Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File:                     HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier:          MWU9+0zYQ2kyZ2bgzdNBLcGqpYTOsRGfm558bgCUG1U=
Subject key identifier:   A5:52:BE:32:64:B9:79:72:43:D6:E8:7F:C4:43:AA:98:F7:48:73:24
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer:       /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial:       019EC4137A067D4A2573BFE978983BBFCCBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number:          195E
Signing time:             Sun 14 Jun 2026 03:01:11 +0000
Manifest this update:     Sun 14 Jun 2026 03:01:11 +0000
Manifest next update:     Mon 15 Jun 2026 03:01:11 +0000
Files and hashes:         1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: ZbnoH98c7Kdck+yQUON7xd3CKQc+CLPp1tGh+99Ac6c=)
                          2: oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa (hash: v1OkVWqraYOFjsEZ3LFnKjFEiGungWJLb2B2UAHBg6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:7a:06:7d:4a:25:73:bf:e9:78:98:3b:bf:cc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
        Validity
            Not Before: Jun 14 03:01:11 2026 GMT
            Not After : Jun 15 03:01:11 2026 GMT
        Subject: CN=a552be3264b9797243d6e87fc443aa98f7487324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:7d:30:a3:fe:47:01:23:fd:19:02:36:e5:
                    07:07:40:4f:65:bc:2f:3c:94:6b:8b:cc:d4:8f:a1:
                    3c:18:db:c7:12:37:87:e7:6f:a3:9d:0b:59:a9:83:
                    77:1d:f5:93:5f:37:3b:00:cf:ea:be:7c:73:c0:39:
                    85:99:71:4d:9f:ef:b1:79:8b:af:90:6b:4e:3c:78:
                    a9:5a:e4:ce:5f:ad:f0:9b:9c:8c:b3:54:52:64:c1:
                    0f:72:30:82:61:aa:a7:06:ef:02:5d:96:a4:1a:a5:
                    9f:ab:0d:8e:e5:a2:59:64:1f:9f:8a:ef:90:8d:b8:
                    b7:18:3e:5a:5f:ca:a9:27:03:82:43:61:f3:ad:71:
                    e2:d4:9c:8a:fd:e3:98:55:06:da:c7:14:45:80:75:
                    b9:6a:db:93:ac:6f:0a:0a:d9:2e:2a:d2:f7:f5:ac:
                    04:01:31:22:88:b4:aa:5e:a2:29:c0:85:df:f8:c5:
                    7c:26:f7:82:c4:25:4f:ab:96:b6:9b:35:7f:9f:d8:
                    96:ad:36:84:ab:76:42:53:a6:7c:c0:8f:ec:8c:88:
                    1f:36:14:47:8f:f4:46:ec:f4:17:54:12:bc:a0:74:
                    c4:e5:1d:b0:d9:3a:f2:38:f4:c7:86:a8:a0:78:88:
                    7e:c3:9b:11:d6:47:87:2e:92:3b:a5:74:5a:69:b7:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:52:BE:32:64:B9:79:72:43:D6:E8:7F:C4:43:AA:98:F7:48:73:24
            X509v3 Authority Key Identifier:
                keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:27:62:05:5c:7f:26:47:be:43:c7:0e:87:30:af:80:61:1a:
         1c:2f:76:f4:c5:54:ac:26:e5:1a:5d:f3:27:31:a5:03:37:66:
         d7:ea:28:50:a6:fc:6b:06:f8:f0:f5:00:a4:4f:68:b9:d6:64:
         1a:18:e8:70:3f:85:74:c0:4b:b7:db:6a:2f:51:2d:c8:39:36:
         94:9a:dd:50:8b:03:b0:48:d0:e5:94:a0:21:52:12:c5:da:48:
         66:e0:0f:36:87:f7:c5:73:6f:c7:47:82:bd:3e:01:f4:34:a8:
         d1:a2:26:5d:d5:9b:b7:10:36:b8:a5:59:c5:ce:cc:a3:c5:a7:
         6b:d2:42:11:84:9f:2a:2a:96:f7:c3:52:9e:73:7f:7b:91:5b:
         54:98:ed:13:ff:fd:26:25:03:cc:bd:6e:a4:fc:50:7d:4c:fe:
         a7:21:e9:95:a4:93:e5:fc:68:98:83:ab:4f:95:08:eb:08:e1:
         06:ae:25:03:11:64:58:b8:0f:fa:13:f3:06:d8:77:63:d0:6b:
         8d:3b:1a:0b:b5:d6:4f:af:61:d6:2f:d7:87:a6:ba:78:b8:16:
         e1:a8:f9:b3:39:84:d3:1b:15:d1:5c:40:01:0b:48:c6:d0:bb:
         df:a3:f0:4a:5c:12:58:d1:d7:19:a9:d1:b7:21:f6:42:d5:fd:
         67:3c:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:49 2026 by rpki-client