Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File:                     hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier:          TswixB2JLSiiLpPEUiq42VJr6Oby00AUGW+zyoqgwYE=
Subject key identifier:   F9:3D:BF:ED:A0:2D:91:4F:B8:3B:9B:7E:09:12:AD:AF:B6:66:7D:F7
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer:       /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial:       019E1D598CA5F33952A5CE71960E3683794C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number:          0429
Signing time:             Tue 12 May 2026 18:01:08 +0000
Manifest this update:     Tue 12 May 2026 18:01:08 +0000
Manifest next update:     Wed 13 May 2026 18:01:08 +0000
Files and hashes:         1: dE8xQiANkczZ0tAFkQGK1c1TYTY.asa (hash: TqFGlNij6y9fV1mllromoWTFgsW2Z9/zlXhLCTPAEBE=)
                          2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: bScch1zACnqJKU7y7Pjn+jTIHCIMfLJ09VVDutS/aRQ=)
                          3: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:8c:a5:f3:39:52:a5:ce:71:96:0e:36:83:79:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
        Validity
            Not Before: May 12 18:01:08 2026 GMT
            Not After : May 13 18:01:08 2026 GMT
        Subject: CN=f93dbfeda02d914fb83b9b7e0912adafb6667df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:3f:44:54:aa:b9:e7:5a:12:38:17:ef:cc:
                    49:90:8a:2a:d4:23:78:ce:45:e3:3a:e1:a4:48:4b:
                    84:9d:56:7e:be:7a:b6:4a:b3:f5:64:f7:bc:9b:21:
                    04:e7:c4:1b:d5:28:a2:e3:c2:e8:5d:6c:fc:ce:3c:
                    c8:07:ed:f7:c4:f5:ff:60:e6:9e:9c:00:13:8a:f2:
                    fa:25:53:ea:66:31:af:65:39:67:92:b3:91:e4:7c:
                    a8:af:d8:91:3c:a1:b2:f2:1a:e8:25:1d:54:71:de:
                    5e:91:0c:1d:b2:65:39:3c:73:fd:e3:8f:da:3a:cc:
                    ad:28:f9:0d:31:bc:f6:22:e5:9d:83:53:08:8e:42:
                    44:b3:cf:a8:ec:99:1c:d0:16:ec:18:13:76:0a:d2:
                    0a:ef:27:e6:19:82:47:38:21:82:42:4c:fe:66:80:
                    ad:7e:aa:97:b2:e2:a4:f7:d9:57:80:e0:7c:3a:d6:
                    40:6c:be:98:2e:fb:a2:1a:65:01:88:4b:0a:3b:d3:
                    89:05:3d:23:20:9a:f8:dd:db:47:1d:99:ad:16:95:
                    2e:a2:d3:a3:5e:9a:64:13:40:23:c6:59:b7:74:dd:
                    a1:00:45:a1:b8:ac:a4:85:22:17:1b:ae:75:8a:e8:
                    c7:45:91:49:79:fa:c3:b4:0d:29:ee:65:66:35:53:
                    b1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:BF:ED:A0:2D:91:4F:B8:3B:9B:7E:09:12:AD:AF:B6:66:7D:F7
            X509v3 Authority Key Identifier:
                keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:b4:c6:90:5d:25:c9:cf:77:bf:c7:7b:d6:58:9d:68:5b:
         6c:f1:48:19:39:d9:f7:72:63:60:15:b0:b0:db:2b:a4:1b:f6:
         ca:c5:57:c8:00:20:24:17:ce:eb:bc:a1:6f:d6:9e:9b:b7:0a:
         ee:b3:eb:46:45:58:7b:4f:15:13:0b:9c:15:60:8c:05:bd:84:
         35:49:4d:e3:75:e7:8f:21:46:16:78:66:d3:6e:67:c7:fb:e2:
         e4:82:72:66:84:73:25:ff:e8:fc:49:c2:0c:a8:52:e1:58:e5:
         07:cb:b0:68:4c:fb:99:69:2f:4a:ec:ec:86:93:87:ca:1c:2f:
         1b:ad:c8:29:5b:b4:b5:d0:92:82:8f:41:36:32:55:99:f8:a9:
         b3:2c:1d:0e:da:cc:af:d5:e8:6f:8e:66:c7:e5:86:8f:2e:30:
         05:9e:f0:ee:33:19:15:a6:fb:d2:fc:b1:9f:bd:90:a1:88:fb:
         60:9b:db:85:d6:e6:84:36:3e:2b:aa:6d:6c:0f:ca:6a:da:cd:
         69:c4:ef:3c:3e:eb:fe:51:ba:6b:22:28:a9:02:0c:b4:d8:7f:
         25:38:3f:64:d6:1d:9d:6c:70:64:71:e5:b3:a4:57:97:6a:51:
         40:2f:b2:ae:1d:ea:bc:3f:45:db:d7:2b:9a:93:52:f7:0d:7a:
         e6:ec:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:23 2026 by rpki-client