Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File:                     HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier:          S09f0zw6jmHCZJQhbQFjQjNvire0NtKbVu2eag0PVbM=
Subject key identifier:   46:E2:3A:4F:0A:DA:8E:85:54:77:D5:07:01:F6:E9:47:85:B2:E2:8D
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer:       /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial:       019EC1EE3F8035723DB47897E895C3C4C78F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number:          10B0
Signing time:             Sat 13 Jun 2026 17:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:16 +0000
Files and hashes:         1: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: SE4YnDWrQhXWKsGTs/nObuWrPetk5ziOTH6zzsXPhr0=)
                          2: XWBsB_cZ5qidLCmlV0HYPquJmRY.roa (hash: K9lGKjaA0sTZUshIhYC2Vc0Nnn9645Zh7HW4fKMC9/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:3f:80:35:72:3d:b4:78:97:e8:95:c3:c4:c7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
        Validity
            Not Before: Jun 13 17:01:16 2026 GMT
            Not After : Jun 14 17:01:16 2026 GMT
        Subject: CN=46e23a4f0ada8e855477d50701f6e94785b2e28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:f4:70:e7:a0:0b:5e:09:ff:d5:84:0d:3f:
                    31:eb:fd:6e:03:1a:73:68:07:8e:a6:20:cd:49:fd:
                    ac:da:72:3f:e7:7f:01:5e:a1:5b:36:f5:72:7d:b1:
                    4f:5d:b2:15:e9:e6:3b:7a:a2:64:f5:b6:2e:62:4b:
                    21:78:f7:2e:58:80:49:17:70:69:d3:7a:55:49:32:
                    e2:74:f8:2d:a0:cb:89:18:6c:ba:a9:8f:f7:95:37:
                    e1:fa:27:73:40:0b:2c:a9:da:62:97:ac:43:e1:a6:
                    63:3f:18:f1:99:66:34:cc:84:c9:a7:7b:ca:c6:79:
                    08:1f:0d:25:70:e1:e1:05:76:d5:22:5d:a1:dc:a3:
                    ad:39:b6:76:58:ff:a6:4d:ec:3c:ec:1c:8a:ec:94:
                    c6:ed:5e:8e:67:bc:a6:e5:e5:71:21:8b:fa:3d:84:
                    79:d0:ed:2a:1e:fd:5e:ad:58:09:52:ed:4c:eb:40:
                    57:6e:0d:64:c8:4e:48:3b:d8:41:34:9e:9f:d5:b1:
                    1b:41:7e:9d:e0:0a:4a:3f:e2:83:95:65:e7:aa:c9:
                    a1:7c:7e:5d:f6:cf:62:fd:fe:f1:11:53:29:b3:f3:
                    03:48:66:8a:0c:1c:a2:28:e8:65:bf:96:f6:99:e7:
                    cd:50:9d:9e:77:89:93:f8:f9:60:ab:33:d5:6f:7c:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E2:3A:4F:0A:DA:8E:85:54:77:D5:07:01:F6:E9:47:85:B2:E2:8D
            X509v3 Authority Key Identifier:
                keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:90:10:90:64:d2:8e:5d:4b:71:43:8c:23:e3:23:31:f9:c6:
         56:aa:5b:54:8b:c2:89:88:24:8a:33:b9:9b:b2:e8:90:e5:f3:
         5b:b7:b2:30:4f:dd:3d:0f:b0:66:ac:e2:ba:dd:df:fa:56:1b:
         54:af:76:4c:32:7d:b9:f5:72:77:66:29:66:61:c0:56:e3:64:
         f5:02:b9:01:ae:ca:8e:73:cb:4f:08:f7:9d:4b:c6:13:43:f8:
         0d:c7:e9:12:fe:da:00:d1:8a:d3:1b:3b:4a:1c:67:0a:37:73:
         31:01:4a:36:99:f6:2e:41:18:34:d3:94:62:60:7a:ab:78:1e:
         5c:e2:5a:df:77:52:71:3e:45:24:b8:09:be:ee:4a:d6:c6:21:
         50:7c:21:05:c9:53:61:cc:5d:cd:60:c2:3c:03:ca:41:93:43:
         33:21:bd:5d:6f:2f:ca:9b:c3:90:ad:69:4b:53:ee:3a:cf:2f:
         22:ae:74:e9:d9:ab:49:2c:d0:a3:ca:fe:be:98:a5:3b:0f:bf:
         26:3d:e8:59:c8:26:26:77:00:44:83:92:22:b9:b8:0f:84:55:
         f4:75:96:bd:dc:98:26:ff:fd:30:64:d4:45:c0:f1:7a:eb:b5:
         3d:2d:f5:7a:1a:88:bf:f0:90:6e:f2:e8:6d:59:64:7a:50:a0:
         e4:cf:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:25 2026 by rpki-client