Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File:                     Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier:          eRBWVDYQNT607jRc9pjy1sf1vqu1SX3PgAHoiZDfxf8=
Subject key identifier:   5E:66:22:23:3C:79:68:5E:39:1B:96:31:33:9E:19:0D:73:B2:BE:32
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer:       /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial:       019EC4EE6D6A62F7527E77425813DF792361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number:          04A8
Signing time:             Sun 14 Jun 2026 07:00:20 +0000
Manifest this update:     Sun 14 Jun 2026 07:00:20 +0000
Manifest next update:     Mon 15 Jun 2026 07:00:20 +0000
Files and hashes:         1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
                          2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: TBGXrd0Io7UtLuOzpiL61M3TWFE3Nj+DbLe52YYOjxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:ee:6d:6a:62:f7:52:7e:77:42:58:13:df:79:23:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
        Validity
            Not Before: Jun 14 07:00:20 2026 GMT
            Not After : Jun 15 07:00:20 2026 GMT
        Subject: CN=5e6622233c79685e391b9631339e190d73b2be32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:cc:12:09:71:8f:f8:a7:73:8d:1b:79:2e:
                    6a:68:53:42:18:05:23:c1:bd:e5:92:f9:a2:ef:fc:
                    57:02:7c:87:05:1e:6f:c5:e4:fc:21:8e:90:6a:07:
                    cb:2d:9c:56:a2:33:fb:fa:ff:05:1d:bb:ab:9f:a5:
                    b3:6f:9e:4b:e2:cc:02:7e:4d:78:c0:01:fe:6e:e5:
                    34:46:3b:a0:ed:db:2b:40:76:53:66:0f:43:5c:16:
                    e8:5e:20:c3:ce:5d:01:f8:f5:c2:f0:c5:a6:01:70:
                    e8:1f:43:65:44:67:f6:53:25:4b:d7:c1:4d:fc:cc:
                    e0:a8:b1:40:bf:35:a5:10:b1:5e:c3:d3:1f:35:de:
                    78:62:02:54:1c:73:49:8e:b6:a1:8b:89:94:25:d9:
                    1c:27:6b:17:b1:1f:33:7f:5a:3b:fe:b6:07:3c:58:
                    04:0c:ca:08:aa:5e:75:a3:98:04:1d:dc:66:9c:bb:
                    1e:96:8a:8f:0d:20:b0:dc:ba:2a:7c:91:b8:fc:6c:
                    19:2b:cc:d4:5a:20:61:ec:2c:73:24:33:5f:c5:56:
                    72:81:a0:6a:11:6b:11:b9:34:4c:4e:80:46:79:b5:
                    41:23:7c:7c:8c:c6:e4:8f:da:96:ef:1d:b2:0f:6d:
                    06:9a:7f:da:86:26:44:d5:99:11:bb:d8:36:2f:d5:
                    c1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:66:22:23:3C:79:68:5E:39:1B:96:31:33:9E:19:0D:73:B2:BE:32
            X509v3 Authority Key Identifier:
                keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0d:09:e8:88:41:99:83:85:41:2b:2c:23:2f:86:02:5a:d9:
         10:9f:f9:2c:3f:f9:28:78:f1:67:fa:3b:b2:70:2a:5f:45:f3:
         48:ef:76:49:7f:af:72:a2:1b:12:d6:ca:85:f5:e1:87:fb:ad:
         6e:af:04:30:0a:96:af:92:cf:b8:8f:88:32:47:1a:d9:ad:78:
         91:4d:8d:d0:19:7d:4f:33:11:7b:ca:fa:14:6c:4d:e0:d0:d2:
         22:12:25:4f:ae:dd:d2:63:ed:7a:bf:b9:ba:bc:f8:f4:86:73:
         75:f4:87:11:01:6b:87:65:8a:d0:cb:a1:55:9f:4d:e6:5c:75:
         64:b3:ce:b2:55:81:ca:b0:01:18:25:74:95:2a:3d:c7:5d:56:
         53:3c:94:7d:39:91:dd:af:17:77:26:74:85:ac:2c:55:b8:35:
         a6:b5:df:06:9d:81:aa:8c:11:3e:c6:8a:ab:3d:7d:26:be:3f:
         03:21:d9:1c:2e:e5:44:fd:17:1c:7c:a4:f0:98:dd:25:aa:b6:
         fd:4d:25:fd:45:24:99:c0:19:b3:4d:60:e4:c8:9f:f1:3c:ee:
         7d:06:26:2e:f6:5d:2c:5a:fc:b8:de:af:53:a9:6c:0e:c4:56:
         bf:9c:4b:5f:dc:e8:b4:21:9c:8e:4d:0d:15:b7:c0:b8:61:e5:
         19:3e:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 13:30:26 2026 by rpki-client