Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File:                     HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier:          V1nTr1GXcBExSqQ5P5vSLRRn4dtXTQM723X3z40HV+I=
Subject key identifier:   F9:27:6A:EB:18:91:75:C6:8E:F1:B3:E9:48:19:D9:51:3B:7D:B3:45
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer:       /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial:       019CAB6B1F48504B0C014063559D6BCFE560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 22:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:49 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:49 +0000
Files and hashes:         1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: QM+zY5Hn9RjosbL4SkSUgjYOlvJVVlVb8pLWhFJY23s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:1f:48:50:4b:0c:01:40:63:55:9d:6b:cf:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
        Validity
            Not Before: Mar  1 22:00:49 2026 GMT
            Not After : Mar  2 22:00:49 2026 GMT
        Subject: CN=f9276aeb189175c68ef1b3e94819d9513b7db345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:b2:32:4c:34:9a:fe:fd:a4:42:d2:3c:4d:
                    1b:de:b2:ea:6c:38:44:82:66:c8:75:56:dc:a3:ab:
                    f5:dd:04:3b:fe:c0:64:8b:e2:85:45:bd:5f:31:2c:
                    51:d8:3c:69:ff:5a:0b:c5:21:b5:85:a4:52:6f:e3:
                    c6:c3:c0:e4:2b:e1:b3:c4:07:c0:3d:b3:c1:7f:ab:
                    df:12:59:fe:f8:55:e9:73:ac:25:ac:4c:65:fd:e4:
                    03:32:90:90:8d:3c:5d:a2:5f:eb:5f:8d:fe:b1:cc:
                    82:21:a3:bf:e5:3a:65:0e:03:60:7f:5e:b7:37:78:
                    be:11:a0:0a:5a:56:f7:99:e2:74:fb:6b:db:cb:fb:
                    2d:5b:c5:b4:39:77:4a:93:ca:72:e2:b9:b8:4c:05:
                    3e:68:0e:cd:f6:90:59:67:17:74:72:19:39:d2:74:
                    64:bc:df:56:b7:3e:9c:80:f6:f7:06:52:45:12:9e:
                    c5:e4:51:da:cb:a0:7d:36:20:dc:a6:2a:ae:27:82:
                    b3:04:37:5e:0e:6e:91:04:4e:4f:68:04:5c:af:98:
                    3e:14:10:c7:99:bf:59:15:52:2e:5a:cf:66:51:05:
                    39:7f:1d:14:5e:1e:3d:e2:96:7d:64:8e:e3:91:bc:
                    f7:76:f6:92:2d:04:26:70:3d:82:e9:aa:e5:c8:e8:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:27:6A:EB:18:91:75:C6:8E:F1:B3:E9:48:19:D9:51:3B:7D:B3:45
            X509v3 Authority Key Identifier:
                keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:17:8a:2e:52:8a:53:e8:4b:39:d1:fd:9f:d4:c5:0a:fb:
         dc:06:25:41:39:55:f3:4b:18:df:2b:52:39:05:d4:2d:14:17:
         2c:0f:4e:77:9b:a0:b2:4e:f4:cb:77:f7:d3:49:69:a2:48:2b:
         15:d4:25:6a:93:89:0b:b6:eb:ba:b0:b6:71:6e:cc:5f:f0:17:
         75:7c:8a:b6:99:c2:15:07:2d:4a:6d:4f:24:22:56:e1:3f:f7:
         76:de:22:b2:e4:3b:93:f0:d0:fa:f5:4c:d4:88:91:f2:99:ff:
         ba:14:24:23:95:2d:84:a8:fb:50:7f:a8:6d:13:76:d7:e9:9a:
         4d:ed:78:aa:79:70:2d:29:0c:d3:a0:4b:d5:64:a3:63:94:ea:
         c1:4b:4d:c8:ec:ad:08:7a:ad:4f:a1:4c:44:a7:d9:32:89:24:
         9a:5f:3a:33:9f:7b:8b:6a:3f:3d:62:c0:27:b3:01:c6:67:06:
         3b:03:cb:d4:74:79:ab:ad:66:44:a3:8b:ba:0f:38:36:5a:8b:
         34:9d:fe:8b:c2:a7:ce:5c:3d:84:c7:c2:9f:f6:cb:f2:1a:b8:
         55:06:a6:26:4a:fa:b5:e1:d1:8f:47:d7:c2:7a:1f:95:b9:8d:
         90:fd:48:66:f8:39:d1:1d:f9:5b:d1:3b:d3:a5:cd:b8:1c:79:
         42:40:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:14 2026 by rpki-client