Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          Bx4/WjULUjKol7WESqrfNG3JqdkUpFa/yNSIk365PSk=
Subject key identifier:   AD:4F:E0:1C:2A:13:B5:F6:50:A6:D8:FF:D6:3A:99:6C:08:93:30:6E
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       019CAD905F6795D4DB3A6258CE097A95022E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          136C
Signing time:             Mon 02 Mar 2026 08:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:45 +0000
Files and hashes:         1: 2ykxp1RC0SDW_olwDTCv-_MLiXQ.roa (hash: lHkNZLkgWFsMzYreyxJfbV91bR62pQ6AlcQ7rRHMjNM=)
                          2: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: 3byLojC0+hC/E5WsvHdQvNQfNZMgesWYVHiG9Krf78E=)
                          3: Vhg0NY4jLKFZehorU_HupjxbgqM.roa (hash: ZZVk+nzM5sjrEyBiJMYznTGMxJYwAgph6Xy/eIIAOF0=)
                          4: wLlS8Jywk1Z2A3Ni9ePUaXlglZA.roa (hash: HsiaEAzxY6GNFLXp4J8wvPh2SdvP1m/Tm0n/2wRXxXs=)
                          5: zLPd6uaNhEYIigV3kvzlHJIvTH4.roa (hash: tk6Y8DqBSL9/1u7Y9F6ipEsLVlx2f1XyZLdRg6GvQEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:5f:67:95:d4:db:3a:62:58:ce:09:7a:95:02:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Mar  2 08:00:45 2026 GMT
            Not After : Mar  3 08:00:45 2026 GMT
        Subject: CN=ad4fe01c2a13b5f650a6d8ffd63a996c0893306e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:ed:4a:5d:29:d5:c6:88:da:bc:a4:c1:c1:
                    14:6f:d5:c0:79:0c:73:97:d2:3d:32:63:b5:a1:55:
                    6b:14:cf:c5:8f:6c:61:1e:9d:1d:0c:a8:b4:ba:b8:
                    d2:ff:e1:18:67:ad:bc:28:a1:13:70:ee:49:1d:21:
                    a8:36:96:0d:87:69:58:b0:03:da:14:f1:dd:dd:17:
                    d3:c7:e4:10:57:56:84:f7:2b:75:55:ec:ae:fc:7f:
                    9d:16:bc:7a:4c:54:78:2b:4e:2c:d6:00:2f:7f:db:
                    9e:7f:2a:f8:25:47:b0:63:cf:d3:82:77:6d:82:25:
                    96:a9:bf:77:1b:70:72:81:5f:76:d8:a3:2f:bb:1b:
                    8a:e1:d1:a6:13:53:7c:8f:ff:b1:8d:c7:93:6b:7d:
                    35:66:f8:71:36:6d:80:ca:5c:67:55:13:56:6b:e7:
                    5b:4a:50:df:63:10:4f:5b:d8:79:05:33:a8:02:27:
                    65:c9:72:35:94:c2:4c:70:4e:8e:58:34:50:29:7c:
                    e7:4f:93:b5:84:2a:4a:c9:fe:14:31:e7:a8:6f:a7:
                    7d:de:1e:42:98:97:8a:f3:97:7e:9f:07:71:a0:da:
                    b5:fa:d1:0e:82:27:05:c5:a0:89:b8:65:ca:ac:ca:
                    0d:ba:ca:02:bd:1b:68:0f:83:ec:20:e8:8c:3e:13:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4F:E0:1C:2A:13:B5:F6:50:A6:D8:FF:D6:3A:99:6C:08:93:30:6E
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:00:22:91:54:73:9d:e7:37:a6:0e:ef:ad:10:a5:13:ae:7b:
         f6:e3:49:63:a1:25:ce:d5:80:29:1e:4f:98:af:f4:9d:81:6b:
         e7:8e:21:0f:6f:a5:9e:f6:6d:9f:be:d9:a4:1a:2c:2f:33:e1:
         cf:bc:0a:39:e1:ff:8b:f4:8c:ff:7b:dc:47:d3:63:33:42:3c:
         75:a3:ba:75:c7:df:0e:c4:8c:79:f3:e7:6c:ae:11:5e:fd:42:
         11:7b:7c:1b:e6:c6:9d:13:0d:9b:9c:a0:c4:8a:41:f1:ef:18:
         d6:b9:f0:15:a3:d2:b4:90:a2:c9:55:31:70:15:6f:59:6d:b9:
         eb:eb:0b:ee:48:22:fe:48:71:dd:96:6b:8d:c9:02:5e:f5:49:
         21:48:c5:32:d8:fa:9e:b1:19:5d:e4:a5:7a:0d:a8:9e:07:4b:
         f0:49:6f:b1:9a:4a:6a:e2:1e:8f:e2:fc:44:60:5a:4a:e5:c4:
         a4:ff:03:8d:a7:48:9d:2e:80:01:12:20:d7:1d:26:46:2e:a5:
         8f:8f:a1:9c:ec:19:86:79:24:fd:70:58:20:aa:fc:30:b3:dd:
         1b:05:a4:be:ac:6b:cb:49:07:63:ad:0e:ea:84:a9:15:75:d4:
         0c:17:36:7a:ed:90:d4:1c:ed:04:bc:54:e4:1c:54:60:a2:85:
         d7:01:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:04 2026 by rpki-client