Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File:                     HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier:          qlfvTFIp1Mbkz93k2qeXhSMmMtkCmX/jPIEZdXRb0KM=
Subject key identifier:   33:B8:B2:BE:44:F6:A2:50:39:85:F1:32:9B:8C:A0:D0:3E:5C:28:EE
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer:       /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial:       019E202378F3A8BF811A00520AF10DC9C3B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number:          189D
Signing time:             Wed 13 May 2026 07:00:55 +0000
Manifest this update:     Wed 13 May 2026 07:00:55 +0000
Manifest next update:     Thu 14 May 2026 07:00:55 +0000
Files and hashes:         1: 3GAPsMTYGBgdaWsuRskeq9GU52o.roa (hash: dhH4cdTldQtlsGjr6YNc5jjdZoo6HChKtzPMin0Yqxw=)
                          2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: /TU+zYgyn/MEMXe3NhdN3AmDKdmduKD4MKYZwM+YVVM=)
                          3: _Zz8VQ7MI8grviAkY8_zaADFei8.roa (hash: LJuW+ggL7EdFwcEegbo8DIuepwgPOczDjMEaP85LPEY=)
                          4: a_V5J3Vi7G28PHlX5WI1gqWWPqQ.roa (hash: V7Qb7O3ayDy2ziDj46g/EQOgoAU5eN5xUch4BkUXkak=)
                          5: iWpXIGhiwH7fwofoLu2xcq86kzE.roa (hash: X0PfgdblFhAyZnopcIvEudnKhwK5PlO/KEXA8MHJFq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:78:f3:a8:bf:81:1a:00:52:0a:f1:0d:c9:c3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
        Validity
            Not Before: May 13 07:00:55 2026 GMT
            Not After : May 14 07:00:55 2026 GMT
        Subject: CN=33b8b2be44f6a2503985f1329b8ca0d03e5c28ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:f0:f2:b8:20:ee:8b:f6:bf:27:43:1b:8d:
                    4f:1b:1a:a6:8c:4f:f5:e1:84:af:82:2d:41:61:08:
                    58:fe:dd:17:6b:b8:ae:79:d4:41:62:44:c1:0b:24:
                    fc:44:51:ee:95:24:89:bd:55:42:f9:22:31:92:eb:
                    45:35:6c:8f:3e:54:8e:c7:98:83:f4:46:71:cf:33:
                    2e:09:12:63:2b:45:3f:55:8a:d2:e0:b0:29:84:04:
                    8b:5b:85:2e:59:79:e7:b5:0f:6b:41:c4:bf:e6:fa:
                    69:b7:05:c3:71:fb:59:8d:05:63:34:99:29:ef:fc:
                    73:c8:9e:db:32:d6:1d:77:51:07:3a:d6:76:99:19:
                    cf:74:72:e7:9b:25:1e:ab:69:bd:ef:65:bc:b3:97:
                    64:05:ff:d3:a5:79:3c:53:76:b0:70:6e:59:00:e9:
                    cf:4f:9d:56:db:b0:1f:6d:a3:77:98:8f:d6:aa:d3:
                    82:50:d6:89:9b:1f:37:44:33:19:de:e5:eb:65:5f:
                    40:8e:2c:40:90:9c:1a:57:5a:b2:46:c2:67:e2:16:
                    11:03:a1:18:5d:6c:61:b8:70:cd:2b:7d:f5:bf:d5:
                    4f:12:a3:ee:f4:eb:af:a8:a7:43:d5:bd:1b:a6:1b:
                    99:ce:64:8c:ae:11:32:77:51:fc:20:53:2c:65:26:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B8:B2:BE:44:F6:A2:50:39:85:F1:32:9B:8C:A0:D0:3E:5C:28:EE
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9c:fd:46:b1:5e:c1:9d:d5:f0:7e:3b:93:04:ba:4b:bf:a6:
         0a:71:04:c9:97:b0:af:9d:27:2d:ee:8b:d3:6a:5e:37:c5:16:
         ab:03:ba:c4:69:ba:2c:ae:60:69:66:3d:69:c9:7a:8a:a6:af:
         fc:19:ad:51:5a:1e:dd:b0:23:c9:55:74:03:b2:85:ea:a3:e5:
         cb:98:8a:b7:f3:70:94:86:d3:0f:7a:05:60:44:3a:5e:a5:cf:
         b7:cb:d5:9d:90:be:3e:51:d6:b1:b4:cd:b5:8f:f5:5b:9b:8e:
         f8:95:c6:31:44:f0:10:d1:45:be:d7:32:58:5e:7b:34:02:9f:
         81:67:36:bd:99:88:96:f4:dd:4d:a0:88:94:24:b8:4f:c9:5b:
         92:3e:99:61:89:76:d3:d4:26:53:27:06:df:31:d6:e7:bd:1f:
         9e:b4:69:10:5d:7c:9f:5f:39:cc:e8:96:06:bc:2a:8b:7e:33:
         c9:6e:ff:86:c1:d5:5f:fc:25:99:82:42:52:17:ee:66:f7:78:
         bf:0a:fd:04:f5:75:65:06:93:f5:22:23:6b:45:59:c7:8a:db:
         b4:16:86:92:88:27:37:fa:96:3f:b5:be:17:90:44:84:fd:bb:
         9d:a6:11:14:8c:a8:66:e0:d1:75:03:cc:62:c1:ee:14:d5:cf:
         6a:98:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:31 2026 by rpki-client