Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File:                     HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier:          tfJP3oZwtbK8Q8fovVPvs/t36mDFlhgqWtwwOCMjiJY=
Subject key identifier:   9B:10:3E:3B:2E:0D:ED:D1:28:83:A6:04:07:39:60:AA:D3:05:45:B0
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer:       /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial:       019D9A073BA52A556C09FF0EC3BBABE2B9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 06:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:58 +0000
Files and hashes:         1: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: /VcZL8GikO2m1KUuh9Xj9pqhN/QmdUssxnXDxDoDHSg=)
                          2: a0cVwY782bVLctNvuUYwvwuDYXc.roa (hash: 3BEBxuA8q6f/xOJc9Z5fI70F8QjqsLEuZxOTHMXzCdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:3b:a5:2a:55:6c:09:ff:0e:c3:bb:ab:e2:b9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
        Validity
            Not Before: Apr 17 06:00:58 2026 GMT
            Not After : Apr 18 06:00:58 2026 GMT
        Subject: CN=9b103e3b2e0dedd12883a604073960aad30545b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:b4:b1:19:aa:12:95:37:6c:45:7e:a0:74:
                    95:a3:71:cf:51:0c:d3:58:fb:4f:8e:03:98:08:e8:
                    88:8b:a8:56:03:e5:5b:ab:79:f2:0d:0c:3c:19:75:
                    03:f9:82:82:49:c5:5b:4f:2e:27:5e:55:f9:bc:d0:
                    e9:b5:4b:94:d6:4c:c3:d1:b7:cb:1d:ef:01:0b:04:
                    ba:f8:f9:83:97:3a:3f:00:77:87:38:d8:86:97:25:
                    32:43:a7:b9:7f:2a:52:ae:62:3f:61:f2:2e:e4:4e:
                    47:d8:c1:7a:93:ff:85:a0:13:54:89:e9:43:62:f7:
                    b8:0e:f4:11:19:b4:84:90:76:8a:81:00:48:b8:01:
                    1f:b8:46:1e:f3:27:e3:68:2c:55:1d:fa:45:6b:4c:
                    e4:e0:b6:d9:5e:fc:06:17:91:3c:f2:4b:e2:5f:cd:
                    69:58:f1:99:07:a1:a2:35:bb:96:df:48:c4:f7:24:
                    d8:2f:16:b3:dc:64:fd:8d:4f:da:5c:dd:f6:ce:76:
                    ba:6f:cf:15:49:4e:13:52:2b:b4:d5:dd:27:4b:03:
                    0b:59:6b:e1:17:1a:4e:ca:07:7b:56:79:7e:0d:9c:
                    1c:38:89:33:b7:4a:d1:94:da:90:78:1e:73:7e:87:
                    27:79:54:2e:20:2b:9b:61:14:95:fb:da:c7:28:1b:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:10:3E:3B:2E:0D:ED:D1:28:83:A6:04:07:39:60:AA:D3:05:45:B0
            X509v3 Authority Key Identifier:
                keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:bd:37:ed:26:f5:d5:b6:7e:cb:26:88:51:1a:af:43:ad:39:
         c8:75:a0:97:44:b1:88:39:b5:71:cc:69:0f:e1:13:10:96:d5:
         2a:04:db:37:52:8c:eb:ce:49:b7:61:2f:f4:b5:38:29:e2:4a:
         ea:36:35:40:68:c9:4b:81:36:7f:c3:72:83:14:eb:66:99:00:
         56:74:d9:67:0a:4b:b7:28:e3:21:5e:e0:b7:35:7e:99:42:b3:
         4d:05:c7:67:0e:dd:a6:ef:86:a7:e8:07:3b:63:ba:0c:de:16:
         d6:85:74:ea:1b:7c:75:10:df:97:4c:9a:fa:3f:e6:d4:87:93:
         2a:7d:48:da:a9:5e:6b:c5:89:0f:1e:66:e2:bb:72:cc:3e:b4:
         b8:95:b3:3e:c1:fc:23:49:d5:f6:42:2c:b6:b4:b9:f9:10:e1:
         ec:6d:25:33:fb:15:40:fa:7f:62:1c:67:b1:a1:2e:52:75:b8:
         cc:be:1b:37:10:26:52:a4:bd:12:40:83:3f:16:90:f8:24:37:
         5e:94:f4:99:f8:02:20:52:70:4a:43:c6:13:5e:13:41:f2:bc:
         f7:6d:9d:22:d6:ad:0e:af:ac:80:a2:18:c5:a1:9c:f5:c4:c4:
         8a:dd:d4:a2:35:dd:3d:0a:94:14:34:46:eb:a1:ea:26:18:c3:
         c3:e6:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:06 2026 by rpki-client