Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          0KYBIzTzIVEQxsQsL4DogcEnyZl62wlTnamZzjdlezk=
Subject key identifier:   85:F4:15:95:DB:9F:C8:B7:49:A5:A2:7A:2F:38:31:FF:FC:4F:A6:EC
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       019D996252C656C0947E795B9C9EBC8876D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          15D7
Signing time:             Fri 17 Apr 2026 03:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:50 +0000
Files and hashes:         1: 8xW6dotWOxBryiPnauuCXj7XuSI.roa (hash: zASgDwULaWpUbCGZvnjqbpSShkEykQFL5DbnV3AjxvA=)
                          2: BDqHlt60SCUsG6m1jsuhJtjmd-g.roa (hash: qc0DKSPVeA1IXC/yas0jKMH1maqSIbQPdur6MCx7sBE=)
                          3: ESQujN5DaULTkC6C6ybAQLdooUw.roa (hash: kGih2+U+odRcMpkYTKXLRUpY39oIhEjGgAU5Suq/FjE=)
                          4: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: GljVYVnOrf1OnD1dJoVSNb7vL1s3xblrMIK8Qz2iTdg=)
                          5: Kgbb1ha1ETHNo6kDG9FbSmQXGu0.roa (hash: stqHaq0z6FCaDr4UcodVJdSho5SpMpajccdtCCU7/O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:52:c6:56:c0:94:7e:79:5b:9c:9e:bc:88:76:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: Apr 17 03:00:50 2026 GMT
            Not After : Apr 18 03:00:50 2026 GMT
        Subject: CN=85f41595db9fc8b749a5a27a2f3831fffc4fa6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:29:8e:86:ed:72:ca:5f:00:ef:b5:d4:06:
                    92:89:10:14:40:81:f2:f2:58:e7:71:c0:15:c3:4e:
                    9f:a2:f2:77:86:38:8e:7b:f9:61:fb:62:72:bc:7b:
                    2e:92:fa:46:94:37:26:ea:c2:2d:e3:00:85:74:60:
                    9e:11:bd:b9:5c:c5:a9:6f:b2:cb:b2:b4:44:fc:91:
                    c8:44:aa:e8:2e:ed:a7:ca:ef:05:f2:a7:4a:87:1d:
                    13:d2:5d:a9:d3:f0:28:70:0b:51:b1:5b:84:ed:a0:
                    ae:4d:6c:2e:8a:63:40:c3:9a:6f:2c:ae:53:f8:86:
                    fb:d3:07:fb:95:d8:f8:e5:6d:9f:25:8f:13:6f:db:
                    ad:24:22:78:ca:13:46:4a:00:ed:4c:bf:ff:2f:3a:
                    f1:5c:fe:13:43:4f:11:d1:21:97:2e:a4:88:0f:49:
                    fa:e8:22:08:02:c9:f3:d4:0b:21:4a:af:7b:d4:55:
                    ce:9c:6a:6c:75:21:a5:01:01:14:2f:40:1e:e4:68:
                    07:d7:c3:55:91:cf:eb:d1:04:73:8b:05:7b:8c:a7:
                    5c:94:1e:b5:a2:cb:07:55:1f:f8:a4:5d:ca:cb:3a:
                    ee:b4:65:8c:ee:56:f7:b5:d5:e1:df:b2:93:60:ae:
                    0e:c8:14:b8:cd:88:f2:0a:1c:59:67:a5:9d:4e:86:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F4:15:95:DB:9F:C8:B7:49:A5:A2:7A:2F:38:31:FF:FC:4F:A6:EC
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d6:2d:a0:8d:e1:ad:92:75:a3:1a:8c:17:de:a3:d5:d6:f2:
         f2:73:9d:6c:a5:1f:38:b2:92:a3:70:d5:e6:69:b2:24:50:02:
         56:df:3d:17:cf:c4:88:ce:dc:59:e3:a4:49:e1:dd:b4:24:3c:
         2f:6a:75:6d:f1:72:6b:fd:17:5d:0d:3e:fe:ee:96:f6:ad:9f:
         b1:78:2e:a4:0b:42:b7:94:3c:c0:01:65:d3:f0:de:d2:40:74:
         4d:1e:64:56:1f:68:a6:7c:50:eb:2b:ea:fd:55:81:95:10:0a:
         4e:f0:f7:f3:64:91:6d:f7:5b:bd:92:cd:4c:2b:39:3f:72:4a:
         e7:5b:59:ce:d1:91:c6:4e:93:6e:e9:ff:66:ed:9f:66:e8:89:
         24:56:36:4e:c0:71:2d:50:54:ac:8f:31:ea:51:96:7a:31:67:
         5c:9d:ed:92:66:c6:92:26:2f:4e:d6:3a:23:57:49:74:29:fd:
         e9:ed:db:e7:df:9f:c9:75:6e:4b:07:3c:d7:1b:f6:f4:6b:bc:
         97:96:fc:23:eb:86:62:99:34:2c:1b:e9:59:e2:a7:0d:23:3e:
         1a:b1:18:50:42:30:4d:47:54:f3:af:71:e8:db:9d:e3:86:db:
         3f:3c:55:0c:99:4a:4c:63:b7:1a:15:b6:76:ef:55:bb:26:22:
         07:93:21:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:05 2026 by rpki-client