Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File:                     tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier:          LLF1ppD6shSJ/hFyX94hf7WrKg2YVUo3Uqyfy8gvUWI=
Subject key identifier:   16:88:B9:A5:C0:73:28:F7:AA:03:68:38:D5:AE:19:04:57:9C:A0:74
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer:       /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial:       019E1EDA0E0D08BE6C09D82FEB38A5F0856B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number:          162E
Signing time:             Wed 13 May 2026 01:01:07 +0000
Manifest this update:     Wed 13 May 2026 01:01:07 +0000
Manifest next update:     Thu 14 May 2026 01:01:07 +0000
Files and hashes:         1: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (hash: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA=)
                          2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: 4cYVtwLNFahHdgmPihniN8/ozMHnhcXFKP3r1ELjKto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:0e:0d:08:be:6c:09:d8:2f:eb:38:a5:f0:85:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
        Validity
            Not Before: May 13 01:01:07 2026 GMT
            Not After : May 14 01:01:07 2026 GMT
        Subject: CN=1688b9a5c07328f7aa036838d5ae1904579ca074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:c0:cf:13:d7:fd:62:b5:8b:16:78:e0:c0:
                    19:33:5d:66:e1:e2:56:a4:6e:0e:de:73:b0:d9:c2:
                    f2:b1:f3:2e:78:42:7d:e0:42:31:7c:c1:d0:54:54:
                    9d:cc:48:6b:58:76:4c:8e:86:0f:96:b5:b3:d5:bb:
                    58:4e:36:24:2c:90:3b:b8:38:d9:61:28:e4:32:5b:
                    18:bc:8f:50:c8:d0:20:3f:31:98:15:5e:82:5c:e1:
                    66:33:63:4e:05:41:13:ed:d8:34:2b:8a:1f:fa:11:
                    5a:31:9d:b5:c3:6f:6d:6b:d5:62:f0:a9:60:78:ca:
                    36:5d:51:aa:11:5b:a2:86:b1:f9:45:89:80:dd:5e:
                    5d:83:7d:27:94:10:c9:13:88:e3:c4:9b:63:cb:01:
                    f3:34:b8:28:67:74:16:0b:71:a7:dd:b9:06:86:0e:
                    cc:88:c6:e9:fd:54:00:23:27:e4:11:2d:dc:4b:59:
                    32:59:41:bd:c2:b3:fb:db:d9:cf:75:b0:d5:41:73:
                    9b:0f:e5:9e:06:e6:66:2b:68:dd:7e:e6:3d:66:52:
                    2e:f7:d6:9d:ac:34:ad:d9:c2:fd:7c:f8:fa:80:a8:
                    9f:1e:49:2c:83:5d:f0:70:47:b1:9c:42:bc:bf:da:
                    19:04:16:4f:06:22:e6:37:7f:1e:a6:25:b0:e8:d3:
                    e3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:88:B9:A5:C0:73:28:F7:AA:03:68:38:D5:AE:19:04:57:9C:A0:74
            X509v3 Authority Key Identifier:
                keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:e4:c1:92:76:d0:c2:57:39:08:b9:58:1e:6d:ca:50:3d:
         17:67:b7:c2:51:82:98:2c:cb:f1:80:9b:46:00:f2:ce:1a:00:
         6b:16:05:85:d6:d7:ea:0d:f2:7a:be:be:94:23:0c:74:d6:84:
         b0:67:92:47:c0:cc:78:ae:21:6c:dc:64:de:51:b8:0e:65:f6:
         ea:91:52:3c:04:c1:20:8e:48:1a:e4:21:28:0f:4b:4d:14:63:
         34:f1:ac:c4:78:4f:de:f3:2e:87:81:ef:02:4c:75:ec:59:a3:
         0d:c2:a3:2b:de:c6:18:7e:1f:5d:41:d4:37:5d:3e:db:1c:83:
         d9:f5:50:a6:c0:bf:63:6a:68:36:91:13:07:21:41:4e:45:7e:
         9c:be:f2:55:e5:e3:d2:07:0d:de:c9:4f:18:91:05:a0:d8:ad:
         50:04:a7:e7:1b:2b:88:a7:57:a8:a0:51:55:b4:df:ae:f2:4d:
         36:cc:01:75:57:99:18:87:85:99:da:72:ae:15:c7:f5:ed:a4:
         2e:ce:27:6e:da:aa:46:96:67:a0:9d:69:53:96:88:8b:fa:7a:
         27:a1:94:83:25:94:45:38:2a:47:6f:24:3d:15:90:aa:ac:92:
         32:0e:aa:e7:f3:46:29:62:91:76:07:1c:eb:b2:26:10:34:8c:
         d1:60:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:39 2026 by rpki-client