Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
File:                     HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json)
Hash identifier:          MbSe05ECVsI5V2JYmVfisQAhx1MLMtSBC+RRmDED0OQ=
Subject key identifier:   55:F7:D8:8A:5E:D4:A9:DF:F8:04:38:FE:C5:9C:0D:5F:09:DD:D6:DA
Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66
Certificate issuer:       /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
Certificate serial:       019DA5671414CA97BF3353D0CBE571DCF7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
Manifest number:          0184
Signing time:             Sun 19 Apr 2026 11:01:29 +0000
Manifest this update:     Sun 19 Apr 2026 11:01:29 +0000
Manifest next update:     Mon 20 Apr 2026 11:01:29 +0000
Files and hashes:         1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: MZI/jBFTKLqTwOagrh8umGMt5253lscMLDfM82Bs2HQ=)
                          2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:67:14:14:ca:97:bf:33:53:d0:cb:e5:71:dc:f7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
        Validity
            Not Before: Apr 19 11:01:29 2026 GMT
            Not After : Apr 20 11:01:29 2026 GMT
        Subject: CN=55f7d88a5ed4a9dff80438fec59c0d5f09ddd6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e4:a4:fb:8f:ec:3e:f6:09:92:9b:7e:5c:3a:
                    1f:d2:a8:5c:61:e0:57:9e:2b:e8:04:9a:9f:96:89:
                    24:97:2c:f3:0e:a1:de:84:23:b8:20:61:4e:82:f5:
                    36:4a:af:51:c7:c1:de:03:77:88:88:15:3d:73:fb:
                    80:8d:45:4d:41:9b:7b:12:84:e7:cf:74:b0:82:a4:
                    25:4b:5d:fe:4f:0b:1f:ef:39:e4:32:6f:75:a7:a5:
                    2d:f8:a4:ff:c3:8d:3f:49:d0:8d:f2:41:d2:40:f9:
                    85:12:69:eb:c3:fa:04:23:06:63:7e:ef:ec:ec:44:
                    fc:27:a4:86:06:c0:63:b4:19:99:ec:be:11:11:99:
                    1c:33:00:10:1d:c1:3c:87:4a:6e:56:d2:a8:5b:1e:
                    fb:af:71:7c:b7:1a:fd:1a:10:a8:bc:8e:a8:94:7d:
                    80:f8:d8:5e:32:02:34:2e:ff:6a:54:58:79:16:e2:
                    14:b4:e0:b8:6a:52:11:f4:de:18:5f:28:af:5a:28:
                    45:68:02:35:30:ed:75:e3:d7:6c:9a:40:16:ae:11:
                    51:c7:74:8a:05:92:ab:3f:21:b7:f7:03:4f:80:27:
                    e5:5b:6d:2b:19:c6:4d:bf:51:75:b7:46:ce:7a:83:
                    e2:cd:39:f3:0a:03:0a:ac:0e:cc:18:b2:5f:04:3a:
                    60:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F7:D8:8A:5E:D4:A9:DF:F8:04:38:FE:C5:9C:0D:5F:09:DD:D6:DA
            X509v3 Authority Key Identifier:
                keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:78:22:7a:e8:86:9c:33:df:b7:0e:50:28:ae:21:d1:0c:1d:
         a9:63:ec:26:61:53:8d:58:ad:a8:36:52:2f:0c:3f:eb:c6:c4:
         75:d0:64:e0:ac:cb:3b:44:9f:56:aa:81:94:af:6d:ee:9a:99:
         3b:a6:52:5c:96:24:0c:fa:3f:a8:d3:e4:4e:79:24:94:b5:c7:
         49:53:a7:a6:1a:4d:81:43:55:0d:fc:9e:d9:f6:61:55:6e:89:
         9e:9e:e3:de:2c:06:fb:9f:13:81:42:c5:d3:d5:17:af:1e:44:
         77:42:41:60:a8:73:7a:60:66:50:9b:8b:80:0f:62:ef:13:00:
         0f:7b:6d:2c:23:97:ee:fd:8f:34:98:c0:5c:13:5c:b5:b5:c5:
         df:9f:70:63:7a:14:84:fb:39:18:ae:f8:d8:e8:d4:d0:91:bb:
         41:13:fc:12:ab:d4:af:16:c2:ab:05:1f:de:b7:24:84:5b:cd:
         fb:33:63:5d:70:d4:d5:cd:b9:90:2c:3e:18:3f:4b:1d:20:ca:
         b6:3c:20:c6:45:55:d9:10:b6:89:5f:c8:56:fb:70:c6:dc:e6:
         64:77:c2:fd:84:73:26:3c:1f:d4:70:33:aa:a1:39:23:0b:43:
         c8:01:a9:ae:23:b9:56:b6:7c:7e:a3:89:19:56:11:b8:a3:d1:
         0b:e0:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:51:59 2026 by rpki-client