Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File:                     HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier:          o+LTijZRW3j6cVHnB6EzlwnPyAvmrfgMSa2jppAFzFE=
Subject key identifier:   B2:79:74:E5:67:DD:34:49:35:25:72:F9:43:3B:CB:34:BB:D0:0E:D9
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer:       /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial:       019CB5EF23C8186DC6A5A4119F43A952106E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number:          1467
Signing time:             Tue 03 Mar 2026 23:01:14 +0000
Manifest this update:     Tue 03 Mar 2026 23:01:14 +0000
Manifest next update:     Wed 04 Mar 2026 23:01:14 +0000
Files and hashes:         1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: LMT3oH9wxjkZ6Vo+6zdPK1mWQFLOk4Sn595p6TcVNhU=)
                          2: fFVfaPEPvGKjg4kJa5a5tDcfzyc.roa (hash: d3fxlkjjTmTR/qE5MofQAuscWNxHOBVvr2boR3ObEX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Mar 2026 22:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b5:ef:23:c8:18:6d:c6:a5:a4:11:9f:43:a9:52:10:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
        Validity
            Not Before: Mar  3 23:01:14 2026 GMT
            Not After : Mar  4 23:01:14 2026 GMT
        Subject: CN=b27974e567dd3449352572f9433bcb34bbd00ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:c7:4c:00:94:ed:b0:3e:2a:39:cc:58:b1:
                    ee:39:36:38:d0:86:cc:ed:3f:d8:59:34:88:19:02:
                    56:9a:86:b5:c1:43:99:00:4d:8a:bf:b0:de:a1:1f:
                    b7:2c:96:ca:65:39:12:01:d4:1e:e4:47:9c:9f:56:
                    04:a2:80:e5:59:c6:df:86:c7:90:c1:6b:1e:28:8c:
                    82:2d:41:2c:94:dc:7d:a7:7a:8d:f4:7c:a5:85:e1:
                    7d:e7:e9:2b:2c:a3:87:00:8b:d4:32:1d:1d:77:74:
                    40:dd:ce:bc:b9:1b:d2:ae:0c:82:74:b9:bf:5c:d4:
                    95:db:f1:e8:14:e5:4c:f5:62:af:6d:33:a6:2c:e8:
                    6a:be:54:a9:9b:22:71:fa:5f:7c:d3:2a:db:f6:34:
                    7e:79:b0:7d:5f:b1:05:04:aa:76:2f:c1:58:16:c2:
                    17:02:ee:83:f8:65:d7:cc:2e:63:b4:b1:ce:e4:16:
                    c7:5a:c6:ac:ee:db:51:02:d3:40:98:8c:8a:a4:c8:
                    4b:57:14:ac:36:0d:26:1f:f0:24:d7:7e:57:d4:af:
                    91:17:66:82:70:a0:22:b8:74:a4:c7:aa:27:50:10:
                    30:d2:76:7c:e6:bd:21:65:58:49:b9:04:44:07:f0:
                    40:32:77:31:76:e2:ba:2c:20:74:3a:9e:95:28:92:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:79:74:E5:67:DD:34:49:35:25:72:F9:43:3B:CB:34:BB:D0:0E:D9
            X509v3 Authority Key Identifier:
                keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:70:40:a4:69:6d:98:06:3d:38:5d:77:66:49:5f:46:1d:b8:
         1d:a6:5c:3c:51:bb:04:d8:22:bd:38:fb:dc:b0:f4:39:51:30:
         fa:ce:d6:d7:5d:ab:d0:ed:ef:66:82:c5:01:1b:d3:ac:33:96:
         c0:d1:04:69:12:03:60:f4:66:17:02:5e:81:10:28:2f:5a:6f:
         6c:30:3b:a6:70:67:a9:24:a0:a7:cd:0e:93:a8:1b:e3:10:59:
         7d:51:2b:61:f2:44:85:25:d7:b8:00:cb:b3:68:ce:02:58:35:
         fc:88:19:86:c4:48:20:05:36:4e:db:c0:73:f4:fc:c2:f0:25:
         fb:a8:2b:a0:dd:f1:70:c1:a7:56:9a:49:16:1f:e2:d1:fe:03:
         0b:2c:8f:8d:85:12:1c:56:47:04:d8:52:94:1b:0a:5d:c9:0c:
         85:94:24:49:16:eb:59:d7:d6:8e:7e:98:6d:b3:15:20:38:37:
         f9:75:66:1b:f7:75:a9:18:af:ee:eb:57:36:99:f1:a1:a4:24:
         63:36:b1:5f:2f:24:b5:16:f0:24:f8:1a:8f:bb:06:87:13:ae:
         77:23:97:ab:67:34:ad:64:9e:fd:cb:6d:bb:0e:e4:b0:2c:23:
         84:38:07:fc:f6:f3:41:ae:da:d1:84:49:6d:8f:d9:e3:33:9a:
         5d:3f:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:36:30 2026 by rpki-client