Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File:                     HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier:          y8Q/evsgmDJ+w72w5Oru07TI6xVxsOxkxyPfQRAIFLU=
Subject key identifier:   36:A4:53:7E:55:FF:24:78:3C:C4:BD:DE:DB:C1:1D:58:54:EA:85:BF
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer:       /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial:       019E2024438D201E52EF9532CFE179CBE55B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number:          162B
Signing time:             Wed 13 May 2026 07:01:47 +0000
Manifest this update:     Wed 13 May 2026 07:01:47 +0000
Manifest next update:     Thu 14 May 2026 07:01:47 +0000
Files and hashes:         1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: YiAIBnzttlN/VaDl6C2jBxvJzYDli1D7UJUs6Jx5UkM=)
                          2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:43:8d:20:1e:52:ef:95:32:cf:e1:79:cb:e5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
        Validity
            Not Before: May 13 07:01:47 2026 GMT
            Not After : May 14 07:01:47 2026 GMT
        Subject: CN=36a4537e55ff24783cc4bddedbc11d5854ea85bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:bc:7f:2b:fa:af:16:7e:22:d9:5b:5c:cd:
                    0f:ad:b6:f8:e2:31:85:bd:0e:0f:72:44:cb:f9:92:
                    b9:ef:0b:f0:d8:8c:4b:38:62:23:bb:e1:73:a8:9d:
                    fc:b2:84:76:b3:04:bf:e0:25:61:cf:81:08:fc:1b:
                    fd:ec:d8:08:af:d7:af:bd:41:89:f8:9f:00:d9:2b:
                    74:0c:74:5b:09:d3:05:4b:1f:5e:cd:c7:7b:31:9a:
                    14:19:49:8a:15:5c:0e:b8:c1:5b:f9:16:fd:d6:fa:
                    85:63:74:81:59:95:27:8d:2a:70:64:5c:9d:93:bb:
                    6c:f8:b2:0c:50:78:a9:0a:a3:7c:4f:82:f2:26:24:
                    05:e7:31:7b:de:72:e5:2c:5e:1b:eb:79:65:ea:15:
                    1d:f5:6f:eb:e2:96:20:35:9d:ef:bf:a1:60:9a:49:
                    0f:da:00:d0:fd:95:77:3f:8b:e9:77:c8:d1:b1:57:
                    1e:09:53:8d:dc:c1:78:c5:fe:72:8f:87:df:e6:a3:
                    70:0a:8a:56:28:01:50:2d:87:27:6f:91:e4:d2:b0:
                    ee:45:07:22:c3:b0:30:29:ee:3e:6f:97:b4:60:54:
                    e9:ca:4c:ab:53:84:ef:e2:93:e8:bd:70:25:08:9f:
                    3f:85:30:2e:8d:89:68:41:0e:37:13:ca:56:70:fd:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A4:53:7E:55:FF:24:78:3C:C4:BD:DE:DB:C1:1D:58:54:EA:85:BF
            X509v3 Authority Key Identifier:
                keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:88:bc:8c:1a:9a:11:cd:99:eb:16:0a:c1:74:21:47:f3:62:
         48:ea:b2:2a:af:f2:43:64:fa:2a:58:d7:11:21:e4:e7:a6:58:
         ce:a1:54:bf:3e:d1:8d:dc:6b:84:ce:ed:67:d4:1f:b7:e8:c8:
         a3:24:c1:79:28:da:5f:66:f6:dd:39:2d:f5:cb:6d:de:5e:9d:
         a0:7a:ca:95:05:1a:d0:6c:86:16:9a:91:74:c4:1a:a8:19:fb:
         48:fe:e7:c5:5c:9e:e7:59:c0:2b:d1:61:c6:29:d8:03:ca:4a:
         28:5a:4f:3d:93:b2:ae:8e:3f:00:d6:92:9c:59:45:3a:f5:74:
         f3:a8:b5:9b:47:58:d6:3d:4f:15:7c:26:b4:ac:8c:18:cb:8e:
         9f:91:68:c3:6a:ec:c1:e1:f3:c4:2c:00:ae:93:83:13:e6:f2:
         e3:8d:6e:5a:54:d6:20:37:f2:e3:38:76:ef:04:af:32:b6:80:
         ef:64:2f:82:c1:af:2a:c9:06:c2:56:4d:1a:ed:62:17:1d:cf:
         4b:e9:75:4b:e3:4e:5c:16:09:ff:cd:88:1f:07:e4:be:dd:8c:
         39:5f:c1:9f:c3:db:ea:b9:38:81:7b:7f:b9:05:09:f7:43:cc:
         2c:94:e1:7e:9b:fb:28:93:de:e5:6b:96:9b:94:cf:91:52:d6:
         b4:6a:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:41 2026 by rpki-client