Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
File:                     HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json)
Hash identifier:          nvM0IJHJYbPOrFbI8pDfdMrQpLsTueqx3NZaQHqO2G8=
Subject key identifier:   36:5C:6D:B2:3B:E3:60:64:B4:9D:C5:BC:01:D1:88:64:02:B0:B8:F9
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Certificate issuer:       /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial:       019CAC100ABD1861E1B2C1BA9B747DC25E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 01:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:58 +0000
Files and hashes:         1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: 1wDcQ3b2tEUbW6tymSESBCCEgd8uAO8gIOceUBKA4Fs=)
                          2: s0dYC6-RVRGw5a-WyYT4vShlFiY.roa (hash: f/X4gwVN0rJwSCQpT33krgHJNAGm21o5YhKb8UpMGx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:0a:bd:18:61:e1:b2:c1:ba:9b:74:7d:c2:5e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
        Validity
            Not Before: Mar  2 01:00:58 2026 GMT
            Not After : Mar  3 01:00:58 2026 GMT
        Subject: CN=365c6db23be36064b49dc5bc01d1886402b0b8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:d9:c9:93:84:d0:1f:3d:75:29:22:d8:16:
                    ee:0f:53:8b:f8:e4:e0:58:aa:12:d9:1a:47:ff:4c:
                    0c:ae:74:86:2c:43:09:42:d7:a1:d6:b1:65:a0:fe:
                    2f:cb:b6:c6:fb:a5:48:e3:8d:6b:4d:0c:4b:57:fa:
                    d7:2b:44:46:6c:08:b8:7e:80:6a:5b:d0:51:7a:07:
                    4d:27:0a:76:50:69:46:70:4a:d8:b3:d5:03:4d:96:
                    20:bd:99:96:3f:6d:cc:5a:62:d3:ff:7d:01:69:24:
                    8b:81:96:0c:d7:26:a3:8d:ed:84:bd:8c:ca:32:12:
                    5d:b6:a3:4d:16:86:22:5c:bb:fd:8b:d6:33:fd:a4:
                    8b:93:15:79:fb:a0:68:6a:00:66:1c:06:38:ce:42:
                    99:39:b0:c8:b7:ce:52:61:e0:e7:9c:88:7f:e3:f8:
                    a4:4f:1f:1b:4e:01:88:56:65:77:67:10:90:97:ea:
                    a1:9c:3e:1f:6c:41:3d:95:31:cb:77:00:94:29:db:
                    b9:b2:ac:80:51:f0:fb:67:cf:a0:5c:29:44:ab:8a:
                    29:31:5a:1f:54:38:16:f3:44:6e:32:fa:71:ee:68:
                    e3:9f:49:e4:90:c0:fe:a6:dd:98:76:f6:bf:f5:12:
                    73:97:53:b0:12:21:81:61:a9:99:d1:6f:74:6e:a4:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5C:6D:B2:3B:E3:60:64:B4:9D:C5:BC:01:D1:88:64:02:B0:B8:F9
            X509v3 Authority Key Identifier:
                keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2f:aa:5f:ce:93:eb:04:b7:55:2a:d6:ef:5b:ad:a6:63:03:
         6c:8f:9e:8a:93:68:c6:90:78:b2:62:d3:4b:61:76:5e:e9:b7:
         73:33:5d:d0:47:57:0b:c2:00:6f:e3:f7:e1:8c:6a:e1:ee:36:
         04:1b:41:95:36:06:92:76:3b:15:45:93:ef:a7:3b:29:e4:5d:
         8d:a2:0b:b1:4f:d8:41:d4:3e:78:76:84:50:32:55:41:b7:a5:
         1c:5e:e6:2a:c8:d3:5e:f4:33:c8:5c:98:cf:7f:3c:78:6d:f0:
         a6:f3:af:3a:52:38:a8:9e:ab:d4:0b:d9:b8:c2:02:b6:e0:e4:
         ae:3b:88:72:27:d4:28:b0:8f:66:7d:96:21:26:24:c2:85:bc:
         14:16:47:68:3b:cb:43:cb:c4:3a:d1:d4:95:cb:f0:c5:45:4e:
         73:f2:53:19:fc:38:b4:c9:c5:7a:31:5e:49:10:7f:4d:90:07:
         16:82:60:1c:3c:e4:a2:04:83:fd:ba:02:2c:dd:88:f8:e7:29:
         c6:77:02:94:40:56:28:2b:7e:3a:5c:f6:fc:69:e7:2b:25:5b:
         ce:e3:7e:c6:6f:49:4b:2f:0f:fa:19:32:8e:8b:c0:8e:b3:ad:
         3e:54:5c:6e:37:e8:9c:a4:96:e4:a9:7c:26:12:b6:df:09:a6:
         71:88:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:50 2026 by rpki-client