Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File:                     HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier:          iIrT/oD3RxUu0T5akt2WrRR8jIullVNujAh7GQhw360=
Subject key identifier:   21:57:E0:63:7A:7A:D5:5E:8F:12:24:D3:1A:51:79:FE:10:07:62:4A
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer:       /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial:       019DA4543E70A297A81353FE3FE2EC063CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number:          1912
Signing time:             Sun 19 Apr 2026 06:01:17 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:17 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:17 +0000
Files and hashes:         1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: mgp8eDq/0sPlAgH413U447ZtshyEQOcB7dL4lRa1VAg=)
                          2: gSeQdDXn3ygO_8pxNsOKtvz--Sw.roa (hash: a6EzKVma5/2ncxKjHy/KGoWOM1fh0VyLYME9lKewGmk=)
                          3: iX4GSDAKgDO8XApKKPZNl8rlRpM.roa (hash: R6eZBAlVK/N/5iGCZRyVlBAXsKn4rccdhUvB5Vtct50=)
                          4: jnambI_i1Pq9WfSXzTyJxwNqXTw.roa (hash: AT3Vk6O1Rxzzj5x8tTjuoggjZ3puukVm8amtuMG/2yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:3e:70:a2:97:a8:13:53:fe:3f:e2:ec:06:3c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
        Validity
            Not Before: Apr 19 06:01:17 2026 GMT
            Not After : Apr 20 06:01:17 2026 GMT
        Subject: CN=2157e0637a7ad55e8f1224d31a5179fe1007624a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:f4:7c:17:00:70:f8:32:c2:d5:58:4e:1a:
                    81:d8:d9:5d:9e:92:f5:8a:48:cb:8e:15:21:1b:56:
                    63:b0:ee:9b:19:58:07:96:37:a7:32:e5:b4:9c:ab:
                    73:b7:f5:49:fb:f4:fb:b3:7d:7c:d9:8d:ae:9b:1e:
                    ef:bf:65:5e:5e:8e:d0:f0:44:25:68:f5:c2:e2:7b:
                    b0:d3:d2:f5:b8:8d:6d:fe:0c:8b:27:df:af:17:59:
                    f2:7a:ca:5d:91:b0:4d:f4:61:59:ac:41:6d:ce:11:
                    27:19:7e:80:1f:07:6e:c7:90:a0:e8:df:e6:31:b8:
                    75:0e:31:60:67:8c:0a:86:5e:9c:eb:95:e3:e1:25:
                    ae:4e:3e:b4:6e:fb:bc:4a:8d:38:fc:1f:28:90:03:
                    e4:cd:d3:f4:46:8c:dd:e8:f8:bd:e8:47:50:a8:ba:
                    dc:87:ff:b5:88:e5:ac:3f:1a:de:32:ac:53:17:39:
                    d7:c4:bc:49:b1:8b:f8:4a:25:2c:32:c5:3d:b9:66:
                    6d:cf:9a:0f:c2:85:66:4d:3f:22:0a:48:2b:d5:87:
                    7b:c9:f4:bb:95:10:04:8d:0e:28:4c:51:56:81:00:
                    6f:34:ef:ae:9a:bd:65:68:30:46:d9:d2:94:e7:04:
                    ec:b3:63:43:96:da:56:b1:83:01:c2:d8:35:33:f6:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:57:E0:63:7A:7A:D5:5E:8F:12:24:D3:1A:51:79:FE:10:07:62:4A
            X509v3 Authority Key Identifier:
                keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:dd:f2:7c:66:a5:a5:1c:ac:4a:91:9f:e5:0b:7a:63:e3:
         8c:11:2e:08:7e:0a:dd:81:09:14:31:3a:46:04:42:69:71:68:
         98:92:78:ef:91:47:60:15:7f:a5:fd:c0:45:04:5c:f9:f7:81:
         b0:d6:48:1b:39:12:4a:db:3f:01:1d:a7:cb:6c:93:b3:42:ac:
         87:99:8a:b2:c3:82:61:be:fb:9b:37:b8:37:6c:71:0e:c7:7c:
         62:5e:4a:c8:07:07:96:e9:a7:c8:fb:d2:2c:dc:ff:1b:bb:3f:
         6a:04:19:cc:c4:bc:43:04:aa:de:d1:45:c9:1f:00:4b:1c:b6:
         ae:a1:22:12:f3:95:5a:5c:37:d3:99:68:e4:d7:69:13:d2:49:
         03:c2:0a:eb:6a:b6:6a:23:2e:37:8e:12:0c:db:7e:34:17:f1:
         e5:41:84:5d:52:8a:12:82:38:2a:ee:6c:35:5d:90:ab:40:63:
         e3:99:4d:fb:b8:51:d3:09:d5:7d:da:0c:c1:32:2a:a3:ec:b3:
         65:cf:c0:ba:4b:f6:44:53:4d:a2:32:60:42:9f:42:2f:37:6d:
         ff:b3:b6:51:ed:df:14:1a:fb:73:d0:a2:cf:22:c9:f0:ce:31:
         c7:7c:23:5b:3f:32:d4:97:77:ba:02:40:17:db:b3:61:46:a7:
         a5:3f:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:32 2026 by rpki-client