Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
File:                     hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json)
Hash identifier:          Ygs//kJgS7Y5SgvTz3xglpSlPFqOBi++iMShuIIAhcI=
Subject key identifier:   C8:72:51:E0:26:E6:74:25:F7:D1:7D:EB:D9:87:7C:6F:6E:5D:4F:A7
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Certificate issuer:       /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial:       019D9962B1808187E767DBC5479C856D79EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
Manifest number:          08ED
Signing time:             Fri 17 Apr 2026 03:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:15 +0000
Files and hashes:         1: cIAjOguDSgqReQ62gGNwhDs3FsM.roa (hash: TFf8FnZKCR2DKzKeOZFiA2ziGDoeOIEoz46aZNZ0n6U=)
                          2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: z6uAOKdaz7VeevLIipU3KpEjK2UV/u4N1/lvdWxiRRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:b1:80:81:87:e7:67:db:c5:47:9c:85:6d:79:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
        Validity
            Not Before: Apr 17 03:01:15 2026 GMT
            Not After : Apr 18 03:01:15 2026 GMT
        Subject: CN=c87251e026e67425f7d17debd9877c6f6e5d4fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:11:a3:86:7f:17:69:7f:98:4b:71:c6:39:
                    25:b4:be:65:2e:c7:6d:bc:f4:1a:d9:5f:b1:07:4a:
                    af:79:b9:a2:b0:40:05:e7:cd:03:bf:d2:b7:95:08:
                    39:b6:5e:44:9e:ae:86:73:2d:1d:bf:c9:ca:c0:5d:
                    42:ea:bb:47:99:cb:eb:db:a9:48:0d:a5:b0:63:4d:
                    1c:ef:1c:b9:ca:18:53:fc:a9:02:df:59:0b:b2:f7:
                    4e:3a:97:89:5a:16:94:00:0c:72:a8:03:87:08:bf:
                    3a:0b:47:b1:77:c4:c1:20:97:cf:11:41:96:45:1e:
                    e8:87:a9:76:09:b4:14:9b:9c:79:04:32:c2:9c:e9:
                    89:b0:45:58:92:54:44:81:9a:07:d6:d1:2c:db:aa:
                    9c:ba:03:df:f9:4e:b7:cf:91:8b:c7:30:29:b0:f5:
                    e3:c9:47:fe:f4:d3:11:ed:7e:b1:71:6f:f0:cd:9e:
                    14:31:33:86:14:15:ad:32:74:d6:44:a5:70:40:a8:
                    85:28:c7:c4:61:d0:34:be:ac:2b:41:2f:d0:a2:56:
                    75:70:3a:e2:19:d8:b4:97:f0:08:bd:1a:0f:ab:fb:
                    4e:86:9c:82:10:0d:43:54:33:4c:15:4b:7b:0c:c7:
                    7e:59:95:60:6a:0a:c2:2c:e4:21:ff:e7:e7:be:a7:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:72:51:E0:26:E6:74:25:F7:D1:7D:EB:D9:87:7C:6F:6E:5D:4F:A7
            X509v3 Authority Key Identifier:
                keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1f:0e:62:39:8f:0e:21:3b:2a:ff:af:dd:1e:95:94:e0:36:
         a6:68:53:8c:1c:70:1d:44:28:1f:b9:7d:1c:5e:f6:08:ae:c3:
         af:10:af:51:96:9e:7e:23:62:a8:9c:9f:3e:8a:36:0b:74:ee:
         b8:09:95:87:a3:52:2a:61:34:8c:07:e7:b4:99:51:dc:67:9a:
         a7:24:3e:d5:59:e0:c5:dc:b7:59:6e:9b:1a:8a:bf:72:b8:47:
         2c:bd:38:b7:94:26:13:8f:f8:88:c7:3f:68:e5:87:5f:b4:9f:
         e3:65:4a:c0:57:ee:67:ab:ac:d4:5c:00:be:17:93:5f:86:cc:
         0d:52:74:15:f0:48:76:62:3e:02:04:35:4c:5f:ba:a4:40:3e:
         2b:90:84:1c:84:d5:3b:86:76:3f:05:4f:1f:1f:15:39:b9:9f:
         0e:21:b3:5d:21:b2:e2:ab:c0:c2:10:f4:cf:b0:49:bd:47:d8:
         5d:44:8b:53:08:05:7d:13:bc:84:c2:78:d2:d8:cf:93:83:d0:
         b8:35:5a:f9:03:f3:7d:79:d4:d8:60:e4:6d:c6:fd:e0:7b:94:
         e3:1e:d5:96:c5:fc:aa:91:ff:c8:5d:ef:5b:1f:53:97:de:26:
         0d:36:ad:1b:78:b0:db:e1:98:12:3d:3a:a1:59:5f:a4:6c:4d:
         82:b7:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:13 2026 by rpki-client