Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File:                     HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier:          sFK79My9bD+h6TtvRZiYdCSZPZBwdUL7nrs4wPvjayU=
Subject key identifier:   CE:74:39:59:B9:25:24:72:55:96:40:6B:F8:B8:14:C3:9B:8A:70:04
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer:       /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial:       019D9962AAC1D92832F573BB3B55B0514FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number:          0FF8
Signing time:             Fri 17 Apr 2026 03:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:13 +0000
Files and hashes:         1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: Bz9TJ0jOGfHGhdpgKGalYwpaU2vVBL45mBhi+fQqohI=)
                          2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:aa:c1:d9:28:32:f5:73:bb:3b:55:b0:51:4f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
        Validity
            Not Before: Apr 17 03:01:13 2026 GMT
            Not After : Apr 18 03:01:13 2026 GMT
        Subject: CN=ce743959b92524725596406bf8b814c39b8a7004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:c6:fb:34:96:c8:d4:c0:d7:ab:6b:dc:f9:
                    6a:de:78:e5:5d:c0:bb:b8:89:f6:5d:93:15:4c:fd:
                    4b:9c:9d:3a:32:cf:5f:8a:8a:e8:6b:22:a7:91:38:
                    f9:57:a1:ca:ec:06:33:fb:64:02:15:66:33:d9:7d:
                    44:1b:15:21:05:58:80:49:bd:2d:db:75:47:9c:e2:
                    36:9d:f1:73:59:a6:46:c4:59:48:22:f9:e5:88:5b:
                    9b:58:5d:37:eb:1f:85:d2:5e:19:ca:a5:22:b9:0d:
                    82:47:3c:15:62:28:c4:b0:e0:7f:85:0c:aa:93:86:
                    08:94:78:6d:52:8e:aa:aa:de:ab:ba:a8:ea:f3:bc:
                    91:96:05:22:33:78:aa:09:9b:14:8c:4a:76:ab:5e:
                    02:e8:45:94:5b:9a:96:9b:eb:3a:f2:dd:10:a1:d5:
                    d5:86:5b:83:38:bd:ef:bc:aa:6a:2c:cd:08:03:59:
                    2c:aa:8a:bf:e6:0c:19:47:8f:31:c4:dd:76:a8:a6:
                    9b:bd:1d:87:1b:f3:a4:da:1e:42:12:3f:03:c9:6a:
                    cf:78:a4:72:97:54:83:85:a7:a8:4a:0e:69:5e:d1:
                    24:2d:57:de:48:45:de:54:22:40:cd:3e:2b:dd:f4:
                    44:b8:f7:f2:76:95:dd:71:75:39:59:75:b4:86:12:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:74:39:59:B9:25:24:72:55:96:40:6B:F8:B8:14:C3:9B:8A:70:04
            X509v3 Authority Key Identifier:
                keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:8e:08:cf:27:4b:44:7c:fd:5e:57:d7:ea:ea:1a:d9:bb:
         8d:01:31:b2:f8:7d:d9:e6:a4:2a:97:04:86:2f:fc:c5:6d:65:
         ca:40:d4:75:74:92:95:22:a8:41:66:a7:34:bd:d9:78:71:25:
         e7:30:00:0b:4c:21:4c:a1:43:c9:03:2e:b5:36:17:dc:94:cd:
         15:44:c5:c4:16:19:fb:5b:e6:d6:32:4b:9c:58:1e:99:fb:9d:
         8c:a9:26:40:28:dd:0b:88:01:f0:9a:de:8e:3c:f4:8f:57:49:
         eb:ff:a3:a3:b8:1e:a3:46:f0:7b:35:d2:d9:88:e9:16:76:68:
         1d:10:54:eb:0a:ad:2f:40:38:ce:ca:45:54:7e:07:dc:f8:9c:
         72:1b:ac:fd:ed:ac:12:c7:c4:03:04:6c:53:1e:58:89:03:c3:
         43:10:eb:b1:97:5a:6c:5a:35:e7:c3:7c:3f:72:58:e4:9f:bf:
         fa:30:6f:b0:52:13:ff:8e:97:ce:56:fa:b0:a4:7a:1b:34:4c:
         64:22:65:19:23:f8:7a:67:1f:75:0e:2c:ce:37:3b:8f:70:8a:
         07:eb:6c:1b:ed:c8:4f:6f:66:e9:9b:93:f4:b8:03:36:5c:fb:
         10:07:14:9a:c0:9a:66:76:05:fe:85:7b:b2:d0:95:ae:5c:f9:
         06:93:19:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYqrB2Sgy9XO7O1WwUU/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWI4NTYyNjE1ZjUxMTBkMzU1MWY4ZWM1ZGQwNTZmYjBh
NDhhYmEwHhcNMjYwNDE3MDMwMTEzWhcNMjYwNDE4MDMwMTEzWjAzMTEwLwYDVQQD
EyhjZTc0Mzk1OWI5MjUyNDcyNTU5NjQwNmJmOGI4MTRjMzliOGE3MDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1vG+zSWyNTA16tr3Plq3njlXcC7
uIn2XZMVTP1LnJ06Ms9fioroayKnkTj5V6HK7AYz+2QCFWYz2X1EGxUhBViASb0t
23VHnOI2nfFzWaZGxFlIIvnliFubWF036x+F0l4ZyqUiuQ2CRzwVYijEsOB/hQyq
k4YIlHhtUo6qqt6ruqjq87yRlgUiM3iqCZsUjEp2q14C6EWUW5qWm+s68t0QodXV
hluDOL3vvKpqLM0IA1ksqoq/5gwZR48xxN12qKabvR2HG/Ok2h5CEj8DyWrPeKRy
l1SDhaeoSg5pXtEkLVfeSEXeVCJAzT4r3fREuPfydpXdcXU5WXW0hhKnswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM50OVm5JSRyVZZAa/i4FMObinAEMB8GA1UdIwQY
MBaAFB6bhWJhX1EQ01UfjsXdBW+wpIq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAt
NTM5YTBmMjY2ODRkLzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAtNTM5YTBmMjY2ODRk
LzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFyOCM8n
S0R8/V5X1+rqGtm7jQExsvh92eakKpcEhi/8xW1lykDUdXSSlSKoQWanNL3ZeHEl
5zAAC0whTKFDyQMutTYX3JTNFUTFxBYZ+1vm1jJLnFgemfudjKkmQCjdC4gB8Jre
jjz0j1dJ6/+jo7geo0bwezXS2YjpFnZoHRBU6wqtL0A4zspFVH4H3Picchus/e2s
EsfEAwRsUx5YiQPDQxDrsZdabFo158N8P3JY5J+/+jBvsFIT/46Xzlb6sKR6GzRM
ZCJlGSP4emcfdQ4szjc7j3CKB+tsG+3IT29m6ZuT9LgDNlz7EAcUmsCaZnYF/oV7
stCVrlz5BpMZvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:10:26 2026 by rpki-client