dc:cb:0d:76:67:9c:da:1f:7d:
                    1e:4c:d6:6e:8a:20:82:33:8c:a5:63:66:89:0b:7c:
                    af:92:e1:4f:e6:96:f7:6d:f1:b7:5c:8f:e6:fc:65:
                    70:59:01:5c:bf:d9:e1:ac:bc:bd:fe:3c:ed:26:dd:
                    0d:80:d8:e7:93:ad:28:f8:d2:60:f4:44:79:3c:14:
                    6d:3d:93:cc:27:5c:8a:bc:20:4b:25:95:1e:ef:87:
                    35:99:9c:28:97:74:b0:da:c9:62:68:0f:ef:e3:b1:
                    8d:b9:8f:47:6e:f8:d4:2d:fe:c2:ac:3f:1b:b1:0f:
                    e7:63:e3:46:bf:cd:01:be:34:84:ba:c3:77:05:8d:
                    ea:4b:0e:4f:6d:9a:87:5c:f1:97:c8:55:10:e1:8e:
                    4d:c2:7e:69:ec:34:7f:41:63:86:a9:e4:b6:23:ec:
                    c9:d4:9a:80:96:ab:7c:a1:ae:c2:74:8a:04:66:6b:
                    a8:08:e1:93:a0:fa:e5:8e:b4:d5:dd:48:b9:aa:7a:
                    0e:ed:5b:ff:01:e4:a1:44:e4:9f:d7:1c:8a:92:0b:
                    32:31:5f:b8:33:cb:5f:82:51:20:7b:c2:5e:f2:3b:
                    13:98:f1:dc:b2:3b:f6:85:8b:7f:44:40:6d:35:10:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4B:42:E2:93:F2:55:98:93:5A:EE:DA:67:9D:39:15:8B:4A:90:53
            X509v3 Authority Key Identifier:
                keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:dd:d8:ce:d0:ad:9d:d1:b4:fd:7a:b5:ae:ef:bd:90:8f:1a:
         80:87:c8:d8:4b:32:0a:96:f1:ea:b7:29:a8:34:d9:ef:f8:15:
         c2:6a:85:8e:85:32:f7:71:6e:f3:99:78:15:0a:47:14:ce:e0:
         fd:6b:fb:ea:5b:fb:c9:47:39:2a:0a:5c:f4:43:aa:d1:46:64:
         d9:ed:cb:a2:0d:65:61:50:a4:10:85:7c:20:5d:ac:1b:4e:6f:
         65:19:69:3c:fc:48:29:c2:af:81:f5:e1:de:34:71:ab:31:2a:
         a8:3e:0d:ea:f3:98:b5:19:51:d0:ad:4a:db:15:9e:5c:63:12:
         d6:2d:ab:77:62:6c:f9:d5:4e:8b:fd:22:1d:5c:f1:1e:2e:fa:
         f6:94:19:41:2a:bb:fa:86:20:70:b5:d5:ce:7a:3a:f2:a0:9f:
         cc:5e:0f:ce:65:52:44:b6:6f:59:2d:87:1a:69:4f:8e:53:40:
         d0:6d:d8:71:ef:95:80:51:92:6c:0f:80:a4:af:a5:d4:26:93:
         d4:ba:4d:1c:3b:ec:38:7c:79:f1:a6:e1:98:ed:94:4e:1b:93:
         cd:31:59:42:93:48:cf:88:2c:b2:da:67:ba:62:75:5f:30:2c:
         e4:02:78:b4:70:cd:77:93:4e:39:06:a1:68:63:02:69:42:26:
         f9:dd:a3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:08 2026 by rpki-client