Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File:                     HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier:          pyxG9fUngF1w4fohatbjujsC36GmjsD+X5SGRn2X1Ps=
Subject key identifier:   91:11:56:D3:27:EE:0F:99:19:68:10:1A:BA:69:05:A8:C6:3D:6F:87
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer:       /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial:       019D9774267B7D74D2380D19BB1535041D92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number:          02A1
Signing time:             Thu 16 Apr 2026 18:01:04 +0000
Manifest this update:     Thu 16 Apr 2026 18:01:04 +0000
Manifest next update:     Fri 17 Apr 2026 18:01:04 +0000
Files and hashes:         1: E5g4hZH3LlY5gRj3X1IHc_TlYQg.roa (hash: X9C9qUlaNCOlK6+AuNAgEerAXM1G27T5Vc1zplG2pmE=)
                          2: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: pfSH19BU2sGrloe8rnvr22ssUcVF/C0SCxxcGVfAJ8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:74:26:7b:7d:74:d2:38:0d:19:bb:15:35:04:1d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
        Validity
            Not Before: Apr 16 18:01:04 2026 GMT
            Not After : Apr 17 18:01:04 2026 GMT
        Subject: CN=911156d327ee0f991968101aba6905a8c63d6f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:a0:96:80:b5:83:18:b7:18:3a:79:e2:45:
                    c6:19:eb:03:b1:1e:2e:b5:af:c1:b4:ff:58:21:e7:
                    b3:21:91:59:d6:3a:19:06:50:17:9a:17:7c:79:ad:
                    ef:e3:e4:4d:bb:cc:fb:79:4a:cc:5f:0d:86:e6:37:
                    fd:8c:f4:a0:ae:b1:1d:33:e8:a9:e8:2d:59:b8:ac:
                    ea:70:70:3a:60:ec:77:3d:fb:07:a0:21:e9:d0:8c:
                    04:b5:8e:8a:05:69:a1:28:8c:33:fe:bc:56:36:30:
                    a6:28:25:7b:9e:fd:14:00:67:f5:1a:db:9c:e4:0d:
                    74:77:a0:77:9c:49:b0:b6:6f:a6:90:39:e6:af:ad:
                    12:d4:38:68:e6:7b:0e:1b:69:4f:4f:cf:ac:eb:b8:
                    8e:0b:27:64:0d:fa:75:44:f1:20:a1:6a:42:83:dc:
                    3b:bf:b5:ac:09:ce:cf:7a:26:1c:58:dc:b3:19:92:
                    f4:a6:1c:7c:a2:33:1c:e2:af:80:dd:bd:db:89:9e:
                    e5:f6:70:aa:57:ca:47:46:8c:e0:d8:20:44:b8:b3:
                    6d:96:1c:d7:e7:6a:7a:f7:6e:43:b7:52:6f:98:c6:
                    61:e6:5f:6c:a1:d3:a4:f7:1f:1a:16:d7:2d:1a:54:
                    98:7b:b1:e2:a7:c4:d8:71:d4:f8:2b:ff:ae:e2:0d:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:11:56:D3:27:EE:0F:99:19:68:10:1A:BA:69:05:A8:C6:3D:6F:87
            X509v3 Authority Key Identifier:
                keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:52:1f:3a:49:c3:78:0c:17:36:ea:ee:24:33:f7:9a:08:65:
         11:63:0e:9f:ba:9c:a0:70:33:c3:1d:f2:da:85:d9:53:15:c6:
         66:ac:f1:f2:bb:73:b6:a0:c4:74:08:3b:31:5f:34:e9:8e:b8:
         3c:57:21:7f:2e:7a:c0:be:90:a5:51:bb:fc:ce:68:81:96:50:
         1e:b5:9c:a8:d0:1f:e6:98:66:fe:13:9b:cf:c9:9f:09:fc:63:
         c5:7d:4b:2b:71:f4:dd:3c:c0:c6:ed:4e:db:a2:f0:48:89:e3:
         1e:30:0d:71:d0:39:08:fc:86:4a:83:9c:e6:89:cb:7d:24:4f:
         2b:54:42:d2:79:82:64:c1:fc:37:dd:64:cf:2a:41:c8:c3:42:
         d7:52:82:89:ca:7e:b1:75:14:3a:2c:bb:e7:76:fc:65:76:b6:
         4a:3c:5c:95:09:b8:68:9e:f0:c0:1c:84:e9:cd:9b:d2:68:af:
         0d:20:20:a7:d4:7a:de:0a:69:19:24:6a:d1:34:50:a9:f7:91:
         56:d7:da:05:40:54:ba:44:9b:1e:b8:2c:c8:6a:b8:7c:a9:cc:
         37:50:b9:91:58:d6:00:fd:21:21:31:b8:96:ec:5f:4e:36:a3:
         24:2f:a6:74:6a:17:d9:4f:79:23:3f:03:4b:0e:59:d1:eb:6c:
         49:bf:3f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:39 2026 by rpki-client