Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File:                     H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier:          poMTS07h/Kl4HKiMwe+xpvVvWhs1Kcdfkk8Q1NvRRDY=
Subject key identifier:   D0:4A:36:17:9E:B1:C3:DD:45:44:B4:30:B8:03:48:73:70:7F:7A:CB
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer:       /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial:       019D98868A2C6737205E59F4E1B4E7BFC8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number:          0788
Signing time:             Thu 16 Apr 2026 23:00:46 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:46 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:46 +0000
Files and hashes:         1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: u9lpM67XjsDWqhAhBLT9fvU4KFAY274GVI47lhr+QOk=)
                          2: k6iypoa6LHwlwb2qIMXLLBYL54M.roa (hash: mfnNfPCGzWqdDV2YD4QQcqHG+UEJW0CMtavWwVN5thM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:8a:2c:67:37:20:5e:59:f4:e1:b4:e7:bf:c8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
        Validity
            Not Before: Apr 16 23:00:46 2026 GMT
            Not After : Apr 17 23:00:46 2026 GMT
        Subject: CN=d04a36179eb1c3dd4544b430b8034873707f7acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f2:fd:75:fd:e7:14:ed:5a:22:08:75:97:2a:
                    25:c8:ac:b4:21:7a:64:f7:c7:9f:33:ee:63:04:ef:
                    01:22:ee:ad:5c:65:a0:e2:49:16:a2:06:bf:68:e4:
                    19:02:6f:47:6e:c0:35:f9:f0:dd:03:a5:30:e7:9f:
                    06:b9:42:33:9f:cf:9c:bd:c7:5a:a2:c6:af:41:dd:
                    29:59:88:ce:7e:90:df:4d:08:32:8b:f7:79:a1:d9:
                    12:84:59:2e:73:a7:ec:be:cb:94:0d:6e:2e:8a:5d:
                    05:ed:1c:e8:55:27:ee:91:d0:8b:c6:e9:68:b3:0a:
                    30:a4:f1:45:3b:75:6a:f0:65:0e:cb:ec:61:6b:20:
                    80:b4:c6:c8:21:0d:f6:d5:1d:13:7b:f7:3a:ca:68:
                    50:01:c7:e7:bb:c3:52:7a:24:17:62:4e:5c:e6:3d:
                    a2:da:55:6d:38:99:b8:55:f0:d5:02:5b:a7:73:1d:
                    91:1a:9c:dd:da:b8:54:e8:f2:d9:ad:ed:76:56:3f:
                    47:b2:91:81:f8:a4:ed:92:f5:36:e7:01:57:29:7e:
                    16:12:d0:c6:76:5e:8e:43:a0:d3:90:00:89:bd:63:
                    06:15:cf:d3:48:07:86:b8:51:44:66:fe:05:dd:a1:
                    d4:1d:ad:57:46:d9:dd:40:f4:af:34:f0:85:34:d0:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4A:36:17:9E:B1:C3:DD:45:44:B4:30:B8:03:48:73:70:7F:7A:CB
            X509v3 Authority Key Identifier:
                keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:c8:99:27:d0:f1:fc:6a:45:cc:3b:ca:6b:09:e2:29:7f:
         a2:9f:d9:52:bd:13:c6:34:71:ba:5e:3c:78:e5:63:ec:28:27:
         b6:fe:f4:65:3b:d4:07:6c:6a:53:af:e4:6c:03:23:c8:fb:b0:
         2d:92:bc:7c:07:1e:c9:bb:fe:ab:5f:7b:a0:de:70:c9:f8:6d:
         c2:c1:c8:6e:43:dd:e6:64:0b:08:c8:8d:b3:4f:3c:f4:2d:19:
         61:1f:69:fb:aa:cf:df:41:f3:b0:a4:8c:78:15:7e:20:b5:3a:
         90:a0:b7:08:34:8c:1e:d5:6d:74:0b:77:ff:4b:0e:9d:ba:65:
         d3:9d:e5:2d:bb:6d:59:75:c8:9a:76:e7:35:cd:66:50:36:b1:
         f6:2a:e8:0b:08:00:1f:ff:3c:c0:0a:d7:12:07:04:93:88:4b:
         19:73:e6:2b:be:af:dc:d5:76:2a:41:66:49:ae:d2:c4:95:14:
         43:b3:da:f6:50:21:1c:6a:c2:e3:a5:ed:2a:b0:e4:79:ca:e1:
         e8:40:e0:ec:30:6a:df:03:da:99:fa:2f:10:47:9f:78:b2:7b:
         56:c3:18:a7:19:1a:d0:d5:1d:72:45:41:de:e2:fe:8a:0c:be:
         5c:31:0c:29:32:05:d9:8c:07:42:96:c8:3e:ae:88:db:b5:a8:
         47:49:b4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:04 2026 by rpki-client