Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File:                     Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier:          x0TI5VHMmP6lLPy1bMt2coYzIk03lPwupZiqCYrmHhc=
Subject key identifier:   A4:87:15:87:57:E6:2A:36:3E:4A:A0:2F:8F:DA:1E:FB:3D:3D:E2:0E
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       019D99D01B27F832C9605862CEE9E9A93C32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number:          131F
Signing time:             Fri 17 Apr 2026 05:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:45 +0000
Files and hashes:         1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
                          2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
                          3: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
                          4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
                          5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: /tRekT3Q0dybyeT0rhQMiC4UvnZc2a+UPoInVfJbIKA=)
                          6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=)
                          7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
                          8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
                          9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
                          10: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
                          11: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
                          12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
                          13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
                          14: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
                          15: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
                          16: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=)
                          17: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
                          18: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:1b:27:f8:32:c9:60:58:62:ce:e9:e9:a9:3c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Apr 17 05:00:45 2026 GMT
            Not After : Apr 18 05:00:45 2026 GMT
        Subject: CN=a487158757e62a363e4aa02f8fda1efb3d3de20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:cb:df:5c:a2:03:c2:2c:fa:86:5a:57:9d:
                    16:2f:92:15:49:ad:19:66:6c:7e:88:31:26:58:e9:
                    86:df:b4:75:2d:e0:af:bf:e9:3c:86:67:e3:3b:78:
                    52:ff:d4:37:0c:e1:e5:43:00:a7:c0:11:b4:81:89:
                    ff:70:b5:3f:5a:ac:09:d7:ba:a3:72:ac:e1:03:1e:
                    4f:ca:73:d0:cd:9e:39:12:34:ae:c1:f3:49:e0:6b:
                    53:fc:77:63:b2:ee:dd:1f:4f:1b:96:ea:e6:8a:e0:
                    15:75:c8:dd:29:f9:ff:9a:22:ef:3e:7e:9e:da:21:
                    d7:3e:3d:7a:7f:fd:25:21:b8:cd:a1:fb:3d:25:ab:
                    a0:1c:a7:fe:af:28:4c:d8:95:ae:b8:ad:d0:23:cb:
                    c1:6b:24:a1:03:69:81:bd:e8:6b:66:38:f7:7e:e1:
                    20:9d:d4:b8:9f:69:30:cb:3a:b6:03:7b:3f:4e:f9:
                    51:78:47:97:fb:f3:de:1e:fd:9f:2a:2e:00:b7:bc:
                    61:74:e5:55:09:a0:d8:19:84:d5:6a:06:e7:18:71:
                    d9:e8:34:57:43:e0:f7:d2:90:03:0f:ba:1a:54:dd:
                    fc:10:5a:43:55:61:4c:62:d1:2e:e8:e3:f6:cd:62:
                    f9:29:a9:c4:54:cc:05:e1:87:74:9a:1f:d9:3d:c9:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:87:15:87:57:E6:2A:36:3E:4A:A0:2F:8F:DA:1E:FB:3D:3D:E2:0E
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:01:38:63:aa:e3:f3:80:4a:bc:ac:0a:fd:8c:19:f8:02:
         7a:b6:c2:74:a2:ef:e7:66:ae:7b:c7:a3:0f:e1:2b:f7:39:e8:
         61:75:bc:07:d0:99:1b:0a:03:2c:b4:8c:3b:55:8b:9a:8b:18:
         84:dc:23:a4:5a:79:e3:04:09:c0:34:1b:55:6f:7f:ff:e3:28:
         c2:3e:12:53:a4:3f:b5:20:52:7d:b4:1b:8e:b6:14:1c:5b:68:
         9b:e2:4a:7e:a8:fd:ff:c2:b5:0f:47:fb:c8:25:e4:a0:1b:9d:
         34:cb:ed:56:d3:0f:88:08:22:f7:c9:a3:3e:34:b2:35:7e:23:
         a2:f3:19:bc:21:b4:a6:dc:d1:8d:bf:71:90:7b:61:31:62:f5:
         1b:37:ff:c6:a5:59:25:85:f6:43:6f:d1:03:c7:94:a7:6d:f9:
         a6:34:e4:aa:25:f3:91:0b:a2:17:31:91:f2:15:5d:4c:5f:6b:
         a1:71:ff:ba:bb:d0:6b:f5:f6:5f:4a:27:ae:ae:8e:e2:e4:e0:
         e9:15:6f:26:3f:e8:82:43:dd:f0:21:13:70:ab:76:62:ce:b9:
         b6:c0:01:c7:a3:4b:b5:fe:a5:14:4a:b4:e3:6d:4a:62:f7:89:
         eb:52:1c:52:c9:ad:d1:6f:26:08:d9:86:32:2d:fa:bb:e7:e9:
         1e:2b:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:19 2026 by rpki-client