Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File:                     HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier:          U1tMBk72FrS0I184/3XuuiJbNYwoNuMctJVJv8FMx1k=
Subject key identifier:   82:54:F3:72:98:BD:53:08:22:BA:84:D3:F4:6C:16:53:6B:80:96:ED
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer:       /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial:       019D984F84F5102F6BA8245EEAE52FD68542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number:          148F
Signing time:             Thu 16 Apr 2026 22:00:41 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:41 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:41 +0000
Files and hashes:         1: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: 0tm6TyUE9IF4oCxA53pb9AYl9C9pp10xEZZYjTPdCc8=)
                          2: xjZQLy8vRD61BJY6zdBKr_UBjVY.roa (hash: SELpzilV3F78kMxps90YOTYAH+UvWHxqXIdoDWHgTLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:84:f5:10:2f:6b:a8:24:5e:ea:e5:2f:d6:85:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
        Validity
            Not Before: Apr 16 22:00:41 2026 GMT
            Not After : Apr 17 22:00:41 2026 GMT
        Subject: CN=8254f37298bd530822ba84d3f46c16536b8096ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:ba:93:1a:a5:df:47:d7:79:0b:61:18:9c:
                    6b:70:5e:5e:4e:39:29:71:a5:a5:d8:9a:15:bb:78:
                    7c:f4:a7:54:e1:50:66:dd:9b:ab:6a:23:f1:3d:91:
                    a5:98:be:55:14:e5:c1:ba:bb:da:ee:4b:d1:f3:87:
                    f7:9c:8d:bc:f7:fb:48:6a:19:4c:61:66:33:d2:cf:
                    c1:76:81:e0:46:36:1a:8d:62:2a:99:f1:8f:8b:0a:
                    75:e9:ee:da:5f:4b:71:5f:b2:79:fa:41:a1:36:65:
                    09:54:ba:69:50:bc:a7:05:b2:42:2a:f3:2f:88:e5:
                    7a:e3:e5:4f:31:00:cc:dd:39:cb:9b:a6:ac:81:5e:
                    10:72:b5:a7:b6:f5:87:26:95:b9:d9:69:c8:6c:7c:
                    fb:73:85:8e:3e:b4:6a:eb:b9:eb:7e:ae:32:10:9f:
                    68:9e:69:6c:e3:ed:f8:0a:d2:3b:ef:49:11:56:28:
                    97:64:9e:3f:09:03:a5:66:f4:4f:e2:1d:51:8a:50:
                    52:e0:a8:12:db:27:9e:70:c5:19:9a:1d:6b:cd:3b:
                    d2:ef:10:7e:ea:ee:cd:60:85:b2:48:0f:63:bd:a4:
                    ca:86:c5:c4:87:6d:0e:84:2b:9e:10:ca:38:1d:9d:
                    cf:96:74:f3:05:61:35:89:f4:f3:b7:ab:ac:a5:0b:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:54:F3:72:98:BD:53:08:22:BA:84:D3:F4:6C:16:53:6B:80:96:ED
            X509v3 Authority Key Identifier:
                keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f0:97:ae:0d:b0:66:04:54:8b:25:9c:a2:56:33:31:50:3b:
         c2:8e:2f:df:0d:25:9d:02:3b:62:9a:a9:ca:e1:bd:04:a0:15:
         21:60:1a:0e:2e:84:0e:28:6c:b2:13:dd:1a:83:9f:37:77:0f:
         6b:0f:50:3b:de:6b:a0:45:02:8d:08:80:de:ec:d2:24:1e:50:
         70:b9:e0:7f:58:83:7b:ba:0d:f7:5b:57:29:46:c4:1d:62:f7:
         cb:77:33:ad:5c:32:1f:aa:e1:48:64:36:c1:9e:70:1f:00:e4:
         f4:48:cf:85:53:f1:eb:03:f1:c5:7c:09:7f:c9:b3:0f:f9:e7:
         9c:8b:3f:a2:78:bb:d3:b8:21:5d:d5:1f:69:1a:9e:06:07:9f:
         e8:6c:85:0d:15:27:6a:a8:2f:4a:6a:79:32:28:27:29:22:d9:
         9e:12:7a:5f:9c:ca:9c:76:76:8a:c5:c0:3b:22:fa:46:17:e3:
         9c:24:43:20:a8:ec:56:e8:01:a0:c1:25:b5:85:1e:ad:68:4e:
         24:5e:6c:98:b1:98:80:a7:4a:a1:a6:42:54:1f:91:ae:97:97:
         a2:b0:05:14:6a:88:36:67:d8:71:ee:77:ae:ac:25:94:25:28:
         9a:3d:f1:d5:20:8d:f2:3d:3a:80:ce:80:35:2e:f7:a4:9a:67:
         ab:54:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:45 2026 by rpki-client