Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File:                     HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier:          jZmTLQ+3/1pig+wD2WpSC+hJdJVBq+vmguV+TTdpKcc=
Subject key identifier:   FB:7E:5E:10:CB:CC:94:18:D3:12:97:89:27:31:9F:B6:8A:89:D2:B7
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer:       /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial:       019EBF918CE007B1D8AF47F4CF8AC26E1805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number:          022D
Signing time:             Sat 13 Jun 2026 06:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:47 +0000
Files and hashes:         1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: NKvYlKk4N2kGmbptnx3aLP0Ed0gMtvnZAO54q6peu4Q=)
                          2: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
                          3: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
                          4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:8c:e0:07:b1:d8:af:47:f4:cf:8a:c2:6e:18:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
        Validity
            Not Before: Jun 13 06:00:47 2026 GMT
            Not After : Jun 14 06:00:47 2026 GMT
        Subject: CN=fb7e5e10cbcc9418d312978927319fb68a89d2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:bf:68:fd:b6:31:2d:04:3c:e7:8f:42:12:
                    47:58:78:d8:60:30:c8:7e:62:a4:43:f6:d3:89:08:
                    36:d2:06:56:85:0a:42:50:19:2d:81:17:89:27:a8:
                    41:66:38:64:78:79:de:07:9f:98:cb:c8:6a:36:06:
                    84:43:eb:96:49:2e:25:9c:3b:b9:d7:29:60:83:c6:
                    f4:29:81:be:73:f3:98:1a:b5:1a:5c:8f:54:cf:1d:
                    aa:e9:55:40:16:f2:84:12:66:9e:93:74:92:53:29:
                    0d:a1:91:85:ed:41:c1:6b:ec:d6:fd:5b:43:41:ff:
                    20:47:87:82:f4:67:81:5f:7c:b5:7b:d4:f3:02:a1:
                    4f:0f:ed:fb:18:80:fa:0c:59:00:6d:82:3c:90:16:
                    e0:b8:f4:a5:c8:8f:dd:9a:8e:06:20:83:ef:85:92:
                    1d:dc:e9:52:8a:0b:ed:c3:c0:6a:2c:57:44:ab:d3:
                    ff:33:65:16:4e:c6:12:57:59:84:e0:64:97:ee:08:
                    eb:11:09:e7:0a:ee:64:0d:a3:02:5e:77:97:54:c6:
                    a3:a3:07:8f:1e:a8:a3:8c:25:3c:7d:2e:51:60:58:
                    4d:4c:f8:b9:bc:0f:8a:9e:22:1e:72:c5:37:d1:06:
                    e6:40:c4:ce:bb:4c:7d:df:b1:e1:51:af:dd:97:3b:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:5E:10:CB:CC:94:18:D3:12:97:89:27:31:9F:B6:8A:89:D2:B7
            X509v3 Authority Key Identifier:
                keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c7:8b:01:f4:83:6f:36:f3:a9:fd:34:fc:a2:18:30:66:df:
         a6:2f:08:91:62:a0:d2:0d:c2:a9:86:81:d7:2f:10:2c:c4:2d:
         75:16:f1:87:f8:97:36:26:cf:4a:6f:10:f3:9e:66:56:76:91:
         84:41:31:54:85:c6:2b:5b:7f:d2:6f:1b:c5:da:c5:b9:37:ba:
         b9:41:33:fb:4a:21:bc:d1:f7:b1:89:44:2c:20:27:c8:ef:0a:
         a7:d8:96:c5:e5:5a:db:d2:de:7d:ac:dd:f1:88:48:6e:75:20:
         09:09:4a:04:3b:51:6a:a1:3a:41:0d:7b:b5:ce:48:c8:05:23:
         b2:3b:94:ec:a5:70:31:e3:a8:84:76:4c:00:c7:d7:24:6a:23:
         84:2d:b4:99:d1:e0:a7:6e:a2:a6:cc:51:9c:96:f6:e2:32:28:
         3e:d6:5b:ec:9c:f0:8a:27:10:b7:64:ff:75:c5:fc:1b:24:fc:
         9a:fe:77:08:52:54:36:02:a0:a1:8e:ba:41:67:1b:0d:90:b3:
         d1:9d:56:dd:cd:a4:d9:bd:fb:7d:e9:04:0a:bb:7a:ea:29:66:
         8f:06:40:cf:ec:e7:1f:19:d2:7d:3f:65:74:99:3a:c3:09:df:
         23:2d:ac:d4:83:6a:5b:65:10:3a:df:04:68:b4:e3:3e:de:e1:
         74:40:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:30 2026 by rpki-client