Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File:                     HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier:          H0D+uhuHNEQDo6peu6Xeig6w4z/wNLz6E1Yu/BDowyE=
Subject key identifier:   36:93:46:79:0E:F9:84:B9:0B:7D:DF:98:4C:B3:FB:AB:8C:95:8A:85
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer:       /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial:       019EBEED620FEEF9593007A181DD9C31D52C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number:          1508
Signing time:             Sat 13 Jun 2026 03:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:28 +0000
Files and hashes:         1: 5bhy7eDbTF3iSMoLKUHBCIILj4E.roa (hash: 9YusEuoHgRDwFpuJ1B9xJzYQFifXAqM0fNdh2jgcmr0=)
                          2: D-r3D7TjflJW1amM5h7I8MR0oUk.asa (hash: z5fDIV8YawnmcSoSc/AVZ5e/iduZ1ZCGdbI+J/9nY3A=)
                          3: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: a49ARgU/uWdjMcxUDiVvfoVBezmb2ki8/Y+daj7NIQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:62:0f:ee:f9:59:30:07:a1:81:dd:9c:31:d5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
        Validity
            Not Before: Jun 13 03:01:28 2026 GMT
            Not After : Jun 14 03:01:28 2026 GMT
        Subject: CN=369346790ef984b90b7ddf984cb3fbab8c958a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dd:c6:41:c5:25:50:29:da:24:d0:cd:22:eb:
                    b7:10:1b:16:46:fb:67:c2:e0:7f:d0:4b:12:37:2a:
                    9d:36:74:bc:99:7d:2e:a2:b5:f6:58:1c:fa:b9:23:
                    87:0c:b6:17:fd:d8:e7:ce:db:d5:8c:10:a4:b7:c9:
                    fb:c7:70:b8:d3:86:31:00:3d:42:6e:1b:0c:36:87:
                    03:63:8b:53:4c:7e:3a:76:3a:f6:23:19:5e:96:28:
                    80:f0:2b:2f:21:3b:c5:5a:f2:2b:cf:a3:5c:ec:d7:
                    a3:27:f9:f9:d5:eb:34:b4:4e:0b:cb:6b:0d:e1:cc:
                    5c:a2:03:2e:81:0a:63:99:a4:dd:81:c5:c3:8b:1a:
                    92:32:92:2c:b5:b8:c9:cc:ff:26:30:7e:e4:1f:68:
                    62:db:e4:61:fd:a5:07:76:ca:21:13:87:d8:f1:ce:
                    59:b7:d7:cc:aa:bf:27:aa:16:9b:ae:23:13:28:a5:
                    6e:03:70:dd:26:cd:4b:ec:6c:51:5a:62:77:e0:4f:
                    8f:05:13:9a:96:aa:62:8b:d4:cf:70:95:0a:61:4f:
                    5e:1c:f8:a0:e7:48:04:c6:72:5a:48:0b:4f:80:48:
                    06:72:73:45:e1:6f:91:bb:90:58:a9:97:ee:65:b0:
                    56:00:0d:39:f6:31:a7:21:46:1d:3d:cd:b3:97:57:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:93:46:79:0E:F9:84:B9:0B:7D:DF:98:4C:B3:FB:AB:8C:95:8A:85
            X509v3 Authority Key Identifier:
                keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:48:08:ab:d7:d8:6f:65:3a:69:c8:62:ba:8b:e7:5f:29:eb:
         58:3e:06:c7:a8:c7:01:ed:17:c2:1a:2f:55:77:4f:fd:93:ed:
         6c:c9:b2:2a:aa:3f:48:7a:de:77:9c:87:b9:3b:74:16:28:7f:
         c5:4d:87:6b:35:0c:dc:39:fb:06:47:57:82:9b:d0:41:ff:fb:
         46:5c:ae:02:ea:05:dd:d0:1f:3f:a9:38:5f:18:66:3e:3a:0d:
         9a:50:a5:55:0d:21:3a:cb:e7:f1:dc:68:34:34:50:7a:dc:3b:
         70:8b:de:60:62:e6:ef:3a:62:c0:f2:83:50:84:09:39:7a:dd:
         03:cd:a0:46:15:8a:d6:6a:6f:f6:2f:43:e0:32:dd:92:f0:9d:
         9c:06:7c:8e:48:48:6c:31:b9:fa:c1:38:b7:44:81:9a:7f:0c:
         ae:fc:17:f6:5e:c7:5a:cc:0e:83:da:16:25:80:a3:02:18:c1:
         0e:20:a3:d4:88:1d:02:5c:82:56:2b:8c:ff:32:d4:e8:16:29:
         97:eb:c5:44:6f:9f:33:c5:09:9a:15:3e:3f:f4:2d:7d:d2:08:
         34:94:f0:3c:b4:8a:b1:21:32:ed:58:42:58:01:cb:6a:b3:34:
         f4:fa:3c:00:85:30:ff:eb:ef:aa:f5:d1:5f:0d:cd:e9:12:a1:
         8d:69:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:21:36 2026 by rpki-client