Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File:                     HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier:          /H/Cnc0VX3SKnfmXvyHlWFsl3ERO0ixvZuTDItimKas=
Subject key identifier:   35:43:C4:19:15:2B:A1:33:FE:4A:DF:01:EF:F5:B2:42:BA:36:04:49
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer:       /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial:       019E1D90E229FB18454A771FC9782C94C025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number:          1820
Signing time:             Tue 12 May 2026 19:01:34 +0000
Manifest this update:     Tue 12 May 2026 19:01:34 +0000
Manifest next update:     Wed 13 May 2026 19:01:34 +0000
Files and hashes:         1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: UE7xHeYtviahix14gjMa5308Ye6WRXErvdrwDkpou/E=)
                          2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=)
                          3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=)
                          4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:e2:29:fb:18:45:4a:77:1f:c9:78:2c:94:c0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
        Validity
            Not Before: May 12 19:01:34 2026 GMT
            Not After : May 13 19:01:34 2026 GMT
        Subject: CN=3543c419152ba133fe4adf01eff5b242ba360449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:8d:e4:92:fb:08:65:99:ae:9c:ff:6a:d3:
                    6e:76:8e:a2:37:14:92:f7:d8:ed:39:23:47:60:62:
                    c1:35:62:be:5e:01:cc:42:0e:ee:5f:79:ac:48:83:
                    96:76:01:59:f2:ff:e9:90:8e:ca:48:fd:c4:c9:1a:
                    a7:76:b5:de:57:86:08:7e:ba:14:8d:4e:c8:3d:de:
                    db:66:f4:2d:45:63:87:1a:a5:26:39:55:d5:f5:f0:
                    17:03:c3:a1:d0:d1:c2:a7:bd:c4:0c:48:a4:53:b6:
                    3d:19:2d:92:c7:55:93:4b:3d:74:6b:c5:e3:75:90:
                    21:88:3e:73:de:52:96:31:10:bb:52:0c:23:45:07:
                    45:7e:0e:e9:ac:50:cc:43:80:c2:c6:fa:df:53:74:
                    20:ea:b3:2d:20:f5:3e:cf:5c:e1:f6:7c:0e:a0:e8:
                    f5:f4:83:21:e0:12:af:d1:ba:11:9d:43:82:f3:03:
                    df:8d:60:47:8b:3e:0d:a2:0f:ea:ac:53:49:5d:4b:
                    2b:6d:da:a6:2d:97:11:f6:8e:5f:a9:f2:cc:78:3f:
                    66:95:30:44:54:bf:96:b3:f1:2c:09:34:0e:1a:d7:
                    02:24:9c:8e:da:c9:b8:62:00:d7:b3:98:5a:e9:01:
                    78:d6:95:bc:5d:70:5e:ce:11:4f:50:bf:eb:42:e8:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:43:C4:19:15:2B:A1:33:FE:4A:DF:01:EF:F5:B2:42:BA:36:04:49
            X509v3 Authority Key Identifier:
                keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:93:1f:8b:26:89:ec:9a:69:88:8a:f8:19:41:ab:b2:83:71:
         d8:d7:f0:e6:23:82:6e:4f:4d:0c:80:83:c6:24:e0:f9:69:11:
         13:22:89:83:94:b2:f2:7d:85:9c:52:dc:e0:77:44:7e:a2:0a:
         18:9c:a6:65:ff:b2:b2:60:02:c9:6b:a0:17:27:9a:8d:7b:d3:
         b9:ff:12:d2:35:03:b8:1e:31:c2:7c:f2:1d:d7:d9:a0:4c:f0:
         0d:82:2b:59:ad:0f:a4:c6:42:45:b4:78:00:57:89:34:96:22:
         04:60:6e:1d:ab:89:5d:ed:82:e5:27:60:b7:14:9f:24:28:f9:
         94:ca:cc:e9:bf:fa:87:2e:33:a5:08:0e:4d:c7:36:8a:ef:a3:
         91:c8:b4:c6:72:c9:21:f6:6f:fa:0f:50:ee:cb:02:e5:5a:60:
         97:28:15:af:82:b0:71:35:12:69:d9:dc:75:16:9b:b2:a1:d9:
         d1:c5:55:e0:fc:ce:69:55:3b:29:cf:91:0c:4b:48:d0:8f:c9:
         63:29:ea:54:01:a0:e7:cf:bb:08:ec:38:64:86:22:75:18:f0:
         ca:d7:cb:71:59:4b:43:00:f2:0e:e9:85:8b:8e:5f:6b:2e:ad:
         2b:48:98:a2:f5:27:8a:ad:79:0b:72:e4:0b:4e:80:c3:08:25:
         71:d4:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:32 2026 by rpki-client