Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File:                     HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier:          ejs6Xis6Pe5FRoSkjcOpNXY/W8XX+70nQlYfertHS8c=
Subject key identifier:   0D:52:06:61:6C:7E:2E:32:C6:41:60:14:E4:77:48:D4:3D:FA:7B:C6
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer:       /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial:       019CA8A16316F2363FDC854DF6068E88BBCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number:          0118
Signing time:             Sun 01 Mar 2026 09:01:14 +0000
Manifest this update:     Sun 01 Mar 2026 09:01:14 +0000
Manifest next update:     Mon 02 Mar 2026 09:01:14 +0000
Files and hashes:         1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: oYZMCOCcWlkU860KPVkzUea6SHH2r2k0NJztoxycTuI=)
                          2: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
                          3: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
                          4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:a1:63:16:f2:36:3f:dc:85:4d:f6:06:8e:88:bb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
        Validity
            Not Before: Mar  1 09:01:14 2026 GMT
            Not After : Mar  2 09:01:14 2026 GMT
        Subject: CN=0d5206616c7e2e32c6416014e47748d43dfa7bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:36:c2:e9:3a:ed:0d:2c:59:59:ea:fd:f7:06:
                    ff:8d:f6:0d:3b:e5:08:34:c3:8b:cc:c4:91:bd:77:
                    de:56:33:75:c7:ca:a0:71:30:8f:7f:c3:62:ca:67:
                    b5:b1:e5:17:af:b9:95:db:85:c4:df:4a:ad:df:6f:
                    cf:6a:de:3b:e5:1e:d4:f4:ff:8e:a1:8e:0c:e3:50:
                    c1:c3:70:aa:fd:3e:88:38:66:c6:77:70:c5:c2:c9:
                    25:b9:c6:38:16:b4:8a:94:e2:06:8c:10:fc:0e:15:
                    5a:07:96:27:4a:0f:34:51:7e:8a:d4:fd:dc:22:59:
                    fb:76:c7:15:ff:7e:6b:c3:0f:0e:14:41:72:e7:a6:
                    9f:af:42:5b:7e:07:64:99:1d:cb:bc:04:c8:52:f0:
                    62:c0:fc:31:7b:e4:86:aa:e6:2a:b6:c6:4e:81:20:
                    61:e4:b0:84:04:8c:31:86:3c:51:46:3f:ba:87:8e:
                    6c:f3:30:57:b8:4b:e3:ba:3b:e6:a6:7f:67:5f:5b:
                    d4:a0:f2:f3:9a:a0:5d:d6:f3:4c:a5:c7:c1:18:5d:
                    b4:47:cd:3d:8e:17:6d:b8:4a:ea:e7:fc:ed:c0:aa:
                    f0:8c:f9:34:dd:bc:8c:ca:af:7d:64:e9:9f:4c:62:
                    41:44:c5:8a:68:cd:e0:d7:f8:fe:05:f9:f0:27:a9:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:06:61:6C:7E:2E:32:C6:41:60:14:E4:77:48:D4:3D:FA:7B:C6
            X509v3 Authority Key Identifier:
                keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:45:a9:39:66:15:67:91:e0:88:d3:f0:3e:a2:c7:2d:62:0d:
         73:77:02:45:37:55:c8:da:3c:d3:e3:0a:79:44:f6:f4:46:b2:
         5c:01:ad:1f:c7:fb:19:fa:1c:76:4d:c0:3a:c5:c9:bb:60:65:
         64:4f:ac:ad:38:76:f7:2b:16:ce:e9:d7:d6:47:0f:d4:e7:db:
         ed:e9:96:f0:16:c7:2b:4c:71:ef:0c:63:16:70:42:c1:43:3f:
         91:4c:a2:84:94:27:5f:12:89:ee:1f:65:fc:ee:fe:a0:84:9e:
         8d:74:2d:37:98:37:58:77:a8:b2:8a:75:4a:d0:35:56:9b:35:
         b1:f1:2d:bf:b9:81:5d:36:dd:f1:97:f9:a0:41:89:3b:66:49:
         be:66:59:57:c0:12:ba:9a:4d:17:94:5f:a9:59:2a:85:e1:bb:
         13:8c:d0:ca:b4:44:91:be:de:dd:b4:d4:06:4d:39:98:e5:ff:
         6e:35:17:66:61:2b:cd:7e:29:ec:d0:88:32:06:8e:e6:8e:f2:
         b5:ff:ca:4a:e9:59:7b:17:2b:89:42:60:e4:3c:1b:32:41:de:
         06:93:77:73:4b:0d:b2:6e:b9:9e:ed:3e:4c:f5:e5:04:49:7c:
         d0:c0:47:99:65:63:8b:e4:a3:cf:3c:9b:ba:ed:3e:ea:34:19:
         ff:1f:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:53 2026 by rpki-client