Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File:                     HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier:          0y8NVvUfb7RVY49YgH9fST0+VoiPMUbnxVSl9RfQ0RM=
Subject key identifier:   03:36:A0:C2:5D:DE:66:DD:B8:CA:47:8F:3E:3F:86:E5:31:57:9B:CF
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer:       /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial:       019D9BBEE02C6B58E57DF2052A353C73A93D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number:          0410
Signing time:             Fri 17 Apr 2026 14:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:10 +0000
Files and hashes:         1: D1EmtE1k7u4f07ze8ohcNIZrJqY.roa (hash: 58n5LdTsnNqmYJwdVt7TBvDZfGrTorfZcjCIJKhkX18=)
                          2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: l+q22L0rdT4vyrM+bqmgl35QMw7tVnRtl/2CJZMh89A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:e0:2c:6b:58:e5:7d:f2:05:2a:35:3c:73:a9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
        Validity
            Not Before: Apr 17 14:01:10 2026 GMT
            Not After : Apr 18 14:01:10 2026 GMT
        Subject: CN=0336a0c25dde66ddb8ca478f3e3f86e531579bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:7c:6b:79:0a:76:e9:16:0b:f5:53:3f:9f:
                    52:46:27:75:42:58:9e:15:85:8e:9e:33:a5:84:0d:
                    2f:dc:ee:ab:ba:7a:2f:03:3b:cc:4a:92:66:f8:d6:
                    b8:c5:a7:b6:99:1a:4a:90:f0:6b:79:c0:c3:71:69:
                    be:70:66:f5:0f:fb:fd:80:51:93:90:21:89:0e:c5:
                    a0:c4:99:05:76:2b:0e:c8:a3:7c:7a:0f:23:30:ad:
                    a2:3e:1a:90:c8:75:9f:7d:e5:26:4e:75:8f:5b:cd:
                    1e:9c:77:be:f2:2c:4a:9d:67:6f:13:ca:9d:9e:01:
                    f9:5e:4e:46:6b:01:7c:6f:4e:44:68:33:b3:df:3b:
                    a2:b9:7a:ba:2f:e9:76:04:a7:32:e1:18:43:f7:1f:
                    66:3f:51:f3:22:a6:af:c5:e9:f4:bb:41:fa:78:92:
                    e4:d1:ba:49:4b:87:d2:62:ca:9f:de:cd:d4:db:f1:
                    25:41:16:73:36:46:70:0c:c3:a5:ae:2b:59:0c:e0:
                    ee:91:ad:92:44:e4:ef:a1:3f:4c:56:00:77:64:ce:
                    cd:13:7e:85:cd:31:e4:f3:26:bc:35:53:41:4d:8a:
                    3d:74:cc:e4:56:02:53:75:35:8c:f3:24:e6:c5:4c:
                    c0:d0:9c:b1:ce:f2:c5:ee:c7:19:a1:0a:43:71:1c:
                    34:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:36:A0:C2:5D:DE:66:DD:B8:CA:47:8F:3E:3F:86:E5:31:57:9B:CF
            X509v3 Authority Key Identifier:
                keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:56:db:92:59:d9:7f:ec:b8:67:9b:98:53:32:7d:7b:ab:9a:
         84:5f:3d:98:78:0a:d3:d2:c7:b4:13:68:89:98:e1:34:fe:0b:
         47:60:9a:37:a2:4a:60:dd:09:40:0f:ae:97:52:d4:a0:ed:90:
         b7:38:79:e6:4d:01:97:75:bd:ec:11:6b:3c:e9:c6:7c:4c:58:
         ed:0b:aa:71:c4:e8:ad:4a:aa:b9:31:40:ae:d0:d9:27:cd:fe:
         e8:dd:47:e7:fb:da:2d:15:93:30:51:5c:d1:d9:c8:3a:bf:8e:
         95:3b:02:99:d6:ed:6b:d6:de:f8:96:cd:c8:ef:a4:f8:7c:fb:
         00:72:4c:29:f2:a5:e8:f9:77:8c:6b:48:c1:80:32:53:d4:00:
         d0:d2:52:8c:30:8a:02:59:55:a9:ac:d2:b3:d4:e0:b6:16:47:
         da:f8:45:5a:ec:b5:2a:e2:75:ef:f5:00:7a:62:a4:07:07:c5:
         e3:48:90:b6:17:52:96:95:2b:63:21:05:d4:6f:15:10:aa:ac:
         15:0f:86:4e:e5:87:b5:94:1d:39:14:c2:9b:db:83:b9:07:0e:
         8b:91:a9:d3:ef:8f:c5:33:f4:7f:f4:de:ee:96:38:30:31:54:
         98:61:92:11:1a:91:7e:5f:a0:14:a5:b6:16:7c:cb:aa:0d:02:
         41:15:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:56 2026 by rpki-client