Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File:                     Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier:          g+TIgQP7BdNJGlPIQdRHTnuOnBKdooHwEMEdN8r5RHk=
Subject key identifier:   35:B7:DC:51:86:38:E7:B3:F4:D0:CE:A1:D8:7E:1D:4D:B6:79:DF:AB
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer:       /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial:       019EC2247BC5226A2FEDB159D9B922B8A2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 18:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:31 +0000
Files and hashes:         1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: ngSVmCRzg9YHrYuq1iyO/TIW0Nt9x0BvpbgJ5kogMB8=)
                          2: idejEcxXsr16g2wp9V8Tc_3IUpE.roa (hash: 2R6v+WJgumF5jKo8h1riFb9sUElHbeJIrHYFIS833YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:7b:c5:22:6a:2f:ed:b1:59:d9:b9:22:b8:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
        Validity
            Not Before: Jun 13 18:00:31 2026 GMT
            Not After : Jun 14 18:00:31 2026 GMT
        Subject: CN=35b7dc518638e7b3f4d0cea1d87e1d4db679dfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:c5:84:a2:99:4b:56:b3:d6:ee:ea:29:eb:
                    5e:f0:e3:9c:06:60:2a:b2:99:35:5d:23:bf:3d:e9:
                    ec:ee:9e:33:0e:4c:57:2f:4a:61:2e:0f:ca:65:30:
                    86:c4:2c:e5:f7:c9:80:a2:e0:74:ef:3f:1a:85:54:
                    f4:dc:fc:85:45:c5:f7:78:22:1b:b2:4e:7d:13:ee:
                    d2:40:eb:92:e0:66:e9:15:18:6e:6a:75:ce:93:f2:
                    35:81:b3:f8:c7:f3:a0:86:f1:1c:a7:69:ad:1d:91:
                    c0:ea:c6:14:ed:6e:4f:44:62:dc:b5:95:85:3a:9a:
                    42:cb:c3:4a:64:69:92:e6:5c:cb:6c:a4:d9:7d:14:
                    20:a1:c0:da:2d:c0:53:41:c2:2b:7b:7c:0b:ac:ec:
                    d1:16:a5:2e:b3:f6:69:d4:56:fc:7f:0c:d3:dd:11:
                    29:2b:d9:16:38:3c:7a:e3:06:63:c1:34:b7:57:3b:
                    81:5f:eb:c1:66:74:4b:7f:ff:b4:42:ae:e4:8b:11:
                    9f:60:51:a7:84:35:4d:2d:c2:46:48:b4:6c:fb:b0:
                    62:67:e4:69:42:d7:3d:c3:d6:2b:a6:a1:4e:9e:1a:
                    b7:72:fc:d6:15:7b:49:c9:46:c5:f4:91:56:07:89:
                    90:4d:94:49:79:ef:9b:09:51:4e:dc:d0:26:32:f5:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B7:DC:51:86:38:E7:B3:F4:D0:CE:A1:D8:7E:1D:4D:B6:79:DF:AB
            X509v3 Authority Key Identifier:
                keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:a2:8b:f1:bb:a5:1e:db:a8:e5:9c:f5:16:00:d2:79:23:
         08:6b:2c:aa:f7:3b:45:bb:80:50:f5:44:62:86:25:fd:6e:3b:
         26:a4:0e:fe:b9:11:37:73:4a:dd:92:a9:c8:2b:36:84:68:68:
         14:79:43:9d:30:22:9c:77:4c:c7:5b:3b:66:9e:3d:b3:f5:8c:
         85:82:5b:50:f6:df:93:e1:6c:34:90:36:78:bb:f8:af:08:c6:
         27:64:59:91:3d:70:84:63:53:63:97:59:37:94:cc:ed:e5:7e:
         5c:7c:15:1b:a4:10:79:31:b5:16:af:a6:6b:41:8b:5e:73:a3:
         21:ce:2a:b8:b5:6f:68:77:a1:75:92:47:a5:1f:51:31:d0:f3:
         aa:a1:e1:1d:a3:0f:23:ac:57:ca:c2:56:4c:06:1f:ce:eb:be:
         27:ae:7a:4e:1b:31:cb:f6:97:d6:04:68:b0:9c:fd:be:75:d9:
         65:5f:be:88:31:8e:71:2c:b3:a8:b6:a9:30:9a:f6:64:cb:75:
         71:08:10:f5:92:45:aa:8d:c9:1f:16:e0:74:8b:b6:67:4a:4f:
         f9:0e:a5:e3:fd:b2:0d:05:b2:49:d8:62:5b:e8:84:c8:a7:bc:
         0d:02:93:cf:71:f9:d7:ed:01:f2:f2:7a:c0:68:40:de:bc:c5:
         aa:34:34:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:17 2026 by rpki-client