Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
File:                     HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft (raw, json)
Hash identifier:          XIv6JO0exGC4xRXNBqG4iQv2v8nbhEY/EZDIZLrfvQI=
Subject key identifier:   D9:3A:6E:A9:4E:C1:07:7D:19:E1:23:16:60:7C:AD:D5:21:60:D7:48
Authority key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
Certificate issuer:       /CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Certificate serial:       019D27DF53701868AA1B99F4D1D193438D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
Manifest number:          0490
Signing time:             Thu 26 Mar 2026 02:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:40 +0000
Files and hashes:         1: 3uUdC3qqQNH1_dT0n-HK8fBBniQ.roa (hash: UQYOsde53G7aaoc7Sep9TNvii9QGeiprFatc1ldKcwI=)
                          2: HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl (hash: hgdFxrb1YUGg5Yd4kfJhtSn+fJ75z6mV959uthUBKcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:53:70:18:68:aa:1b:99:f4:d1:d1:93:43:8d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
        Validity
            Not Before: Mar 26 02:00:40 2026 GMT
            Not After : Mar 27 02:00:40 2026 GMT
        Subject: CN=d93a6ea94ec1077d19e12316607cadd52160d748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:6d:1a:ac:af:ac:5d:00:9e:4b:8e:ba:89:
                    bd:a4:d3:5c:f4:ef:15:3a:46:f9:16:2a:01:58:ec:
                    96:6e:9b:c4:14:77:05:09:d6:1c:c1:14:f2:4c:63:
                    6f:0b:09:c3:dd:3c:ed:5a:43:50:80:55:8d:a5:25:
                    38:00:69:6f:39:c7:e7:02:96:0a:f4:26:1c:17:e5:
                    fa:58:cd:5f:ff:12:61:b2:3c:4a:54:ff:ad:6d:a9:
                    1e:21:ef:12:ca:43:d1:0f:6e:e5:92:30:88:33:7a:
                    a2:e3:dd:2c:c0:bc:b0:d2:ef:2f:9b:82:41:c9:7e:
                    79:5f:9e:59:87:1e:6d:55:93:f8:c0:8f:25:99:2e:
                    2a:af:55:c8:bc:fa:53:74:08:34:b6:d7:f9:99:8a:
                    2c:88:38:7a:6e:ee:51:9d:a0:53:07:89:b8:ee:52:
                    f1:f9:d5:b8:ea:96:ce:ea:34:c8:e4:9d:6d:7a:0a:
                    7b:7a:2c:58:73:48:db:98:3f:ac:fa:aa:84:51:89:
                    2e:2d:f8:4c:2f:ed:50:da:3d:34:94:16:3d:60:dd:
                    2c:96:83:d6:5c:e6:02:9f:60:40:76:cb:ba:f0:ee:
                    c5:3a:cc:55:1d:0e:80:05:fd:d9:d7:e3:80:25:fc:
                    d8:32:e9:45:53:f3:18:a6:11:d6:ed:1d:07:6b:06:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3A:6E:A9:4E:C1:07:7D:19:E1:23:16:60:7C:AD:D5:21:60:D7:48
            X509v3 Authority Key Identifier:
                keyid:1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:46:5d:71:aa:31:8b:a7:bf:af:ab:34:ca:ca:71:d3:2e:db:
         22:8a:80:4a:53:83:f9:51:f3:8a:f7:85:e5:a6:47:8e:c6:a0:
         dd:2d:1c:d5:c2:44:85:a0:de:1f:8e:c8:d0:c8:7b:31:6a:22:
         80:4c:b7:2f:ce:a5:6b:9b:07:6b:d2:e6:32:02:67:fb:d8:01:
         aa:fd:0d:b0:aa:38:f0:38:da:3d:9f:e4:73:c7:cf:23:73:df:
         b4:20:70:6c:4f:af:84:50:f2:5c:c0:77:f5:ac:bc:0c:c6:cf:
         b3:2a:4e:37:de:ba:fb:6d:34:68:9a:fd:5a:a0:c8:9f:77:79:
         a6:3a:d5:e5:c7:6e:c3:7f:15:bd:0f:f3:e5:77:e9:66:2d:0c:
         34:92:9a:37:77:2e:d4:f3:68:1c:af:17:37:83:2c:84:aa:0b:
         6c:18:f0:23:e2:a7:84:ef:03:c0:7f:cb:97:89:08:c1:25:10:
         8f:1b:7f:8e:1d:90:ac:40:cc:b6:95:8b:80:62:af:5b:87:93:
         a4:f1:b1:27:fd:dc:c6:01:05:96:8b:a1:24:cb:80:56:ea:e5:
         15:c2:c4:19:80:32:3f:8b:31:a0:d3:68:c9:d1:93:0d:33:35:
         17:10:f7:a3:59:bc:0f:35:86:56:02:f1:f1:aa:50:78:a5:c7:
         68:4e:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:51 2026 by rpki-client