Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File:                     Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier:          c/VVSAp8osXKlJfTTS6e97Ik9bOwwZwAp4aHxod5bJM=
Subject key identifier:   13:0C:23:67:29:2C:E8:42:99:C2:E0:BF:3D:FB:90:23:53:06:AC:0F
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer:       /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial:       019EC0A44ACC6FA1B906EC5B61FEF5F175A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number:          1178
Signing time:             Sat 13 Jun 2026 11:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:52 +0000
Files and hashes:         1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: cuOzzwhlpBD0tRAbGt2SlgXfNRlLhl+8OryoEwOMU/U=)
                          2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:4a:cc:6f:a1:b9:06:ec:5b:61:fe:f5:f1:75:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
        Validity
            Not Before: Jun 13 11:00:52 2026 GMT
            Not After : Jun 14 11:00:52 2026 GMT
        Subject: CN=130c2367292ce84299c2e0bf3dfb90235306ac0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:48:04:dc:ff:d9:ad:22:c1:2f:3c:ca:3d:
                    09:51:6c:2a:6c:63:63:4f:71:bc:d3:eb:da:e7:13:
                    16:27:73:b3:ac:8f:e9:12:ee:10:ef:55:95:a7:eb:
                    e3:b8:62:ec:89:90:21:14:58:3b:fa:eb:f6:10:ab:
                    64:32:02:93:2b:b4:f6:3d:ea:ea:b7:62:9b:ee:9c:
                    56:ae:43:47:50:03:25:68:58:d2:2f:7a:13:6a:12:
                    0d:20:71:c5:d8:9b:8b:2a:9b:12:2e:9e:3b:be:0c:
                    ab:a6:93:71:35:02:19:35:0f:54:a7:f5:5c:2d:46:
                    fd:46:7e:81:97:07:46:ab:53:07:66:3d:46:e5:7d:
                    48:9f:14:12:87:7f:8b:ca:10:c6:89:79:b2:20:f7:
                    0b:af:b5:1f:be:02:95:9b:8e:e1:fd:1e:97:68:0b:
                    a7:ee:7c:2c:88:17:f0:f3:ce:e7:03:09:04:f9:de:
                    25:df:5c:5c:85:db:a4:4f:aa:c0:0c:8c:98:47:93:
                    9b:d1:c2:b7:e2:7a:23:35:d7:d4:bb:53:0a:b7:d3:
                    8e:7d:c7:64:11:2c:08:61:5e:48:e8:82:0a:42:9d:
                    f1:08:ee:ed:54:59:35:f5:2b:22:2a:13:a1:62:37:
                    4a:d7:71:6c:f6:fe:56:cd:fd:2f:f5:63:74:26:f6:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0C:23:67:29:2C:E8:42:99:C2:E0:BF:3D:FB:90:23:53:06:AC:0F
            X509v3 Authority Key Identifier:
                keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6c:0e:ab:e7:70:39:18:40:b1:89:a8:c6:f1:91:0a:51:45:
         e2:5e:af:a6:9f:fd:76:9e:65:50:21:23:3c:27:ad:db:7b:97:
         df:c6:00:c7:f2:26:c2:b7:53:1e:3a:31:67:54:47:89:b0:0d:
         51:e8:49:73:e9:e3:a8:8f:0f:d3:22:2c:23:f3:8f:63:99:b4:
         ce:a8:b4:2f:8f:14:91:e6:25:e2:73:f9:8d:cf:1d:22:8f:66:
         61:55:79:0b:0c:ff:a2:60:6d:21:b6:a5:0f:6d:83:2c:8a:e1:
         22:a4:74:b9:63:4c:f9:15:56:85:be:bd:6c:11:9a:0b:05:28:
         0f:28:68:4c:ea:e8:67:30:cb:e2:1c:f5:25:c0:47:50:ad:fc:
         f1:85:e3:c3:7f:8f:01:73:34:74:86:76:e9:83:e1:a5:75:1d:
         71:e6:c4:39:86:70:af:b8:b6:28:f0:61:94:da:d9:75:36:09:
         b7:42:18:42:64:99:6c:b1:1e:1e:d6:52:08:a5:05:94:83:e4:
         4b:68:91:87:7f:71:1c:2b:2e:5b:c5:57:d7:bb:d0:7c:de:0b:
         51:cd:eb:bb:0d:22:eb:ba:eb:18:8c:a8:3d:7e:96:45:08:db:
         fd:1b:53:08:5e:66:9e:fe:2d:e2:44:7b:5d:1a:26:4d:0f:14:
         66:24:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:41:54 2026 by rpki-client