Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File:                     HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier:          6BCTfl4eh/1XZp4LJwlpRz9l4QfgY++dxb98+XHTvbk=
Subject key identifier:   17:C3:78:37:E5:59:B6:DD:88:2F:B8:4E:48:04:1A:D0:53:14:13:BA
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer:       /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial:       019D9BF57D814BE899D56E1E56DC77436013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number:          0196
Signing time:             Fri 17 Apr 2026 15:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:50 +0000
Files and hashes:         1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: ASu6ZZrR/I2GIHBV3dTsmFt/2RMhbCZ7MGsmFt/0oBY=)
                          2: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
                          3: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
                          4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:7d:81:4b:e8:99:d5:6e:1e:56:dc:77:43:60:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
        Validity
            Not Before: Apr 17 15:00:50 2026 GMT
            Not After : Apr 18 15:00:50 2026 GMT
        Subject: CN=17c37837e559b6dd882fb84e48041ad0531413ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:d5:5d:91:cc:2e:2d:a0:22:15:93:90:ad:
                    1a:d8:8e:a0:99:b4:c0:3c:77:5a:24:a4:cc:5e:f5:
                    f8:11:c8:7c:b6:5b:bd:ea:83:a3:78:47:60:fb:ad:
                    99:0c:60:95:07:18:93:f5:c9:5a:e2:61:7e:55:09:
                    33:49:74:8f:8d:5d:14:42:e3:e6:74:f9:8a:c0:c8:
                    12:5e:dc:c3:2d:ac:0a:5b:f5:c9:96:30:3e:7e:85:
                    2f:ed:b0:af:75:3d:4e:0a:26:bf:cd:72:20:a4:23:
                    eb:98:75:32:23:88:a0:99:3e:88:5a:1e:03:3c:ae:
                    e0:86:18:9c:de:34:fe:a0:82:9f:c6:c5:44:b3:ef:
                    f7:f8:f2:98:b9:c8:9e:8a:ff:bb:5f:71:f6:55:75:
                    ec:16:e6:df:9f:ae:5b:f7:a1:56:a1:b2:a1:5d:b2:
                    1b:88:3f:23:42:6a:6d:37:6c:98:cd:b7:92:23:d6:
                    43:71:41:c1:e9:ca:f5:6f:04:f9:3f:a4:98:6d:1f:
                    af:d6:f5:8f:37:21:40:23:dd:ef:6f:08:db:1a:6c:
                    5c:12:ae:08:1f:a1:f6:18:00:74:e2:db:de:64:c1:
                    e7:08:77:ef:34:df:f6:98:bd:9c:8e:d8:77:c1:46:
                    61:29:79:05:cf:b2:8b:f2:c4:54:20:2c:a7:d2:9b:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C3:78:37:E5:59:B6:DD:88:2F:B8:4E:48:04:1A:D0:53:14:13:BA
            X509v3 Authority Key Identifier:
                keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2d:7d:4f:62:cb:ce:9d:6f:03:8a:71:7a:a6:74:ff:74:27:
         71:6e:19:2a:7d:33:69:4e:b0:06:3d:eb:56:ef:f0:0c:4e:5f:
         dc:88:07:fd:8a:a0:b7:c1:0e:59:0e:46:95:c0:7c:10:fa:f4:
         ce:58:0e:ce:27:81:6b:c6:aa:e8:ee:9f:1a:b3:40:71:f7:fd:
         4f:cd:a1:4b:49:25:58:58:fb:ef:ff:bd:c2:f0:42:79:ed:53:
         42:28:b3:c2:45:c9:b9:79:85:0a:29:b7:e4:24:8d:65:27:bd:
         97:e6:53:ce:d9:bf:ba:57:92:ab:93:55:ee:89:05:7e:cc:68:
         a5:20:8b:7d:4a:ca:9c:29:9f:6e:b4:42:75:89:da:9b:19:f6:
         df:1e:ff:0e:01:5c:e2:2e:cf:4d:d4:b8:19:0b:49:c1:ce:f6:
         41:79:c0:f2:cd:25:b4:41:78:4c:44:c0:bd:07:1b:4d:d7:de:
         3d:f1:4d:54:bc:e0:d1:64:7c:d6:28:90:db:00:53:10:19:65:
         9f:34:83:6c:25:24:08:20:05:9f:f9:d3:89:41:5e:2d:8f:2c:
         6d:af:0b:d2:c3:e7:8a:f6:62:7c:ce:68:ce:1f:1f:6b:23:5d:
         b0:3d:8f:aa:7e:5e:2c:6a:b6:c7:7e:6e:ca:17:ae:76:30:a0:
         1d:a7:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:22:53 2026 by rpki-client