Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File:                     hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier:          PVwnqWn5OYneeS3UsygsD7vyt+Cu1/FevUST5ZziNhY=
Subject key identifier:   56:08:59:9A:0F:81:D6:91:43:96:CE:98:75:3C:82:28:B0:FE:39:E0
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer:       /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial:       019CAA21B6AC4FE518353C9606618161891F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number:          132C
Signing time:             Sun 01 Mar 2026 16:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:01 +0000
Files and hashes:         1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: f4GHHYSVv4vZc7FYM4wwbQCyIiAyb7N43fKjqlKjglU=)
                          2: iw4AqRmRIMQgRY1v_jIj27JTYNA.roa (hash: gkzi1z5bUJVhySMVCKKlEz9ici4xT0whvHOWhFzYVIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:b6:ac:4f:e5:18:35:3c:96:06:61:81:61:89:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
        Validity
            Not Before: Mar  1 16:01:01 2026 GMT
            Not After : Mar  2 16:01:01 2026 GMT
        Subject: CN=5608599a0f81d6914396ce98753c8228b0fe39e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bb:8a:0a:64:90:e3:81:11:f5:33:fe:3c:65:
                    41:5a:af:b3:67:6f:38:98:7b:7f:04:86:fe:f7:a4:
                    05:5b:1f:57:a4:66:3d:b3:8b:8d:da:ae:64:49:ac:
                    2a:8e:c0:95:71:fb:00:17:97:9b:dd:33:e1:71:4b:
                    57:61:3a:7b:3c:f3:21:42:ef:ec:09:f3:ae:13:9c:
                    b4:2c:e9:f6:25:ac:ab:d4:88:a1:bb:23:26:d0:1c:
                    4d:8f:d1:ab:c4:cb:be:86:ee:63:90:78:f9:a5:0f:
                    64:da:08:37:31:38:09:4a:c4:0c:c3:16:eb:26:c6:
                    61:ff:cc:bd:de:e4:81:3e:28:b2:4f:36:9a:de:b6:
                    c0:3e:7d:eb:3f:57:1b:f5:62:ba:4b:3d:4a:0a:d5:
                    52:2c:fc:69:b8:32:65:8a:26:e5:9b:11:ae:df:d9:
                    02:5a:29:a3:2c:8c:37:60:d2:cf:13:47:26:f5:7d:
                    bb:ad:7e:ad:21:df:11:6d:0c:ae:b5:06:0a:4b:ba:
                    fd:ca:37:49:d6:00:1f:a6:45:33:cc:70:af:ff:2d:
                    26:c2:df:2b:99:ac:ab:2e:b3:f7:9f:d9:a2:a2:43:
                    ec:14:ba:a0:95:de:b8:3d:cd:ac:b7:4e:25:82:08:
                    a8:33:36:2d:15:30:d0:e6:c4:d1:df:aa:aa:4a:ee:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:08:59:9A:0F:81:D6:91:43:96:CE:98:75:3C:82:28:B0:FE:39:E0
            X509v3 Authority Key Identifier:
                keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:fc:0c:bf:13:44:f2:46:cc:f1:11:4b:95:40:e5:8a:25:
         f1:a7:b9:22:db:82:95:c6:1c:d1:7b:71:7d:e5:35:0a:e8:e4:
         43:a9:f8:7b:4d:e0:09:fc:4a:b3:3c:f9:20:d0:7f:9f:da:36:
         5f:07:d9:ff:16:b6:fc:a4:92:1a:d6:68:76:a0:67:68:17:a7:
         e9:a4:7b:4c:9b:77:7c:ec:5d:e9:9f:20:de:59:86:52:56:d3:
         cc:af:51:fd:e6:dc:7c:74:73:34:02:7d:27:2a:0a:00:9c:f5:
         97:05:f2:dd:af:97:15:03:4f:2e:12:78:16:c4:eb:9f:b3:b0:
         5c:1c:f7:a4:ab:8c:b5:2e:e6:5d:92:c3:e1:7e:d5:f9:8f:8a:
         87:c0:b6:7e:0c:35:a1:e1:cb:8a:ba:35:04:5a:cf:7f:48:5f:
         79:c8:4d:7d:f0:71:d1:88:1e:1b:0a:32:ce:c2:17:50:d6:bd:
         e2:39:0f:9d:0d:47:45:3c:72:36:57:c1:15:62:71:f6:ea:28:
         d0:36:48:0a:46:e2:4d:6c:40:6b:40:59:f7:cc:00:ad:65:4f:
         90:7a:da:b3:d7:84:6f:35:6b:bf:d3:ac:19:86:9e:c4:14:a1:
         55:c3:ac:3b:bc:da:0d:3c:cb:3b:dd:15:df:c6:55:8c:7f:45:
         b9:e9:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:12 2026 by rpki-client