Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File:                     HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier:          AwZ2CSGxJBdHv8j9X6dBoEK4ME7CPjczCEQLL9NQV9k=
Subject key identifier:   48:5B:AA:FA:C8:D4:3E:62:7B:48:BC:02:D9:35:1E:81:F3:2E:A3:32
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       019EC1EDC14BAAA67187088250675B140477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number:          14EE
Signing time:             Sat 13 Jun 2026 17:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:44 +0000
Files and hashes:         1: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: NIfPJJQmSckb28TBtQ8wu1p0i0hf9wAf7mLwrYvlQeM=)
                          2: WrV4ZemJwrw_kjB05-5Id3wYxlE.roa (hash: eepRF61Uwq1JqMLzpuul90ksZb6fVRDXJtYxt1swjFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:c1:4b:aa:a6:71:87:08:82:50:67:5b:14:04:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Jun 13 17:00:44 2026 GMT
            Not After : Jun 14 17:00:44 2026 GMT
        Subject: CN=485baafac8d43e627b48bc02d9351e81f32ea332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:2f:dc:a6:74:c8:d8:7a:b6:2c:23:71:ef:
                    29:e6:e5:21:31:52:85:4d:c7:34:71:57:06:b2:97:
                    28:95:1b:9e:9f:62:d9:9e:7a:f3:22:db:58:0c:85:
                    37:8a:07:af:93:a4:c6:89:b2:14:64:02:2d:b9:b8:
                    bc:cb:62:3a:ae:36:4c:f7:cd:0f:e1:6f:3f:33:dc:
                    ca:35:e7:c3:52:84:42:bf:75:dd:43:7d:05:ce:d8:
                    1a:a3:97:98:f1:ee:af:88:31:54:17:32:1e:a5:80:
                    72:90:8d:26:26:dd:0c:26:0e:77:1e:39:c5:3e:14:
                    50:5d:57:fa:8a:6d:eb:12:9c:64:17:15:b3:fb:de:
                    be:98:48:c4:d3:65:11:4e:7e:39:b8:31:e1:60:fc:
                    5b:b6:48:4a:fb:61:5b:43:2d:e4:63:68:04:7f:8d:
                    84:f9:33:66:71:73:ad:b3:09:55:a3:e1:08:f2:64:
                    ab:03:1d:9f:c0:41:82:e7:25:0d:11:dc:56:4c:b9:
                    b6:93:41:17:cf:c1:e6:35:74:c5:13:73:49:bf:78:
                    ac:41:3e:f8:21:99:e0:6c:72:f4:f8:5e:88:61:fc:
                    a9:68:cc:b8:58:b4:8f:fe:dd:d7:c3:65:e2:e1:2c:
                    af:78:ec:63:d8:db:e4:88:ae:99:f2:94:55:82:76:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5B:AA:FA:C8:D4:3E:62:7B:48:BC:02:D9:35:1E:81:F3:2E:A3:32
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:24:f4:02:11:45:74:ad:cb:42:25:bb:0d:1c:1e:bb:49:0c:
         9c:b7:24:70:eb:85:06:31:7e:32:f3:2b:f8:be:66:3a:5a:58:
         db:c4:db:09:c0:09:43:3f:46:50:03:dd:bd:ac:e3:47:ba:58:
         e6:89:ff:7f:c3:69:3f:ac:19:d6:f3:50:ef:2d:b2:0e:b7:6d:
         74:9b:75:60:9d:ed:04:a7:cc:f1:cc:ac:9c:17:ae:77:bd:7f:
         1d:b9:11:9b:33:40:5d:47:48:d6:24:15:fd:69:91:69:8d:19:
         56:a7:74:e5:73:d5:03:ad:c7:a7:dd:6a:cd:53:fc:25:14:60:
         49:2b:be:34:0d:06:e6:9d:f7:aa:4e:b3:1a:9b:51:bb:87:a2:
         ad:67:5a:d7:01:06:44:8b:1a:5e:76:c5:a8:8b:ee:ca:e1:ee:
         74:bb:7b:3a:a9:29:c2:9e:9c:60:35:ff:9a:53:ce:53:7b:49:
         09:58:4a:8a:45:b4:22:62:31:f7:f7:d3:bd:fb:20:52:e5:86:
         d8:77:74:12:53:98:9a:76:5a:01:9b:32:45:31:b5:35:a4:60:
         38:e1:b5:d1:60:2e:ca:b9:a4:88:cf:a9:50:92:b3:4e:1e:43:
         9d:a4:bb:f7:b3:d0:59:39:3b:52:c7:5b:ef:cf:19:4a:bf:ea:
         05:08:1e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7cFLqqZxhwiCUGdbFAR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZmIwODdmZmI3ZjYxY2UxMTNmNjkzNDVlNGQ1MGExMTM4
MDhmZWEwHhcNMjYwNjEzMTcwMDQ0WhcNMjYwNjE0MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg0ODViYWFmYWM4ZDQzZTYyN2I0OGJjMDJkOTM1MWU4MWYzMmVhMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiQv3KZ0yNh6tiwjce8p5uUhMVKF
Tcc0cVcGspcolRuen2LZnnrzIttYDIU3igevk6TGibIUZAItubi8y2I6rjZM980P
4W8/M9zKNefDUoRCv3XdQ30Fztgao5eY8e6viDFUFzIepYBykI0mJt0MJg53HjnF
PhRQXVf6im3rEpxkFxWz+96+mEjE02URTn45uDHhYPxbtkhK+2FbQy3kY2gEf42E
+TNmcXOtswlVo+EI8mSrAx2fwEGC5yUNEdxWTLm2k0EXz8HmNXTFE3NJv3isQT74
IZngbHL0+F6IYfypaMy4WLSP/t3Xw2Xi4SyveOxj2NvkiK6Z8pRVgnZngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhbqvrI1D5ie0i8Atk1HoHzLqMyMB8GA1UdIwQY
MBaAFBz7CH/7f2HOET9pNF5NUKETgI/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2Et
NjlhYTUzYzY5ZDU0LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2EtNjlhYTUzYzY5ZDU0
LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0yT0AhFF
dK3LQiW7DRweu0kMnLckcOuFBjF+MvMr+L5mOlpY28TbCcAJQz9GUAPdvazjR7pY
5on/f8NpP6wZ1vNQ7y2yDrdtdJt1YJ3tBKfM8cysnBeud71/HbkRmzNAXUdI1iQV
/WmRaY0ZVqd05XPVA63Hp91qzVP8JRRgSSu+NA0G5p33qk6zGptRu4eirWda1wEG
RIsaXnbFqIvuyuHudLt7Oqkpwp6cYDX/mlPOU3tJCVhKikW0ImIx9/fTvfsgUuWG
2Hd0ElOYmnZaAZsyRTG1NaRgOOG10WAuyrmkiM+pUJKzTh5DnaS797PQWTk7Usdb
788ZSr/qBQgeag==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:29:48 2026 by rpki-client