Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File:                     HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier:          u5U0VUfw6ypvp1fnC2x172BdvL/uV/h70nGeSTT6Lro=
Subject key identifier:   E0:E9:E1:FF:8E:26:D4:2B:A0:C0:44:A2:CA:70:D1:97:E6:39:EB:A1
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer:       /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial:       019EBE7FDBBB04299793FA2F974220201B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number:          0E5C
Signing time:             Sat 13 Jun 2026 01:01:50 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:50 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:50 +0000
Files and hashes:         1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: nevGwX0u91kW5fUqfzrEDZEnS+RMn5stNWG0NmA5NYw=)
                          2: vzj6rF0z62czOMRE3LL5w-joOaE.asa (hash: aMRvdtrb5tp1XwhqqIQw7J458t/ccfLhiI6qcMyDJPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:db:bb:04:29:97:93:fa:2f:97:42:20:20:1b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
        Validity
            Not Before: Jun 13 01:01:50 2026 GMT
            Not After : Jun 14 01:01:50 2026 GMT
        Subject: CN=e0e9e1ff8e26d42ba0c044a2ca70d197e639eba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:a0:35:bd:e4:62:36:8d:85:02:95:d7:20:
                    26:f2:5c:5e:c6:2b:c0:53:bd:61:9f:9f:e0:3a:8f:
                    7f:69:c2:98:2b:49:5d:47:36:32:e4:b6:82:96:5d:
                    2a:d0:62:3a:ed:d7:4b:a6:fa:db:82:1b:62:93:97:
                    13:32:d9:27:7c:c7:c1:db:ea:ee:75:e7:e5:80:2a:
                    4d:54:f3:c6:a3:0f:f5:c1:f2:bc:d3:2f:cd:dd:f0:
                    ba:e3:ea:d9:ae:39:97:ba:b3:97:f5:66:6e:29:51:
                    40:92:6f:6b:d4:6f:0a:70:e3:ae:74:35:9b:6a:54:
                    b6:b8:22:86:c6:87:da:86:9c:13:bc:39:3e:19:ef:
                    f0:27:12:b6:54:3f:8a:ae:a6:68:c1:9c:4d:fb:13:
                    b8:a8:57:7b:e9:31:e6:68:07:5b:7d:35:87:71:81:
                    ab:43:88:ec:6e:76:85:e2:95:f9:8e:f2:bf:7a:34:
                    27:31:49:d7:ae:ff:a8:9e:e9:65:e5:52:68:fe:c0:
                    b3:7e:47:41:7a:3d:55:45:a8:dc:b7:ed:59:dd:63:
                    78:3e:3b:40:44:ac:37:41:2f:5f:e6:e3:97:69:ca:
                    f5:0d:48:c8:6d:2d:5c:90:ed:79:15:90:53:88:db:
                    3b:d7:9b:7d:17:e1:9e:3f:26:cb:1b:25:f2:70:21:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E9:E1:FF:8E:26:D4:2B:A0:C0:44:A2:CA:70:D1:97:E6:39:EB:A1
            X509v3 Authority Key Identifier:
                keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:03:66:ff:90:e7:a6:c5:60:96:09:78:d3:7d:b6:68:13:98:
         0c:1c:7c:06:d0:50:b7:11:99:f1:37:85:55:74:ef:e4:b3:c2:
         b4:36:12:c3:c7:30:54:53:c1:65:9f:d4:5f:c9:e0:4b:69:42:
         0a:38:3c:1f:ed:18:3e:f6:30:f7:f5:0b:63:22:76:39:85:04:
         67:26:a2:7a:d3:17:7e:6d:02:aa:10:1f:90:49:b4:09:48:4e:
         dc:96:d7:16:0f:8e:0d:83:62:10:f1:75:f0:00:62:ef:86:78:
         19:8b:bc:89:46:fe:02:95:cd:6b:e4:d8:f3:5a:18:bd:68:42:
         99:9c:96:dc:87:f9:ca:26:a0:6d:7a:0f:a6:e6:a0:8a:00:30:
         ad:7d:a9:ae:ac:14:7b:a6:f5:73:78:f6:15:af:5d:2f:3a:17:
         bb:7d:8d:f2:1e:b1:d8:76:56:7b:61:68:e4:c4:08:60:b7:66:
         8a:67:47:43:38:2c:80:b4:a0:50:35:7c:da:6b:9c:93:a4:8f:
         37:70:5a:ae:cf:1f:a5:6a:62:16:80:11:24:1b:e6:68:c7:68:
         dc:df:17:a3:7e:76:36:b7:e9:a0:b2:61:9a:84:a4:17:f4:f4:
         25:ce:51:bd:d9:b8:6f:9c:c6:76:e7:2b:31:05:cd:3e:ef:64:
         af:74:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:50 2026 by rpki-client