Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
File:                     ht-eAQiRCzo5rZOEqEbjGatSMKs.mft (raw, json)
Hash identifier:          3Ul2RwhxU6EUOeSJIBfaGNoCI/lhnzqiZHl3PG1g5qA=
Subject key identifier:   0A:20:98:FA:13:45:EB:6B:64:AB:9C:66:45:EB:E3:67:E7:AB:DD:FA
Authority key identifier: 86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB
Certificate issuer:       /CN=86df9e0108910b3a39ad9384a846e319ab5230ab
Certificate serial:       019EBF234305945841A2F8012877774F9A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
Manifest number:          26
Signing time:             Sat 13 Jun 2026 04:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:19 +0000
Files and hashes:         1: VpMZQfC_ZT10H1D3L9wo_BPTkrQ.asa (hash: zqiQ/w4Nl7NrJjPQf5cQg+KuVIXeEk6IeFYdqE9Y/Zs=)
                          2: ht-eAQiRCzo5rZOEqEbjGatSMKs.crl (hash: 9tpdtknOpcRTi+nA9KkgJOyP/a3OMJaCnMQGw72kjns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:43:05:94:58:41:a2:f8:01:28:77:77:4f:9a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86df9e0108910b3a39ad9384a846e319ab5230ab
        Validity
            Not Before: Jun 13 04:00:19 2026 GMT
            Not After : Jun 14 04:00:19 2026 GMT
        Subject: CN=0a2098fa1345eb6b64ab9c6645ebe367e7abddfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:98:61:cc:ea:8c:3a:29:4b:eb:47:08:f7:
                    72:da:4a:be:d6:dd:47:13:02:d6:f2:06:fd:25:c2:
                    9d:48:7e:25:c4:ce:40:45:cb:54:7e:3a:17:96:55:
                    04:f9:dc:d2:23:12:65:3c:54:0d:61:16:77:67:cc:
                    3f:cf:0e:7a:eb:db:c2:17:5c:67:c6:a4:8e:3c:25:
                    98:53:bb:f9:b3:e9:12:a1:1d:4b:f5:c7:09:dc:31:
                    af:d4:af:8c:cb:28:49:df:bd:b9:45:fc:a1:8a:c8:
                    61:9b:83:1d:e3:e9:3b:e0:b6:4f:3c:22:5f:75:c7:
                    f1:a5:20:fd:95:58:93:9c:19:2d:e3:1c:87:72:81:
                    53:ea:6e:ae:18:80:b0:be:59:3c:c1:48:ff:65:74:
                    b1:8d:c4:3e:d8:fc:d6:1d:bd:5b:39:ca:da:f4:6d:
                    e8:41:5c:c6:1b:26:e7:8b:bc:3a:d2:86:bc:6b:df:
                    9d:e1:8f:aa:3a:1e:d4:91:d2:2e:a5:e6:91:b8:a0:
                    46:20:a5:1a:a3:c8:09:54:57:cf:39:c6:8b:67:df:
                    76:54:e4:97:2c:2f:11:38:9f:d7:1c:6e:51:b6:37:
                    04:09:e3:3c:77:cb:7e:8a:c6:51:26:f0:9a:93:ab:
                    5a:43:be:35:bd:a5:25:51:04:a5:b5:60:47:74:3c:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:20:98:FA:13:45:EB:6B:64:AB:9C:66:45:EB:E3:67:E7:AB:DD:FA
            X509v3 Authority Key Identifier:
                keyid:86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:18:83:4e:1f:39:c8:c4:8d:9a:4b:b9:f0:2c:06:8e:b9:
         05:92:42:52:ed:96:34:94:d0:a4:f3:f6:a5:62:8c:31:b1:f6:
         02:68:bf:1c:65:67:b8:6e:6a:a8:8f:63:63:5c:b1:7d:eb:d7:
         b1:e4:01:81:51:f3:b0:dc:11:79:fd:41:c1:15:d3:c7:ab:7f:
         74:30:49:61:d8:1b:a0:a3:3e:05:d6:d1:15:a7:77:f1:ed:ef:
         ac:73:b5:d6:a6:40:ef:d2:24:a5:00:15:50:0a:b8:ef:3c:ec:
         d1:12:fb:da:42:ec:fa:a5:29:8a:d7:73:05:e7:de:eb:a3:0a:
         01:b9:db:84:48:f6:00:a1:dc:47:ce:fa:7a:7b:11:3f:f3:b4:
         19:87:f4:b2:42:38:1d:8a:53:c6:39:ba:0d:6b:a2:02:30:8d:
         ed:47:9b:e2:f3:e5:62:f2:33:64:8c:53:78:95:0f:ea:e7:d1:
         53:81:01:0f:0d:01:9d:c7:c7:36:a9:c9:70:69:57:16:b5:39:
         97:b4:3c:b8:a0:84:25:25:a8:be:fc:56:bf:39:2e:23:78:a1:
         2e:94:4f:64:3a:7c:df:6a:9c:0d:b3:95:1f:68:61:c8:42:45:
         33:3f:9b:42:88:a1:c7:7c:6c:e0:5e:56:ac:bd:0e:56:08:06:
         ee:e4:69:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:26 2026 by rpki-client