Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File:                     HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier:          q3mXWmkCpn1+HrC/LsKiA6Exa5Zp3+rgbjNhQ/uNWK4=
Subject key identifier:   01:3B:D9:E6:AC:E8:7C:10:BE:D3:4F:8A:3F:F0:E3:C1:DB:AD:8A:01
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer:       /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial:       019EC17F8E645057A4675004C98C74DF384C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number:          0621
Signing time:             Sat 13 Jun 2026 15:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:22 +0000
Files and hashes:         1: 92BWX1zbWyo4TMOfNb_tzSoWbCY.roa (hash: c0Yuqp+qbpUBM3UZdmZmEFvrAfboFIavdSOeFXW5BoI=)
                          2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: iCHrqb6jVG0MdSfJSruMG519SKzNxwpiR27wNmGa5/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:8e:64:50:57:a4:67:50:04:c9:8c:74:df:38:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
        Validity
            Not Before: Jun 13 15:00:22 2026 GMT
            Not After : Jun 14 15:00:22 2026 GMT
        Subject: CN=013bd9e6ace87c10bed34f8a3ff0e3c1dbad8a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:4b:cf:69:e8:5a:00:dc:60:3a:18:ad:42:
                    2d:2a:21:62:5f:47:b7:a8:ea:2c:58:5d:37:bc:bb:
                    a9:4c:2f:f4:81:85:fc:61:11:af:7e:ed:53:6a:2d:
                    41:07:de:cc:dc:51:26:6a:0a:4e:43:bf:84:e0:dd:
                    ab:06:ef:2f:8c:5e:54:9b:b0:93:f1:18:c6:d4:d2:
                    19:74:2c:fa:d6:82:ba:1d:fa:04:43:51:12:3a:15:
                    d2:58:9e:37:0b:de:2d:f5:5d:0c:8b:e1:b1:4a:0d:
                    f0:4c:52:b4:46:bb:ac:75:61:87:02:9c:09:85:e1:
                    db:9e:0b:97:40:27:b3:f3:06:50:e4:fc:80:55:df:
                    27:74:2b:49:f9:ae:d5:1e:e3:bd:19:2d:7f:56:bc:
                    65:5c:5d:a5:35:6c:90:aa:e3:e5:67:5a:0b:e0:1b:
                    68:5d:3f:65:3d:cf:e6:3b:07:f5:cb:4f:b6:1f:0e:
                    f7:b4:88:97:43:12:6e:12:28:af:d6:57:34:a1:b6:
                    94:66:7e:6b:57:50:25:cf:2c:26:9a:2a:d8:46:ac:
                    ab:16:33:ff:56:b2:d8:c3:6d:7c:4c:03:1f:dd:d6:
                    96:0c:33:6d:d5:04:00:13:28:17:22:49:03:c9:6d:
                    d8:44:73:bd:75:c7:a7:86:4c:e5:b0:35:57:d2:c7:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3B:D9:E6:AC:E8:7C:10:BE:D3:4F:8A:3F:F0:E3:C1:DB:AD:8A:01
            X509v3 Authority Key Identifier:
                keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:42:6c:62:fc:8a:bf:5a:63:f9:ed:d4:49:bd:1d:ab:69:
         4a:f5:a6:25:a9:8b:3a:7f:89:b8:24:01:26:af:95:80:2b:48:
         b4:df:86:00:69:05:fa:68:5d:e5:2b:50:06:0e:79:03:66:f3:
         04:0b:27:c3:01:b5:3c:f0:b6:40:7b:5e:18:a9:51:20:c9:88:
         f1:83:b0:55:fb:5c:b1:4b:f1:9d:58:dd:bd:ba:07:f6:4b:bc:
         b0:85:3f:22:7e:9b:0b:85:06:74:4b:97:f3:6f:69:6b:79:b3:
         6c:f9:5a:95:23:ed:58:6a:7d:3b:f8:1e:ad:62:87:03:62:8b:
         60:5e:ca:79:82:ea:df:e4:b3:96:a1:7b:77:fa:6d:25:74:3f:
         d3:21:cc:6f:82:84:2e:60:71:1f:07:23:f3:09:4b:e5:53:d0:
         74:ab:a0:0b:73:c8:ff:a1:ea:fe:34:f3:ab:ce:ab:50:ca:9a:
         4a:4b:fd:2c:01:a6:95:a6:0f:73:7e:db:51:10:e3:b7:61:31:
         2b:e4:6b:5c:55:91:e5:30:18:f1:a9:c5:cc:99:9e:a9:b8:1b:
         61:fc:6a:5f:7e:0e:e1:d3:4f:1b:49:c6:2b:36:80:b0:eb:7a:
         20:e6:e8:ad:65:46:cd:df:2a:dc:b8:69:eb:0c:eb:b8:16:89:
         b2:3c:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:16 2026 by rpki-client