Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File:                     hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier:          6C/KHMyjHclMVkEowW91WVZF97vgl4JfrAZgBIgyp08=
Subject key identifier:   A5:1A:D0:18:51:22:D6:E9:85:7C:8F:22:89:CF:84:84:56:53:CF:7F
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer:       /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial:       019E1D5930BCF23F04B0F4047561E9E09AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 18:00:44 +0000
Manifest this update:     Tue 12 May 2026 18:00:44 +0000
Manifest next update:     Wed 13 May 2026 18:00:44 +0000
Files and hashes:         1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=)
                          2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: 843JfXjmZ54Mq2Ja06Tmdg+ztoqno9XZRv3hY7OXiAY=)
                          3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=)
                          4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=)
                          5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:30:bc:f2:3f:04:b0:f4:04:75:61:e9:e0:9a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
        Validity
            Not Before: May 12 18:00:44 2026 GMT
            Not After : May 13 18:00:44 2026 GMT
        Subject: CN=a51ad0185122d6e9857c8f2289cf84845653cf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:15:dc:53:d5:d7:08:68:71:db:6c:ea:46:
                    f3:0c:80:80:84:33:89:18:1e:b6:d1:e4:e9:51:f9:
                    cc:d2:1f:e5:ac:26:57:d5:8a:1f:9e:ce:13:63:74:
                    9b:eb:5b:cd:13:38:c2:30:41:44:ae:65:ea:ff:62:
                    2b:67:a7:5e:84:50:4c:fd:b5:89:a5:96:06:1c:84:
                    32:87:61:cd:f9:2a:8b:1e:af:63:40:fd:8b:ea:4b:
                    10:26:76:6c:00:83:21:54:19:0f:29:9b:8e:3b:d9:
                    19:d6:cf:f6:77:f1:ed:55:fb:46:1e:dd:5c:7b:78:
                    72:44:dd:2c:26:ea:40:07:c5:6c:75:79:8c:de:39:
                    97:3d:18:e9:52:c0:d5:bd:ea:2b:59:c3:31:22:31:
                    23:92:f6:3f:0f:ff:52:c3:72:a2:6a:3f:d8:a8:73:
                    75:9a:87:e0:8c:03:d7:02:42:5f:35:cc:a9:df:46:
                    80:e5:e0:ff:36:a9:c9:53:f5:37:46:22:6a:69:4f:
                    40:b7:ba:57:65:5a:3d:e1:f4:33:14:bd:7b:5a:3b:
                    d3:b0:aa:ed:33:57:a1:b0:00:5e:98:48:d4:82:e6:
                    34:72:5b:3f:7c:a9:6f:9d:f9:aa:58:61:48:8a:37:
                    e6:f9:b4:eb:81:4c:7b:3b:60:28:ff:da:ba:00:bf:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1A:D0:18:51:22:D6:E9:85:7C:8F:22:89:CF:84:84:56:53:CF:7F
            X509v3 Authority Key Identifier:
                keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fb:67:15:09:d1:c0:89:0f:dd:c4:77:90:4e:e0:97:45:80:
         25:1c:be:a0:49:23:36:e8:b6:05:8f:f4:8f:b3:28:14:c7:96:
         89:b0:03:b9:28:1c:e5:cb:56:d0:2a:30:7d:f0:e4:dc:b4:4f:
         51:f3:51:a0:3b:b6:3a:7f:1b:0a:8e:d9:a8:78:f4:1c:16:01:
         2d:55:d4:2a:ac:6f:c9:06:34:0f:af:ff:27:12:c5:b9:4f:a4:
         21:24:54:db:c6:7e:0c:52:bd:1d:20:db:54:95:38:c3:67:71:
         35:69:dd:b3:d8:5a:58:53:2c:79:65:88:3f:fb:7e:87:78:95:
         d2:49:6b:ea:c5:24:e6:6a:e0:45:7b:50:9f:ac:7a:80:28:67:
         44:4e:10:5d:88:47:eb:c2:9a:a2:b1:98:c3:59:e1:34:f8:e0:
         02:1c:3e:fc:42:eb:ab:2c:3c:20:a2:0b:fe:0b:ed:88:0b:56:
         4b:16:d6:e0:70:12:17:4a:6f:a6:30:bc:5e:cd:b1:5c:c3:01:
         36:63:1c:75:3a:ce:9f:1b:bf:75:21:b7:44:e6:85:15:97:ab:
         61:08:05:3c:45:54:37:25:e2:ba:0a:50:4a:a0:ec:f8:ab:b5:
         89:cb:b6:b0:01:77:4c:bb:f2:66:2c:aa:87:2f:9b:83:de:75:
         6d:e8:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:32:35 2026 by rpki-client