Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          5l1Cg+Ix70fiwoYAr9zgP7o2XqAY5Jf+H4BkfqbGLGA=
Subject key identifier:   9D:E9:33:80:DB:94:B9:F9:AD:C4:D4:BC:21:AC:2C:08:DE:85:AF:B5
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       019EC14908C43251D0C459E75EB85C508129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          0891
Signing time:             Sat 13 Jun 2026 14:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:49 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: sHkCBUE1+jEDTVFPIa+wiqd3FnJK4I5yiK+23MvWCAc=)
                          2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:08:c4:32:51:d0:c4:59:e7:5e:b8:5c:50:81:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Jun 13 14:00:49 2026 GMT
            Not After : Jun 14 14:00:49 2026 GMT
        Subject: CN=9de93380db94b9f9adc4d4bc21ac2c08de85afb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:5b:06:9b:5f:93:e8:35:5b:f1:14:f2:57:
                    7e:31:12:41:56:cd:e6:b8:31:9f:40:0c:56:a9:9c:
                    93:ce:59:9f:b1:20:96:f6:94:73:1a:35:06:0f:33:
                    76:20:53:7d:de:39:5c:3b:7d:b7:46:aa:18:11:3c:
                    af:ab:44:cd:58:1c:81:52:ff:f2:a7:79:d3:56:04:
                    a4:16:f2:97:dd:18:eb:85:a3:17:cb:2c:de:54:c6:
                    4e:49:8c:31:7d:bd:5b:c7:43:ac:72:33:53:96:6f:
                    d1:bd:8e:c4:df:24:59:3d:b1:2c:0d:60:3c:a0:5c:
                    40:a7:db:5d:c2:65:67:9b:e4:96:72:0f:6e:b5:ff:
                    dd:91:49:d5:67:5a:2b:68:62:c0:bf:c1:92:19:3c:
                    b0:5d:7c:a8:d9:19:ac:30:55:0b:a0:5b:a5:5b:c1:
                    84:2d:fb:87:6b:e1:f4:11:9d:5a:55:6d:c0:00:b1:
                    c2:44:50:7a:f6:7f:48:9b:7a:f3:29:48:b7:63:b4:
                    1e:ae:d5:8c:c7:24:f1:ca:22:a2:03:28:4e:14:93:
                    61:e7:9c:b8:36:26:86:73:c5:5e:ec:78:5c:d1:a0:
                    d2:18:3b:5e:49:38:ab:02:20:a4:b8:9d:db:aa:c7:
                    80:e9:60:78:6b:9e:9f:96:14:1a:85:61:fe:b6:3a:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E9:33:80:DB:94:B9:F9:AD:C4:D4:BC:21:AC:2C:08:DE:85:AF:B5
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:83:c4:68:03:67:96:48:43:0d:dd:22:63:81:8d:fe:3b:82:
         83:86:fd:dc:87:2b:cf:8b:17:61:05:b1:1e:d5:ff:3b:15:6f:
         07:35:5e:db:7f:b9:ec:65:c5:99:ba:26:cc:85:5b:74:e8:a6:
         9f:57:9a:91:cb:d8:f7:3f:67:67:32:2a:ef:3d:55:c5:1e:d3:
         69:c9:a7:76:aa:19:98:1d:de:dc:9e:f2:25:5f:99:10:6f:e0:
         aa:8e:74:8c:ef:30:44:2f:93:a4:b8:f6:3c:b3:e7:b2:7f:2b:
         d6:06:b9:c2:36:5a:37:db:e2:88:3d:d9:2c:26:75:16:ef:24:
         c3:7d:eb:dd:61:43:07:0a:37:e7:0e:04:8a:5e:89:04:3a:53:
         be:99:53:c2:b8:4f:a3:f2:60:e1:2b:53:20:11:c8:34:8a:9c:
         75:45:ff:58:cc:63:ba:d2:aa:88:7c:2b:11:df:c8:0b:26:6b:
         2c:2b:c5:74:ce:4e:79:cb:b9:ae:e1:08:92:9f:4e:fb:d0:5a:
         0a:95:3f:50:c3:a6:6f:60:52:5b:a0:d4:17:5a:c2:0a:7e:85:
         ca:37:41:49:65:18:24:54:d6:b8:e8:36:51:bd:f9:a6:d5:16:
         29:dd:03:17:47:8a:52:3f:81:8e:a9:98:15:5b:58:a9:d4:91:
         f3:81:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:45 2026 by rpki-client