Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
File:                     H_HOmuJWMQK_jqcqieBhUu9wWLI.mft (raw, json)
Hash identifier:          iQCSmVz5UZWP9LlEhLveCQLu8zD0Ku3IRtRScSpZKtc=
Subject key identifier:   64:44:BD:AD:5D:AA:1D:AE:F4:88:68:70:2A:75:58:83:D2:AA:3C:48
Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
Certificate issuer:       /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Certificate serial:       019DA3E64B699112F68977902C35B9F52C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
Manifest number:          0C14
Signing time:             Sun 19 Apr 2026 04:01:11 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:11 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:11 +0000
Files and hashes:         1: H_HOmuJWMQK_jqcqieBhUu9wWLI.crl (hash: ENomSGUwB9lPX4SXww74zalQmjzhxPfkj8Hdv9RqM7o=)
                          2: p0ufMcpYNwVQWNab88QT5yQavFU.roa (hash: mL3XJ5t6SmhWhL4iXobgkQwIefMZwzLnCnAYR2ZqxCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:4b:69:91:12:f6:89:77:90:2c:35:b9:f5:2c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
        Validity
            Not Before: Apr 19 04:01:11 2026 GMT
            Not After : Apr 20 04:01:11 2026 GMT
        Subject: CN=6444bdad5daa1daef48868702a755883d2aa3c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:d2:c4:2c:44:4e:65:2d:2d:78:27:fc:d9:
                    d0:85:de:6e:97:31:94:0b:18:2e:2a:04:6a:54:ca:
                    c2:60:76:84:e3:5c:c2:f4:5d:b5:83:63:e9:f8:59:
                    9e:63:2d:33:03:5e:d5:4f:4c:fb:47:31:9a:d4:17:
                    2e:a6:92:b9:c9:eb:26:cb:cf:ff:dc:0e:2a:8b:81:
                    05:75:28:85:57:1b:f3:65:50:fd:1c:a7:3a:71:d6:
                    f6:b4:1f:4a:9c:d7:cb:96:e5:00:86:27:34:4d:87:
                    3d:5c:d7:42:57:1a:3f:f6:41:a7:e4:a4:c9:49:b8:
                    bc:7a:03:8a:f6:58:ca:aa:00:02:47:5f:e1:a0:78:
                    44:40:2c:7a:81:96:53:6e:a7:4e:c2:93:02:f3:1c:
                    e8:c2:08:f0:f0:e8:8b:c5:57:e1:52:aa:b5:95:9e:
                    d6:63:73:55:9b:93:57:86:56:63:60:0d:40:eb:01:
                    3b:c2:b1:42:30:3b:f7:f3:8c:00:13:c6:91:73:0c:
                    f1:91:cf:09:3b:c5:58:7c:76:76:b5:4b:03:63:26:
                    36:f0:37:10:97:8c:93:c4:af:4b:12:56:d0:5c:e6:
                    7d:c8:2e:ec:e0:1c:4c:b7:66:9d:3a:2b:50:ea:93:
                    ed:0c:71:39:0d:15:6e:18:f4:a2:04:7a:f4:df:66:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:44:BD:AD:5D:AA:1D:AE:F4:88:68:70:2A:75:58:83:D2:AA:3C:48
            X509v3 Authority Key Identifier:
                keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:28:62:30:92:8f:66:0d:e7:f3:ba:13:23:ac:46:47:d8:8c:
         74:1e:63:a0:bf:1c:09:27:e8:83:02:8d:75:d8:0f:c1:ec:2d:
         51:3e:e1:21:b7:4f:29:62:b1:4a:d6:1c:a5:26:2b:7d:90:9e:
         95:98:e5:16:30:25:b8:07:5c:49:b7:f7:3d:a0:8b:b5:dd:94:
         9d:1b:48:65:47:a0:47:55:5f:d0:9e:2e:85:82:00:25:9b:ae:
         77:ec:7d:6e:53:5f:ca:a4:7a:a7:56:53:65:e6:58:50:a7:c1:
         83:83:a6:a7:ca:50:ea:18:c7:b2:51:98:b9:83:99:c6:54:06:
         63:8a:a4:79:96:dd:94:a4:8b:8d:98:4f:0f:cb:5f:7c:42:0b:
         45:c1:d5:03:87:82:c0:b4:92:00:51:a0:c5:b2:29:95:cf:65:
         da:66:ae:a4:cd:04:bd:6e:ce:dc:e6:0c:34:75:cf:9c:d1:a7:
         b3:dc:a1:df:d5:3b:89:55:bf:61:e0:e9:c3:b2:32:33:a1:a2:
         fa:54:4c:08:09:7f:43:80:6b:05:b5:da:f7:ed:5a:f7:81:ec:
         ce:e8:8f:be:46:c6:a6:69:71:bf:bf:92:37:a1:4a:ed:c9:c6:
         0a:6c:b8:d2:d9:cb:8b:66:0c:72:df:b6:81:d1:bb:ee:c1:a0:
         7f:d3:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:13:43 2026 by rpki-client