Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
File:                     V-HUowlen6i5N9f6pDdZNyfSOTI.mft (raw, json)
Hash identifier:          R025eZ/rWur+aV554a7fSaaV6XlX8LNLasEd/bMwwq0=
Subject key identifier:   5E:87:BE:0B:7D:C7:F2:67:B8:79:FB:8F:E0:25:21:9A:FB:BB:DF:1C
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Certificate issuer:       /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial:       019DA3E6F92B8AF115B8DC437BB8D725B259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
Manifest number:          080B
Signing time:             Sun 19 Apr 2026 04:01:56 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:56 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:56 +0000
Files and hashes:         1: UAe6hHF4tY5tJRAZ4zl4Keq33hE.roa (hash: 4qhi3u98mfE9B0D9RD9MOTzasDKVZY5O0ywJYLJl2BU=)
                          2: V-HUowlen6i5N9f6pDdZNyfSOTI.crl (hash: VXvPVVGA0eyCM0U+p3Xs3yhe5bCxnXngU0QAV1ypFDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:f9:2b:8a:f1:15:b8:dc:43:7b:b8:d7:25:b2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
        Validity
            Not Before: Apr 19 04:01:56 2026 GMT
            Not After : Apr 20 04:01:56 2026 GMT
        Subject: CN=5e87be0b7dc7f267b879fb8fe025219afbbbdf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:92:6c:55:28:3f:d3:bf:a8:64:6e:3d:8c:
                    76:8f:b7:0b:f1:45:bb:a6:b0:f3:20:2c:40:80:40:
                    19:23:d0:c1:9d:ba:40:ed:eb:31:9f:4d:df:78:6e:
                    fe:d7:01:cc:a7:d7:72:92:3b:93:52:cf:4a:3b:86:
                    32:df:13:db:11:a7:de:66:6e:85:3a:ce:03:d0:df:
                    a8:7b:74:d2:7a:ef:1b:98:a7:99:d1:09:2f:42:91:
                    3e:95:1d:9a:ca:06:83:7c:16:c7:8c:f7:19:eb:1e:
                    61:ff:68:21:dc:ab:3c:fc:8b:b6:f4:36:56:67:a7:
                    76:50:fa:29:00:56:ce:5d:43:77:c9:c6:af:45:ab:
                    3b:a0:7d:68:f5:88:bc:7d:b4:13:38:4b:c6:70:c6:
                    5f:da:29:ba:23:a0:35:00:49:66:a4:5c:1e:8d:b4:
                    6c:c9:66:41:60:dd:7e:2a:79:e9:7d:5d:95:d8:96:
                    a3:a6:cc:38:67:01:db:84:1d:67:02:6f:54:b3:ee:
                    f4:4c:8c:01:0c:a6:36:4f:b1:73:62:51:b2:da:1f:
                    ef:81:25:0f:d1:a8:f8:74:90:0e:70:59:a5:45:57:
                    19:03:46:41:85:cb:10:4b:2c:f6:8f:28:1f:85:26:
                    c9:d2:3e:4c:3a:cd:be:2a:d0:6b:b6:44:5b:dd:da:
                    ee:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:87:BE:0B:7D:C7:F2:67:B8:79:FB:8F:E0:25:21:9A:FB:BB:DF:1C
            X509v3 Authority Key Identifier:
                keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:70:1f:82:08:c1:e7:97:a4:88:79:27:9b:57:25:f6:16:7d:
         28:f5:b0:ab:b5:21:6b:15:a3:fa:6e:1f:42:85:f8:9b:d8:64:
         47:87:d4:df:3f:e9:16:af:db:6a:38:b3:e1:19:24:5c:18:e0:
         b2:cf:ab:e0:f5:d0:44:aa:2b:b5:6e:e5:38:b3:70:45:e0:58:
         3a:e5:7f:0f:70:30:dd:97:4a:72:ca:8c:fb:ef:88:6d:ba:fa:
         f6:3d:5c:8a:09:c6:91:3e:c1:bd:cc:a5:fc:9c:8a:df:ec:df:
         ee:2e:2c:cb:c4:84:9c:9d:e9:18:bf:c4:c3:ba:da:0b:25:f2:
         b9:27:15:53:e2:e7:8c:91:91:28:c7:a0:0f:90:d9:98:3e:b4:
         be:03:30:6b:bd:69:7c:95:d8:63:96:83:e5:45:3f:21:8e:7e:
         50:c4:61:83:8b:ad:23:12:51:c0:e0:c1:ef:81:d3:db:3e:75:
         ef:bd:68:83:4f:49:a5:7b:90:a4:29:62:d7:3d:a8:23:ae:79:
         cc:ac:24:53:a8:b3:e7:e5:de:18:44:b8:99:19:fc:44:40:1b:
         ed:97:7f:70:79:3f:e0:91:bc:50:0d:c9:86:40:cf:07:53:bc:
         a2:74:83:cd:0e:64:61:22:a5:4f:93:ac:ac:60:dc:41:13:3a:
         5d:5c:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:44 2026 by rpki-client