Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File:                     HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier:          ao0ktLGQE7yV7NuTVyyYX52cxK7gLu9a53/pgI1QRsQ=
Subject key identifier:   6C:AC:56:00:2E:DB:49:43:9B:C1:34:54:4E:14:4E:1C:C1:3C:5A:E9
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer:       /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial:       019D99996BB617AACB39564FCC6689BD9ABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number:          0F62
Signing time:             Fri 17 Apr 2026 04:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:01 +0000
Files and hashes:         1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: Z2d0Cv3TgCyDQfm+g1gN4vFYoAJBd1oDPUrBVSX5D5w=)
                          2: JtB-_mP0CPyoUgsFyVWDrEIlud8.roa (hash: egfxT7xeT/hTTg3h54ZByaWRlZbXWQEqw5+/1nELFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:6b:b6:17:aa:cb:39:56:4f:cc:66:89:bd:9a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
        Validity
            Not Before: Apr 17 04:01:01 2026 GMT
            Not After : Apr 18 04:01:01 2026 GMT
        Subject: CN=6cac56002edb49439bc134544e144e1cc13c5ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:79:4e:94:88:ad:2b:82:d6:72:12:1d:53:
                    61:c4:c6:d9:1d:8d:46:79:c2:1b:ee:24:3f:88:f6:
                    6e:54:dd:e6:4c:62:5c:d8:da:c6:1a:eb:97:8f:ba:
                    a8:2b:4d:14:31:df:ed:c8:8a:ac:81:02:ef:cb:4e:
                    c5:db:96:4d:6f:e2:5f:89:7f:da:1c:1f:b3:2a:b2:
                    87:c5:b9:82:fd:39:a0:f1:7a:00:c2:39:45:31:27:
                    18:5a:9b:29:b6:8a:f5:fe:05:72:37:63:46:06:50:
                    8f:1c:e7:66:7d:75:b0:34:5f:01:26:69:56:38:32:
                    f2:6c:10:bf:21:7a:7c:b4:96:8f:5a:79:72:5b:11:
                    26:36:f7:fc:fb:61:20:a3:3e:c8:e2:0a:a5:1d:e5:
                    e1:46:98:1f:82:74:d3:05:55:05:3c:60:4c:f6:37:
                    d6:5f:9f:d5:98:c3:17:ff:f7:d4:8c:2d:ab:7c:64:
                    40:9f:74:eb:9c:8c:57:d6:4c:a4:16:26:91:3e:c1:
                    c5:d6:a4:24:d5:03:17:0c:20:ba:00:17:95:27:e2:
                    9b:56:93:b4:91:2f:03:a6:5c:03:18:e9:09:e6:9b:
                    da:74:f6:aa:f5:75:53:26:30:c3:39:da:79:21:1f:
                    4d:51:9d:49:42:19:80:14:fb:d0:70:bb:83:a2:1d:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AC:56:00:2E:DB:49:43:9B:C1:34:54:4E:14:4E:1C:C1:3C:5A:E9
            X509v3 Authority Key Identifier:
                keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:94:1c:8d:0a:27:d3:68:27:ca:79:69:39:8d:39:bd:18:
         e1:d9:23:d3:ea:9a:5a:9c:0c:43:be:ea:b6:6e:bf:89:20:cb:
         6f:55:7d:48:fb:86:29:eb:d6:b2:e7:5f:65:e6:ad:f2:86:5b:
         8a:3d:4f:1a:69:75:4a:bf:96:17:12:b1:8e:a3:79:5b:e9:c5:
         62:d5:c4:88:29:73:e3:27:41:00:c6:85:e2:60:1d:d2:8f:e7:
         6a:4c:ed:94:3e:70:86:0d:b3:b0:2d:db:ef:51:95:55:4c:50:
         25:37:22:17:75:f4:c0:86:1a:79:42:d8:55:d8:e9:d2:00:fb:
         84:ca:7e:00:0b:81:38:79:4f:df:08:da:23:6b:5c:14:cb:7c:
         46:7e:8a:5f:ce:f3:b7:2d:c4:4e:51:05:7f:20:66:05:bf:66:
         ee:2a:8b:44:82:82:a4:9e:43:b7:b0:75:1b:7b:ec:32:cf:6e:
         ae:22:e5:70:0a:a5:75:bf:dd:fb:83:e7:15:05:b1:e2:58:21:
         b0:a4:a7:33:c0:ac:73:a6:67:32:dc:16:18:b3:17:4f:f1:06:
         40:21:9a:f7:11:70:2f:59:53:7e:b1:30:83:65:70:bb:92:3e:
         af:a5:b2:c2:a1:02:5e:57:75:7e:48:54:b0:f0:e8:9f:16:27:
         6e:1d:b6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:11 2026 by rpki-client