Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          aMrrsztlRjF+ZBQ6vag4ssY3htdGJuD/fbIN/ZRHPhQ=
Subject key identifier:   7C:1E:EB:DF:F5:5D:C6:0C:45:BD:2F:8D:B8:EF:1D:B3:44:7F:70:92
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       019D9BBE8FF525C5DCC5C49175CC831AB732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          0308
Signing time:             Fri 17 Apr 2026 14:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:50 +0000
Files and hashes:         1: 0HI-hYUQzf4SnFU50ilapMC-N0M.roa (hash: OXBTJCBE8s4VmNGyaynb87VbRk7167Q44yiSXd1oMkw=)
                          2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: 3kZ2W0Ti8BINxKN0WnHsYeWHLoBUtlDhMNe90jc2r6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:8f:f5:25:c5:dc:c5:c4:91:75:cc:83:1a:b7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Apr 17 14:00:50 2026 GMT
            Not After : Apr 18 14:00:50 2026 GMT
        Subject: CN=7c1eebdff55dc60c45bd2f8db8ef1db3447f7092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:72:cf:60:1c:57:a4:e1:e9:e1:f9:a6:9c:
                    ac:11:ca:4e:5c:8b:c9:f0:1d:8c:3c:69:51:2b:8a:
                    85:5b:5d:35:5d:ed:83:77:44:f9:3a:ec:81:b9:a7:
                    6a:9f:e0:6d:9e:df:28:40:8f:6b:73:c1:a9:7f:31:
                    f4:fe:24:1e:85:ce:97:8b:ae:64:af:0b:4e:ca:62:
                    e7:64:e4:0f:72:af:9a:92:6a:7c:25:f2:f4:6e:bd:
                    d3:9a:4f:a3:42:c4:5d:eb:ea:36:03:9e:1f:81:2c:
                    ec:fb:a4:35:bf:cb:a3:d6:a0:0c:0b:c4:3d:a3:89:
                    de:8e:2e:83:19:1d:15:8a:0c:6d:26:40:5e:ce:26:
                    03:ca:91:9f:98:84:26:db:c1:39:ef:e9:34:45:54:
                    9e:37:6b:08:13:64:39:e3:ca:fa:e8:a5:a3:7d:43:
                    95:f8:04:f0:4b:25:12:21:5c:63:31:29:9d:35:a7:
                    5d:94:7d:3c:6d:9e:d7:68:d4:c2:41:fa:01:5a:e9:
                    53:32:19:1c:e2:16:1d:e5:55:36:3a:29:24:ed:c1:
                    5a:6b:c2:ac:e0:83:3e:d1:aa:53:e3:df:f6:7d:dc:
                    4b:01:ae:22:36:8b:cd:39:cd:1a:c1:7a:df:b4:33:
                    1e:fc:9c:6b:73:7a:b7:de:1e:f6:54:31:e8:98:c1:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1E:EB:DF:F5:5D:C6:0C:45:BD:2F:8D:B8:EF:1D:B3:44:7F:70:92
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:10:5a:fd:aa:95:c6:3b:2e:6b:fc:a3:6d:b8:ce:6d:1f:d2:
         28:22:0a:eb:ff:d9:e2:d6:9e:f4:ed:7c:9e:e4:39:7a:ba:c9:
         39:d4:88:00:f5:1b:74:08:a7:60:5e:dd:82:ad:8f:6a:c1:e0:
         d9:26:2e:d2:d4:bb:37:9a:6b:38:0e:d6:33:3b:68:53:e0:b3:
         2b:37:28:e0:4a:4c:cc:0c:be:4a:70:e9:0c:9c:ca:6e:f9:b6:
         9d:c5:97:32:fd:34:d4:e2:37:3d:04:4d:b5:a0:66:8c:6e:97:
         8f:97:23:d2:da:79:a5:d2:ee:f9:81:d4:8c:11:56:4e:7e:70:
         80:67:1b:9e:95:3f:1f:13:3d:30:2d:ee:bc:8f:67:1f:92:bc:
         30:49:92:01:7e:47:f4:3e:69:93:e8:81:80:31:ad:f1:d6:1f:
         18:07:d1:9d:be:a0:01:65:fe:0f:fa:eb:89:52:2e:0a:46:a8:
         5e:28:5b:54:f7:1b:2a:7b:85:aa:26:13:11:00:e7:35:1e:80:
         9b:00:af:18:98:ef:49:b3:7a:31:aa:8c:86:9a:4c:43:6c:e2:
         bf:83:fb:ed:47:9f:24:4b:84:c4:15:bf:5c:33:d8:b1:88:29:
         e0:a6:e2:df:b8:5a:23:b0:88:56:cc:94:50:de:d3:53:98:c2:
         73:07:97:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:44:24 2026 by rpki-client