Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File:                     hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier:          EUX2p9JineHNJWCpH3J+dp6+mGgY/y3+/i23HcrUSxg=
Subject key identifier:   02:5D:69:BB:7F:17:97:43:71:20:B8:08:BF:F7:E1:8C:8F:13:B9:64
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer:       /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial:       019D992B1F0B64C3EF2CAB8A0E03F7045F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number:          1304
Signing time:             Fri 17 Apr 2026 02:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:33 +0000
Files and hashes:         1: 1TVNFB2oqiU4XNjEv0BT-Pb2M0M.roa (hash: 3vvI5UYlWItjTSfQrco2BtzXvJBHGkk/x8CyOBqqD8U=)
                          2: 41gdFH-JudL678u_D6BB_y7EfU0.roa (hash: VnQDTpZib3x3twc60ulDPL39Qe1IesXf9+CLXJ4WNxw=)
                          3: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (hash: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg=)
                          4: YQ7UOE0fRKiUXxXL_L3iPhyJx88.roa (hash: 3O80VS4rsgTgEZbTwubyabO64/481tfENVUe6/Id6ow=)
                          5: a-1eulbURZwYdTXjQHmSQrhkepg.roa (hash: dU6/8b7jh8wXrhRwwYJ+BZWPnCRt/iCI6b/zuZGMbbY=)
                          6: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: /zwIW17omVFNl7oC5rM7K7oTRTbXPzm9iS68ZUklpWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:1f:0b:64:c3:ef:2c:ab:8a:0e:03:f7:04:5f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
        Validity
            Not Before: Apr 17 02:00:33 2026 GMT
            Not After : Apr 18 02:00:33 2026 GMT
        Subject: CN=025d69bb7f1797437120b808bff7e18c8f13b964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:cf:50:63:4d:3e:c1:dd:1b:7c:11:55:04:
                    a9:7c:6d:16:fe:bb:0f:c1:8c:ae:b4:89:62:25:f6:
                    9f:d6:87:0f:d7:95:38:0a:de:9a:81:37:60:e0:50:
                    4f:71:f9:5e:df:0e:f2:94:e2:34:bd:65:88:7b:d8:
                    13:15:aa:b8:fb:68:31:5f:70:fc:eb:06:43:e3:82:
                    39:20:65:26:be:2a:ab:7f:78:73:ef:c3:18:fb:0b:
                    a4:13:2e:72:da:f8:f2:ff:8b:6f:a1:61:58:54:b7:
                    70:f7:bb:d2:aa:52:0e:92:75:b3:a8:49:03:e8:5d:
                    f2:b3:96:97:e0:f4:6a:da:c7:24:e8:af:bf:4b:bc:
                    4a:49:b4:23:ff:a6:ea:ee:2e:a1:90:80:3e:b2:f2:
                    72:78:7e:4a:37:99:60:1b:ac:d8:df:b1:eb:15:19:
                    34:31:c9:7a:68:ea:2e:a7:01:0e:e7:37:a7:d7:93:
                    ae:86:26:1e:cb:eb:a9:6d:df:8d:c9:6b:ad:ee:83:
                    f6:c1:83:16:fd:2b:1e:13:db:4d:02:67:98:29:7a:
                    41:c6:fe:aa:46:64:fa:d7:49:30:27:82:74:2a:cb:
                    db:c0:ab:da:1d:fb:7d:2d:66:14:6b:82:ff:d9:67:
                    67:e1:8b:04:b4:7d:97:2b:78:c0:fc:1c:13:39:fc:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5D:69:BB:7F:17:97:43:71:20:B8:08:BF:F7:E1:8C:8F:13:B9:64
            X509v3 Authority Key Identifier:
                keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:51:b0:44:e8:32:59:23:b0:42:53:8d:0f:75:44:3f:ea:45:
         1a:67:b5:16:ee:30:7f:bc:1c:a0:4a:33:7c:4e:82:20:f2:ca:
         e5:d3:8a:d6:80:7a:75:e2:aa:0f:cb:c3:c4:2b:6d:d6:bd:4b:
         01:15:6f:7a:39:38:4e:40:86:6b:e7:30:5b:18:36:67:92:09:
         e4:7f:56:a1:3b:9f:14:e4:a1:ac:40:d5:33:3a:29:a3:42:b6:
         11:b7:06:ee:62:6b:51:bf:f0:e0:06:9d:81:dd:22:0d:76:fa:
         82:48:8a:ac:53:15:05:f7:ec:9c:d3:90:fd:be:eb:ea:20:6c:
         84:a5:c0:e0:49:ee:74:02:cd:1d:90:4b:27:8c:65:bf:cb:4a:
         8c:3e:19:80:59:a4:a7:57:d3:01:25:37:88:e3:fb:c1:b7:5b:
         e4:b0:8a:4d:56:1f:62:c0:c1:82:b1:93:35:5a:5c:9f:b6:cb:
         d8:5a:e6:db:66:4c:e7:eb:f7:95:53:9a:f9:95:5e:2a:75:28:
         8d:ce:a0:fa:5a:ae:fa:d5:56:0d:4d:2d:df:67:ea:2b:12:a7:
         66:dc:57:b7:5a:02:fa:1f:57:ac:71:c0:8b:dc:a6:e8:52:df:
         e6:be:d9:20:26:7b:ec:3c:97:3e:3a:8f:77:3f:50:1f:35:87:
         1c:c9:3c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:20 2026 by rpki-client