Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File:                     HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier:          //ciuJsmddL9lcBqoaPkHxOBAHOQlbzr0dwJifpyFbI=
Subject key identifier:   7A:DE:15:BA:14:F8:FF:F2:0D:C1:B3:86:56:A5:7C:EB:B3:40:CB:0F
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer:       /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial:       019EC18002CFD34F2261F7EBA3E96C0764CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number:          07BA
Signing time:             Sat 13 Jun 2026 15:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:52 +0000
Files and hashes:         1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: TYfRn/SQw+CbV1PDFD181aLcg4poe8j7MVDaQEKqWeU=)
                          2: rFR6ifvFvE2ynV2hmLnL9rHW-es.roa (hash: S4CeuRl2W6crNxhLlfTzDmJqM3oGkzLJPZkdIsK+MO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:02:cf:d3:4f:22:61:f7:eb:a3:e9:6c:07:64:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
        Validity
            Not Before: Jun 13 15:00:52 2026 GMT
            Not After : Jun 14 15:00:52 2026 GMT
        Subject: CN=7ade15ba14f8fff20dc1b38656a57cebb340cb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:b1:ed:a2:59:8b:4d:bd:0c:52:31:37:00:
                    7d:f8:57:b2:20:01:18:07:1b:32:c3:96:c2:83:ab:
                    63:35:87:79:14:e9:14:41:88:81:b7:e6:d4:6b:ad:
                    69:48:92:7b:4e:3f:27:ae:96:ee:fd:80:25:68:c7:
                    a3:bc:34:a7:1c:21:43:64:00:81:c9:76:fa:c7:21:
                    8d:de:97:04:1a:e7:95:92:2e:b7:bb:0b:34:58:a7:
                    83:f2:d1:17:11:93:5f:c4:b3:e5:ce:2b:ff:d1:04:
                    93:2a:0a:04:18:7d:7c:75:95:b9:e2:bb:79:0d:10:
                    bd:2f:c3:64:4c:08:36:cb:12:a0:30:d9:93:bc:b4:
                    b8:76:da:49:be:be:c4:e7:2a:0c:f8:c7:cf:cc:03:
                    03:17:6c:9c:53:69:b8:9c:12:8a:88:c1:db:d0:4e:
                    ff:de:4e:ba:99:84:9a:3b:c3:e3:57:40:b3:aa:77:
                    b1:cf:f7:a8:72:86:41:56:33:5f:8c:32:b3:8d:c8:
                    ba:6f:7c:84:97:9f:b1:a3:b7:89:bb:3a:be:1e:3b:
                    93:d8:5d:c2:49:ab:f0:3e:9c:f4:26:b9:f4:0e:1c:
                    7d:13:2a:e4:8e:65:bc:df:b9:81:35:e8:8a:4d:96:
                    26:14:b4:b3:60:2e:f2:67:29:22:ff:5e:8f:a1:1f:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DE:15:BA:14:F8:FF:F2:0D:C1:B3:86:56:A5:7C:EB:B3:40:CB:0F
            X509v3 Authority Key Identifier:
                keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:70:5e:8b:66:1d:51:45:ff:dc:48:64:74:08:4b:16:02:48:
         07:6f:97:74:e2:0a:f6:b7:d6:d1:18:31:54:90:a3:5e:38:e7:
         7b:f5:61:8f:33:77:48:c1:78:96:77:02:61:ff:69:e7:57:31:
         e5:f1:e0:03:a1:92:b6:cc:38:7b:a6:16:2c:0a:13:a2:80:32:
         1d:d9:8e:99:ee:b9:67:9f:76:94:3d:34:86:3e:a0:76:f7:63:
         9a:f2:96:49:eb:38:f1:2e:bb:e0:af:2f:85:75:c1:78:3a:3d:
         49:66:2e:70:38:90:59:7d:cd:62:b3:96:97:2a:77:17:dc:73:
         8a:ca:38:94:71:35:b9:71:0f:e3:b3:59:55:de:95:3c:b0:0e:
         f1:7a:b6:58:a2:c6:11:6d:9c:e3:f5:cb:c1:2d:e6:25:00:2b:
         a3:81:24:39:25:65:dd:4a:16:ec:a4:b4:53:e9:fb:57:b3:7e:
         62:bc:00:5e:33:56:a8:65:11:82:b5:50:95:99:ee:30:56:99:
         da:fc:cd:d1:5a:5e:71:e4:ac:bf:2e:fd:c8:22:1d:d9:15:98:
         61:e2:b5:f9:6b:aa:eb:56:a3:dc:53:92:4b:75:3a:5e:f9:21:
         16:1e:0e:e0:69:78:d2:52:d3:1c:dc:aa:9d:bc:4e:45:28:03:
         b3:dd:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:24:20 2026 by rpki-client