Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier:          YTpmG7WsLUyO0vfWnzVMhZzH1r+pNZkO2ckzDTlWk+k=
Subject key identifier:   0F:85:52:91:30:8E:0F:89:58:58:CD:8F:05:31:3A:F3:1A:FE:96:FE
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer:       /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial:       019D97AA859C2CCD10399033A29786965FC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number:          1852
Signing time:             Thu 16 Apr 2026 19:00:28 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:28 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:28 +0000
Files and hashes:         1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: B+74Z6js+FhRtXQ5dbhi9okktvva8z44xJCRyMkwd6Y=)
                          2: jeVYoAlmG_sEvFtGiKgaPSf17pw.roa (hash: 1XW/CIVJ1Xt4kEijZkBhaCtanmPdLXj+hDRhskw3N+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:85:9c:2c:cd:10:39:90:33:a2:97:86:96:5f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Validity
            Not Before: Apr 16 19:00:28 2026 GMT
            Not After : Apr 17 19:00:28 2026 GMT
        Subject: CN=0f855291308e0f895858cd8f05313af31afe96fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:a4:4c:10:bf:44:e3:a6:50:18:da:6c:15:
                    2d:be:74:1d:dd:71:b9:48:a8:cf:b3:70:46:5a:02:
                    a5:9d:15:00:a4:69:68:6a:1d:3e:04:03:42:3a:50:
                    48:50:ef:dc:7c:b1:be:7c:ce:42:bd:e0:24:29:b7:
                    a8:a9:6b:1f:90:4b:04:d5:9b:43:94:ac:a6:d6:d0:
                    f2:80:12:b2:e6:c9:3f:ca:5a:e3:08:bd:d9:fc:d0:
                    83:7f:a3:82:4b:07:d5:6b:cc:a0:f3:7f:14:df:02:
                    74:ad:02:2e:39:83:34:7b:05:3e:87:26:e4:47:1a:
                    05:c8:31:0b:6c:fb:18:48:42:a9:24:88:bb:b6:eb:
                    a4:fc:83:f5:22:e9:e4:6e:ba:62:95:32:83:7b:8c:
                    41:97:10:bc:4a:83:c5:67:4c:dc:d0:99:c8:e1:f0:
                    32:92:e0:3a:11:0e:37:ab:18:69:0a:b4:8d:1f:55:
                    42:42:50:de:5b:48:c7:1c:14:a9:b7:f0:d3:b1:cf:
                    0d:31:24:09:8f:08:6e:0e:ba:a4:e7:25:49:db:2c:
                    d7:17:25:f7:18:f4:4b:cc:bb:ce:5d:85:64:3c:72:
                    2c:55:22:6d:23:2a:34:29:40:57:1c:14:f1:61:7e:
                    9b:3e:73:95:8a:ce:71:ea:b4:e3:3c:24:76:4a:9c:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:85:52:91:30:8E:0F:89:58:58:CD:8F:05:31:3A:F3:1A:FE:96:FE
            X509v3 Authority Key Identifier:
                keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d1:24:f6:03:33:46:8f:2e:7a:b7:ac:67:ba:47:7f:33:be:
         8c:56:eb:3e:91:85:27:2f:a6:10:40:96:c4:d8:bf:71:d4:a3:
         cd:0d:4b:13:d3:e0:3a:df:a8:98:7c:ce:20:91:df:8c:bd:78:
         18:62:62:8f:e0:e3:cc:45:79:eb:d6:1d:3c:f2:ef:9d:00:24:
         f3:ae:c9:f2:15:23:53:66:b6:94:0c:84:6a:15:c3:45:a0:2a:
         e4:d3:5a:9e:d5:f4:fb:28:2b:f9:b1:df:83:9e:fd:7d:d4:c5:
         7b:c0:08:01:dd:54:75:85:9b:ec:ec:0d:4d:19:87:8e:c2:65:
         50:fa:58:47:8c:79:fe:c3:37:88:6f:1b:7b:9d:dc:01:55:9f:
         22:dc:df:8f:7c:ed:d1:b0:f3:51:94:e5:6f:67:b5:18:d6:a2:
         53:05:0b:59:71:f7:cf:0b:e5:45:0a:29:ea:7a:10:e1:e0:47:
         45:09:3f:5c:fb:61:11:e0:4f:7a:a6:0c:79:f7:96:f0:34:67:
         e4:81:03:df:e2:cc:a1:8a:2f:af:65:f0:2f:4a:0a:69:22:05:
         e9:91:7a:6a:f3:65:c0:18:bf:16:5b:96:6d:d0:ca:b8:ab:8d:
         c0:b0:37:e6:7d:7d:08:22:c2:b7:af:8c:df:1b:41:3a:13:ca:
         03:fb:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:45 2026 by rpki-client