Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File:                     HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier:          sl6X6U9x+XMjhqN6gonhwaplI01A2lkKIakyMt8fjRo=
Subject key identifier:   51:8B:2D:67:C2:FC:32:14:AD:6F:B8:4F:AB:7C:D2:B2:A9:02:B0:9F
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer:       /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial:       019CAC46A0CE65E359CC6205706AAB88BB68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number:          1443
Signing time:             Mon 02 Mar 2026 02:00:35 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:35 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:35 +0000
Files and hashes:         1: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: ULzelIqPAkizuUGmzdR8SiWiBt1F83HJqE6+m6InBYs=)
                          2: Pa-REvh5sObWkBoz7bJgJfUNNtY.roa (hash: VTVwzFjol2i2vqCqnvi41UK4vnNgLEigWpUo/HfYOUM=)
                          3: TJCGzUQHxg4bwyTZRd9MjPgDFco.roa (hash: mDKYo4+PY4/xDJecNKQRG7i12NJwnq+4UMvwsAIjYeA=)
                          4: etcUvrpfPKP_RFS8q4I2oRGtIpU.roa (hash: QazyHRaqwRmfbynAWmgSgFTPgoxpLo3PBLZtnvBUmtQ=)
                          5: olVKrDWOXV-cZqa6YCvyS1EAmtw.roa (hash: DtRokaXbwlYUqcYONE6Ad45+vRoun3fYTMXSmpbmsOQ=)
                          6: pYGVbv4voC-r48uG-RyVLygkJXo.roa (hash: Xfgs3GY90UOV9OHOemeveUcmPpqz9KE7PoOqb01izow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:a0:ce:65:e3:59:cc:62:05:70:6a:ab:88:bb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
        Validity
            Not Before: Mar  2 02:00:35 2026 GMT
            Not After : Mar  3 02:00:35 2026 GMT
        Subject: CN=518b2d67c2fc3214ad6fb84fab7cd2b2a902b09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:d8:a0:11:a5:56:c3:59:69:8e:53:db:f2:
                    51:3b:af:3c:2d:e1:0f:f4:2f:c7:0b:63:4c:29:a1:
                    ba:9c:0a:2e:d8:47:ea:e2:2a:4d:aa:cf:c6:3d:e8:
                    75:6f:16:c5:b0:3f:38:82:5e:fe:ae:76:dc:a0:e5:
                    54:42:72:dc:e4:50:dd:20:32:07:bc:ce:bc:d0:58:
                    5f:6f:45:3e:bc:a2:5b:17:c0:8f:5d:11:c3:2d:29:
                    4b:b8:be:b2:b4:9e:bf:f8:9a:56:35:d8:9c:2d:d7:
                    d8:f5:4f:1e:d4:f8:07:25:1b:f3:23:b9:72:aa:bc:
                    0a:b8:e5:00:c4:e4:ed:37:c9:44:e6:c2:14:7e:f0:
                    67:48:48:ba:2a:6b:a6:ef:9e:7c:de:c0:8c:95:7b:
                    7b:a1:7a:f7:c3:d7:0d:ae:db:37:93:43:99:1b:69:
                    38:ce:e8:c2:de:3a:e2:49:8f:0d:62:5f:15:f5:46:
                    cc:46:02:19:91:36:00:8d:43:7a:f8:9c:70:5e:36:
                    48:f2:41:d8:83:c0:f9:dd:fe:fe:29:c4:fc:ca:66:
                    3d:bf:e5:a3:31:37:e7:9b:d5:36:cd:1b:37:af:bb:
                    ac:ee:de:96:1f:84:23:01:8f:65:18:93:5c:91:33:
                    a4:41:90:6e:a3:c5:0a:6e:2e:f7:2b:1b:c8:2c:90:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8B:2D:67:C2:FC:32:14:AD:6F:B8:4F:AB:7C:D2:B2:A9:02:B0:9F
            X509v3 Authority Key Identifier:
                keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b4:9d:d4:ec:72:00:6d:11:96:76:83:34:27:5a:86:1e:5d:
         07:1b:76:ad:ec:fa:9f:c3:d4:39:30:65:cf:47:79:e2:f4:20:
         74:d1:80:a3:6b:9c:f1:6b:6c:fd:f7:c3:78:16:f5:44:fa:b2:
         f6:2d:a6:ac:03:33:1b:0e:e7:37:c6:0b:fe:a5:10:a7:49:c1:
         bd:c1:44:6c:1a:5a:7e:a3:94:cb:c5:0a:e7:41:7c:99:07:8a:
         71:15:0a:28:45:4c:57:c1:76:13:c9:ef:b9:81:29:34:d6:de:
         31:79:0e:61:96:e2:27:ce:86:a9:7d:45:ff:66:76:a2:d9:be:
         36:b5:3c:f7:3a:dc:a6:5e:f9:0b:65:53:ae:83:49:3f:fc:3b:
         5a:d2:f0:a9:00:a2:0c:21:6e:c6:7c:8f:a6:ee:9a:14:b4:f2:
         6e:c4:fc:75:2d:e5:88:a0:d4:57:5b:a9:f4:b0:1e:9a:c6:97:
         c4:fc:a0:d0:40:24:56:cc:f9:86:5a:f8:00:81:ab:4b:b8:04:
         4f:51:04:bc:fd:f1:d2:a6:13:ef:d7:8f:e1:25:72:bd:09:a9:
         bf:4b:a7:b2:41:e9:21:3d:67:2b:1f:61:6e:c7:7b:a6:f3:2c:
         47:1e:41:e8:30:ac:b4:1a:27:a0:c7:f0:5e:55:c7:f4:f0:6c:
         ed:ce:df:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:11 2026 by rpki-client