Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          j/wyCVc8cTgznbl9AI5Ze74BPq99v0dXPm1C+XTMFeU=
Subject key identifier:   41:BB:F5:63:DA:CD:CA:76:AF:95:14:D5:A7:E6:C9:19:87:6E:5E:FB
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       019DA5667022B291F5FFB6C392E8873A3D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          07FE
Signing time:             Sun 19 Apr 2026 11:00:47 +0000
Manifest this update:     Sun 19 Apr 2026 11:00:47 +0000
Manifest next update:     Mon 20 Apr 2026 11:00:47 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: GGrGxuO0Csmd/kajS03hEpst6Ca5gE0C1Ww58xmzF6M=)
                          2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:66:70:22:b2:91:f5:ff:b6:c3:92:e8:87:3a:3d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Apr 19 11:00:47 2026 GMT
            Not After : Apr 20 11:00:47 2026 GMT
        Subject: CN=41bbf563dacdca76af9514d5a7e6c919876e5efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:d3:52:4b:62:a4:58:2a:17:21:c1:97:84:
                    ce:85:96:75:7f:33:38:30:b7:36:25:17:aa:e5:c3:
                    69:25:ca:a8:a2:1d:84:1c:4a:72:2e:a6:69:09:81:
                    79:94:a9:5e:63:d9:7d:65:ab:be:00:a8:8e:a2:bc:
                    1e:3e:0a:82:1f:6e:96:2e:9c:be:37:35:f3:94:56:
                    4b:cf:ed:f1:f9:e8:76:ef:25:1d:81:c5:a9:23:12:
                    cd:c8:30:34:c0:a5:e4:6c:8b:19:f9:01:4d:6b:07:
                    75:77:11:c4:85:8f:9a:14:c3:a6:f0:e7:6a:58:67:
                    e2:21:d4:41:54:34:d8:9a:46:2a:69:cb:4f:a9:cb:
                    21:73:cf:ec:09:da:e5:a9:3a:2b:78:c1:22:0c:48:
                    10:c7:4f:04:68:4e:d9:fe:74:e6:06:77:cf:12:70:
                    67:b1:84:05:a7:25:b0:f1:84:28:39:70:67:e9:51:
                    22:00:e7:fb:0d:23:3a:e5:44:06:68:b9:13:44:22:
                    0c:d7:1f:97:6d:3d:bd:d3:d8:bf:47:41:f3:07:46:
                    38:54:c7:95:db:bd:62:01:aa:1e:ee:6c:fe:eb:f2:
                    1e:51:c8:99:8d:74:68:ca:ff:d0:eb:6e:7a:03:fa:
                    be:c1:4e:69:0f:a6:a7:19:d8:35:75:bb:5e:4a:7a:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BB:F5:63:DA:CD:CA:76:AF:95:14:D5:A7:E6:C9:19:87:6E:5E:FB
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:68:45:11:8a:23:c9:90:03:ee:00:09:da:bb:b5:ee:41:c5:
         9f:f7:45:b4:42:4a:6a:d1:01:24:ba:28:49:2a:77:da:1f:ad:
         d8:86:62:ad:51:8a:d3:47:c3:5a:67:bf:8f:b5:05:63:c2:e0:
         c5:c2:11:80:6c:f4:71:c3:df:1e:0e:8c:0d:3e:7c:bb:da:be:
         57:4a:d1:28:57:67:c5:62:94:94:37:0f:e0:3b:b9:ba:1b:7c:
         09:82:fc:03:cc:64:41:4f:e6:a9:af:b8:16:c4:5c:6b:6b:f6:
         a5:b9:db:ce:a6:8d:19:50:65:44:c9:e7:17:41:43:e6:39:75:
         2e:ee:0c:df:c3:67:15:ed:b1:dc:66:18:2e:c8:d5:4c:52:7d:
         a4:7f:86:2d:55:00:65:54:4c:49:2e:7f:1c:05:ca:cb:28:d2:
         e5:c9:b1:58:91:31:7d:27:22:89:00:85:b8:f8:6a:da:6e:19:
         01:3c:85:4b:f4:22:fe:0b:3c:5f:8a:b7:e6:60:42:33:f0:91:
         b0:34:fb:1b:ac:23:d1:84:b1:5f:dc:33:65:15:cb:09:88:c5:
         1c:5c:de:ce:89:57:d2:94:cd:5c:50:28:6f:72:5f:92:d8:1b:
         5d:1a:50:c5:98:a8:98:8d:99:d2:ce:6a:08:78:5f:12:33:06:
         6b:2f:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:14 2026 by rpki-client