Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File:                     hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier:          61+18qALUlYO4jKyFEklodsAyneBBSzeabBcqJhvtIs=
Subject key identifier:   71:E2:6E:D5:5A:7E:C0:5B:4E:05:D2:B3:E6:9B:A7:90:BE:D0:B0:39
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer:       /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial:       019EBE47F02AF8891C2397126E4EDAA2F4B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number:          157D
Signing time:             Sat 13 Jun 2026 00:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:46 +0000
Files and hashes:         1: DzxlgYolYmYrOw6dLtHYtuvzTW4.roa (hash: snxX9+Dmsgw6Tf7GTwWvTcPR+yOEzI9Wj8zN8W2eCBE=)
                          2: OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa (hash: OAPut5klxvnwxvXekYncRq9ZTcquwuK9N/4Pis2RPnI=)
                          3: SU9l9n5tTaHoiwwtJtq99KggAas.roa (hash: 7Jnaa+yaZEgfZ0pJI5V9JYe56J0Eyz54F3utpVXqqBs=)
                          4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: CBSvA5unxJfyiMtF4t/ks8iab4G6BVzlD5irC8pp4cA=)
                          5: y18u9oMcyFjkgl_LFXqULX8NytA.roa (hash: B5vX5oLv2822UN69f2wG7jEHSe1FzIcV1zpP+Ish8P8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:f0:2a:f8:89:1c:23:97:12:6e:4e:da:a2:f4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
        Validity
            Not Before: Jun 13 00:00:46 2026 GMT
            Not After : Jun 14 00:00:46 2026 GMT
        Subject: CN=71e26ed55a7ec05b4e05d2b3e69ba790bed0b039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:43:dc:ed:8e:19:3f:3c:e4:65:ff:65:6d:
                    51:c3:e3:fb:80:19:6e:0d:46:5e:57:b4:2b:01:ea:
                    e6:db:02:b9:07:32:fb:c8:a0:44:35:75:c3:17:3c:
                    aa:b4:8a:04:5d:fe:27:87:83:6e:47:d1:28:24:54:
                    bf:50:f2:56:d4:cf:0a:5f:3d:7b:bf:b8:d6:b6:92:
                    e2:6b:78:95:97:ae:88:c1:96:f6:36:29:38:dc:18:
                    d4:ce:29:4e:4e:2b:3c:af:38:44:7f:94:70:ff:08:
                    47:2b:bd:d4:03:b6:37:83:6a:da:39:9b:ca:3c:0c:
                    ab:b9:ff:0b:6e:f1:08:9b:55:a8:1b:b6:a6:80:25:
                    19:60:2f:2d:c8:d8:46:e3:2f:f4:4d:da:59:02:ec:
                    6a:ae:40:72:c9:85:2d:95:8b:56:29:d5:4a:24:22:
                    e8:54:40:f6:7b:14:65:b3:51:d0:c4:ad:f5:2f:1c:
                    e5:77:05:c5:6e:ac:71:20:09:55:f4:69:dc:96:1c:
                    43:9a:2d:c2:8b:42:99:9d:c0:ad:1b:c7:ff:4d:ad:
                    e9:02:3e:47:21:78:0f:37:11:a9:ab:8d:45:32:b7:
                    15:12:0a:40:17:61:d7:3e:64:e7:11:37:ac:f4:4f:
                    d2:b0:b4:6d:e9:3c:a5:b1:01:3c:3e:8c:4f:89:a3:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E2:6E:D5:5A:7E:C0:5B:4E:05:D2:B3:E6:9B:A7:90:BE:D0:B0:39
            X509v3 Authority Key Identifier:
                keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:bc:a7:58:3e:38:d5:aa:03:73:a4:b1:9f:70:58:03:d1:5a:
         f3:38:0e:c2:3a:86:75:d6:22:05:06:90:ab:26:b1:15:4f:a3:
         68:08:36:33:31:00:49:38:dc:6e:f2:35:8f:61:a2:62:77:70:
         6f:13:a2:13:88:83:32:66:0b:1e:41:f7:33:0a:07:01:90:ee:
         fc:53:cc:20:ab:89:f8:b6:ed:c4:54:6a:b3:c2:82:09:f0:40:
         9f:f2:64:50:a9:17:1f:d5:be:92:a5:41:11:78:8b:d1:c1:17:
         3d:bc:42:44:ba:8e:81:e9:6c:b7:97:5c:6c:5b:5a:ab:4b:14:
         97:e0:f1:54:47:fc:69:d4:0e:13:27:95:67:54:eb:a6:6d:85:
         fc:03:34:a6:2f:71:81:b8:dc:46:ff:eb:63:2a:b9:98:dd:de:
         8e:4d:90:cb:0c:3a:5e:7d:95:f6:78:95:34:d3:ea:6f:e7:05:
         b6:14:05:c1:48:72:3b:0e:8b:56:23:34:61:7a:67:67:2f:23:
         04:e9:88:53:fe:e9:c5:b6:29:db:bd:9b:7a:41:b4:48:13:37:
         c0:13:0b:eb:3e:0e:a5:cb:44:82:25:78:a6:ca:cf:7b:5d:66:
         78:f5:4a:8d:62:d6:b0:1b:c3:2e:2d:b8:d0:2e:68:17:9f:68:
         cd:76:08:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:14 2026 by rpki-client