Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
File:                     h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft (raw, json)
Hash identifier:          i5cYiSxWvut5ToUsdRSr5F1fdyf8ammMQLzZRRhcZ/4=
Subject key identifier:   2F:26:36:5F:9E:E0:BC:F4:9D:84:04:DA:DC:21:D5:A8:EF:53:1E:9B
Authority key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Certificate issuer:       /CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Certificate serial:       019CAEA3A97C3C9090B02A8035CC89F10CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
Manifest number:          122E
Signing time:             Mon 02 Mar 2026 13:01:26 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:26 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:26 +0000
Files and hashes:         1: f0s7xhIX_ZdEnF7QAqySJk-x7jg.roa (hash: tOKvjfGqdLOFIsW8qfkzXlM9iNHN9+R4+1GbfNoAQow=)
                          2: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl (hash: +qXAg7YvUOlMp+/ficlUoYDyyZEEDPWTzPp+F3oKVm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:a9:7c:3c:90:90:b0:2a:80:35:cc:89:f1:0c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
        Validity
            Not Before: Mar  2 13:01:26 2026 GMT
            Not After : Mar  3 13:01:26 2026 GMT
        Subject: CN=2f26365f9ee0bcf49d8404dadc21d5a8ef531e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:1f:8a:e0:5b:4b:9c:18:c9:ad:e8:06:df:
                    73:21:f6:83:1b:fb:47:94:2e:67:1d:8e:95:23:b8:
                    35:70:37:03:51:20:90:5b:3d:25:d5:65:d5:df:16:
                    ad:ff:db:4f:17:b8:f8:23:70:97:72:75:26:f3:94:
                    64:d0:d4:d8:93:19:f9:22:c2:1d:74:ab:15:88:be:
                    97:65:95:19:04:24:1e:43:2c:5f:f6:02:39:ff:68:
                    bb:74:83:08:79:de:dd:0d:06:3d:53:91:51:04:e5:
                    88:7f:71:2f:c1:14:19:7a:5d:fa:46:6c:68:96:4e:
                    f4:b8:55:df:bf:8d:9f:33:ac:1e:66:cc:89:fd:84:
                    ed:96:b1:d1:4b:a6:fa:33:e5:1e:b0:aa:ec:77:64:
                    a0:9b:3a:a7:25:8c:18:24:84:75:da:ec:2f:f5:73:
                    a6:f1:c5:d2:ae:ee:c9:a1:ff:2d:3b:22:e7:cd:a4:
                    9f:23:55:ec:ab:db:3b:41:23:26:77:e8:0a:ad:03:
                    5a:04:11:0d:dc:26:4a:b5:3e:00:32:84:8b:83:b1:
                    b1:c3:2c:ee:5a:39:57:38:cd:7a:b4:c0:57:ca:42:
                    88:95:bb:40:19:bb:ea:07:ba:e6:2e:d2:e6:75:52:
                    54:5b:9a:1f:8c:fc:24:88:b5:a8:b9:90:12:36:87:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:26:36:5F:9E:E0:BC:F4:9D:84:04:DA:DC:21:D5:A8:EF:53:1E:9B
            X509v3 Authority Key Identifier:
                keyid:87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:08:96:c9:37:67:69:56:93:ba:50:8b:3c:4b:39:c5:03:f6:
         b4:e2:33:e9:07:c6:2f:be:f1:19:71:bb:47:24:02:3c:26:79:
         58:29:b4:72:b9:4c:39:ef:6a:34:fe:6f:82:9f:27:8b:26:1b:
         8c:f7:c7:f2:78:94:d3:6e:64:5f:b3:c7:fa:bb:2d:c2:1d:6e:
         03:45:16:33:64:c9:de:b0:87:d3:cc:08:4d:35:f8:9b:80:4a:
         e1:fc:5c:a5:0e:76:eb:04:73:af:d0:b3:cc:ce:85:16:04:b7:
         89:13:e0:5e:c1:8c:35:98:e0:fc:bb:dd:cc:c0:59:e9:f4:7f:
         4e:7e:cd:37:43:0c:d9:78:56:59:32:2a:f0:28:7b:1c:2e:2c:
         4b:f5:a4:4e:c9:30:91:6d:16:df:e9:e7:1e:1c:4a:73:3f:78:
         7e:53:da:d1:47:b8:4a:c1:1a:69:5e:1c:47:d2:1f:57:43:7c:
         84:32:95:af:e7:ea:66:2c:12:bb:23:f4:89:f8:af:f1:dd:74:
         60:56:4f:17:8c:22:e2:05:6e:84:9e:13:e8:66:4f:50:9b:f7:
         d3:d5:92:38:43:9d:e7:ff:07:c8:ba:b5:70:ed:f8:2b:34:f9:
         a9:00:65:9a:cb:78:d8:bd:77:05:dc:97:ae:e8:a3:59:e9:a1:
         51:6a:56:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:46 2026 by rpki-client