Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File:                     hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier:          ZafZiD340OgHisE8bEn1w0msuiejeyXN8436s9R5ew4=
Subject key identifier:   57:5C:47:A0:D6:13:FE:EE:B7:14:B7:89:97:B3:28:08:FB:2D:FD:12
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer:       /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial:       019D262877FD5BA909CA20BD42E835AD2B35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 18:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:19 +0000
Files and hashes:         1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=)
                          2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: jwvqz2JzNUTlRpheAdL7wslXwa+UM52CekgVQg5T2go=)
                          3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=)
                          4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=)
                          5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:77:fd:5b:a9:09:ca:20:bd:42:e8:35:ad:2b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
        Validity
            Not Before: Mar 25 18:01:19 2026 GMT
            Not After : Mar 26 18:01:19 2026 GMT
        Subject: CN=575c47a0d613feeeb714b78997b32808fb2dfd12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:26:5f:8f:66:dc:90:84:96:9d:c0:24:1b:
                    0e:47:28:27:60:b0:96:c5:bb:62:36:11:fd:9c:50:
                    89:95:60:53:5b:d1:11:51:7d:09:e2:c6:88:e7:92:
                    57:46:9d:cb:bd:61:60:d6:aa:d9:6a:6a:5e:7b:e3:
                    38:b8:cf:2b:dd:e1:03:f0:80:9b:6a:01:e1:28:35:
                    1e:93:19:6e:61:d5:3e:64:63:58:78:b0:a1:f5:a8:
                    61:21:2f:fc:88:5d:c4:ee:98:56:5f:cb:f7:32:d3:
                    64:94:4e:71:25:89:aa:d8:c8:71:c7:44:e9:58:c0:
                    b2:12:9d:16:a8:b4:50:12:ac:b9:76:a5:e8:db:a6:
                    1a:49:2c:b9:da:00:57:ad:fd:80:6f:72:1f:b2:47:
                    9c:53:b9:95:88:11:b7:74:67:e2:5e:63:b0:d6:03:
                    53:37:8b:f7:94:30:52:41:e3:3c:38:72:ae:d0:86:
                    6a:a6:64:ca:1f:b7:5b:54:15:a3:2a:57:01:76:41:
                    5f:9e:54:e6:a7:b6:ef:99:00:1f:2e:8c:7a:c2:fa:
                    c1:2b:6b:fb:8f:37:a1:0a:56:14:69:0d:b9:73:32:
                    8a:c9:13:0f:ac:98:73:76:07:e1:a5:b2:11:0b:a7:
                    cc:a1:57:d9:24:9d:bf:41:ab:5f:5d:7f:d8:3f:4b:
                    38:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5C:47:A0:D6:13:FE:EE:B7:14:B7:89:97:B3:28:08:FB:2D:FD:12
            X509v3 Authority Key Identifier:
                keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4e:4d:f9:da:e3:81:9d:ad:2d:27:7b:b7:0b:55:1e:57:b6:
         42:b8:71:68:89:5d:35:fa:2e:9d:ad:17:f8:d0:f4:35:aa:29:
         73:22:8b:da:d7:29:34:c5:d1:60:0a:4b:7a:69:d0:a9:48:8e:
         ba:ee:ec:00:d1:b0:6c:25:f0:b6:b9:3d:b9:7d:73:9e:78:45:
         71:85:8e:ae:06:c7:f7:93:a6:16:ce:e7:64:52:03:0e:9b:17:
         a6:d8:5b:85:f2:32:71:0d:b7:55:35:9b:5c:67:d9:51:31:d6:
         c5:07:9b:b5:d3:2a:94:3a:6c:5f:ac:50:3f:6a:03:ea:04:60:
         da:4c:07:d7:13:f4:b9:85:dc:2b:2b:2c:3a:e4:c4:3c:1b:29:
         8d:c8:d5:1c:e8:96:08:3a:f0:85:68:40:af:84:8a:c9:53:24:
         3a:1d:2d:d2:5e:c0:65:2f:92:f0:0e:72:7c:f4:84:46:42:5d:
         3e:c0:57:12:d8:03:e0:8e:48:ce:43:93:da:cd:dd:1d:a0:55:
         f9:c2:6d:8e:41:e7:ed:d6:a4:89:f2:f0:b4:08:31:ab:c9:20:
         09:f3:2f:80:ba:23:8a:62:8a:12:02:fd:b8:c3:b6:f6:9f:3c:
         fb:f4:ca:d8:86:04:82:77:e1:cf:a6:2e:ee:c6:e0:8f:0b:dc:
         90:69:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:17 2026 by rpki-client