Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File:                     HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier:          667f7CFFxnEBbOE60XOnIhyXW4r7cKCOiArGUG+MgNQ=
Subject key identifier:   0E:34:2F:ED:7C:35:42:BF:B2:3C:BD:3E:5A:68:38:56:A4:CC:BA:4A
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer:       /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial:       019CAA216AA588D1FA364A175F5934F20F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number:          092C
Signing time:             Sun 01 Mar 2026 16:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:42 +0000
Files and hashes:         1: 3W6mluySiEpKej6eN1jA5zstxy4.roa (hash: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ=)
                          2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: vQIP0+shSjAv+Sj5xNd7sRcy9SVIOxLE+8L77whqdJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:6a:a5:88:d1:fa:36:4a:17:5f:59:34:f2:0f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
        Validity
            Not Before: Mar  1 16:00:42 2026 GMT
            Not After : Mar  2 16:00:42 2026 GMT
        Subject: CN=0e342fed7c3542bfb23cbd3e5a683856a4ccba4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:67:37:f4:d6:00:d8:10:54:b3:78:ac:3d:20:
                    24:12:97:5a:e0:8b:3d:dc:65:6f:2d:56:a2:64:50:
                    35:1a:8a:27:2a:c4:4e:cb:bd:f4:35:9e:c0:93:c5:
                    4b:e9:a0:38:99:fe:57:fe:d1:fc:7d:91:62:fa:59:
                    a6:7b:3b:2d:87:67:e3:be:e7:14:93:d2:9e:6f:4b:
                    82:33:15:c5:b6:98:42:f9:cc:23:6c:2e:4a:79:29:
                    ae:63:d9:cd:d2:b7:76:a9:2a:5b:62:69:aa:a0:93:
                    11:98:38:75:2a:f9:eb:1f:02:bb:50:e8:2b:7b:bc:
                    1e:89:45:bf:a3:16:a5:e5:98:09:d5:4e:cc:2b:e3:
                    8a:61:c5:9e:26:7b:0c:1f:23:a8:58:9c:f4:02:c6:
                    6f:5d:06:27:e5:d6:ab:d4:2e:3d:63:a4:e0:0b:82:
                    24:4b:2a:86:82:b8:62:c9:79:2b:1b:bc:1d:ad:d1:
                    4d:32:cc:1c:49:73:92:69:d0:3c:ba:4d:c3:a4:38:
                    3c:6c:fe:9b:e5:bf:2c:a7:67:f6:c6:60:21:43:1f:
                    ff:fd:d6:ff:79:25:48:95:47:0a:c1:13:b2:77:82:
                    f5:31:f5:88:60:fe:14:e7:02:0b:65:4b:26:37:2d:
                    03:9c:01:e9:0d:61:30:f2:a5:1f:f9:4b:62:7b:3a:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:34:2F:ED:7C:35:42:BF:B2:3C:BD:3E:5A:68:38:56:A4:CC:BA:4A
            X509v3 Authority Key Identifier:
                keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b8:c0:5d:9a:c1:3c:6a:16:d3:65:02:5e:b5:c9:52:7e:47:
         6f:c3:3c:bc:cd:99:80:40:00:8d:0d:e8:51:7f:c2:6f:71:05:
         99:9d:ab:6c:db:61:70:fc:f4:ba:0d:b2:69:58:cf:07:d9:a6:
         77:ed:59:60:f2:1b:4c:07:bc:13:02:3d:17:e6:b4:59:eb:f6:
         1b:8d:f4:a6:d7:70:1c:4e:33:26:b3:f1:d7:21:25:8f:bd:4b:
         72:51:1c:01:50:e4:8f:02:c8:35:30:26:eb:42:3e:3d:70:2d:
         2b:81:96:64:c2:91:b2:2b:90:ec:50:48:60:99:ba:c8:5b:da:
         e0:f9:97:04:2e:99:b5:7b:19:f2:1c:45:cd:e9:bb:5e:7d:f2:
         e2:74:56:72:71:20:8a:37:4e:26:41:30:1d:66:22:9c:3a:0b:
         f8:92:32:a1:83:16:95:c1:29:e5:76:6f:77:1f:89:e7:ed:14:
         4a:23:cd:8b:60:e1:0e:0d:5c:f0:54:df:e2:7d:41:b4:31:02:
         54:bb:2a:69:cd:49:78:d9:44:14:50:57:88:dd:f6:a3:ec:93:
         fe:a8:01:e5:5b:ab:17:a9:00:9f:7d:68:9d:51:e2:c5:f7:22:
         97:bc:f2:84:2d:d3:71:d7:d2:50:12:3e:cc:fe:f1:3f:b3:63:
         f5:d8:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:19 2026 by rpki-client