Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File:                     HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier:          durOkxVqU6+CRjnqbhdvIvuWsmHvq155BjXn3hJpgLU=
Subject key identifier:   89:26:CA:14:C5:E7:A7:AC:F4:A9:1B:A5:E2:5D:65:AE:15:C9:19:50
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer:       /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial:       019E1F48180B1DA0BDAB5281454EDCE66ADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number:          03BE
Signing time:             Wed 13 May 2026 03:01:18 +0000
Manifest this update:     Wed 13 May 2026 03:01:18 +0000
Manifest next update:     Thu 14 May 2026 03:01:18 +0000
Files and hashes:         1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: 9FSdbM/I4+FAPrFM29IJUQjdsxV0Khu9+liKxA8tr2g=)
                          2: fxHBsVKaXsttW_zXOj8FZqtqL7U.roa (hash: J1BSTHyqQv5WDh3XQtbmLEWduZkd0l1Wk4UUhPLMUhY=)
                          3: sIfcqsxg3WW57k2COZeb4Iarq9c.roa (hash: wIaOvcTZtG+qCBDexHsWNsZh+YEPmUdduOIOWtQaX0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:18:0b:1d:a0:bd:ab:52:81:45:4e:dc:e6:6a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
        Validity
            Not Before: May 13 03:01:18 2026 GMT
            Not After : May 14 03:01:18 2026 GMT
        Subject: CN=8926ca14c5e7a7acf4a91ba5e25d65ae15c91950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:ff:f9:62:f2:8b:6b:14:79:ce:f7:5c:f3:
                    9c:1d:3b:62:ae:34:8f:97:97:fb:40:f2:ca:d7:a7:
                    a6:3d:6f:b9:36:2a:07:84:17:5a:ff:63:24:79:ca:
                    75:66:f5:b1:01:43:2d:04:26:99:68:d6:ab:ed:de:
                    45:20:24:a5:5f:13:04:36:82:4f:ba:f4:83:9f:60:
                    73:28:d6:b0:24:25:98:9c:f6:3d:cb:28:e4:26:f8:
                    83:2f:a6:83:95:07:35:a8:12:0c:9a:af:b3:78:d2:
                    48:fd:3a:54:78:88:c0:ce:93:35:86:62:24:84:78:
                    f2:27:27:32:e1:3d:74:3e:ad:03:1e:bd:b5:f1:28:
                    45:29:c3:66:37:27:6d:c5:30:c3:b3:d6:03:b5:58:
                    9e:4d:d6:d3:06:b7:64:ef:25:0c:5c:5d:72:78:4f:
                    0f:e1:de:a1:3b:cd:b7:cc:ee:1e:bf:60:87:c5:7e:
                    f5:72:66:1f:6b:5c:36:c1:8f:f0:46:4a:03:ab:b6:
                    40:cd:ed:61:c5:c7:03:53:25:8e:81:0c:0d:cd:4b:
                    16:c5:97:2c:4d:7b:9f:fc:dd:2c:bf:64:a9:36:d3:
                    d3:8a:40:5b:85:21:4f:05:08:f3:3c:9f:1c:49:ec:
                    5f:aa:90:5f:6b:c9:c1:95:e3:c9:b4:0b:c7:52:65:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:26:CA:14:C5:E7:A7:AC:F4:A9:1B:A5:E2:5D:65:AE:15:C9:19:50
            X509v3 Authority Key Identifier:
                keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:29:9b:8d:32:ac:2f:80:76:ba:c5:35:c9:2f:d2:da:47:47:
         b8:1b:db:9f:0f:cd:0b:06:ce:1b:dc:de:32:dd:17:77:c8:c8:
         bd:cd:71:75:65:a4:81:9e:0e:c0:2d:22:0e:a4:5f:36:93:da:
         c8:10:9e:0e:e2:70:eb:dd:7b:59:b5:f0:c0:2b:8c:23:6f:a7:
         4e:04:e2:c2:14:f0:e9:12:1a:d6:b4:fb:13:97:36:7f:cc:10:
         c4:cf:8a:57:bc:5e:16:86:4c:80:a5:02:bc:1d:62:cc:f8:60:
         69:73:9a:d8:92:f3:0c:b5:2e:c8:6a:0c:c6:b3:0c:11:4f:09:
         d6:8a:0c:c9:e6:8d:18:8b:ab:5a:83:11:cb:9f:69:81:b9:ed:
         bd:a5:a0:09:45:4a:bb:78:54:0a:9a:6f:17:8a:ad:64:c3:5a:
         2b:d3:8d:4b:fb:63:b9:d1:46:bb:f6:db:30:cf:0c:b8:56:45:
         d6:24:87:b6:36:cb:d5:f2:6a:c7:8a:c6:2c:93:77:eb:b7:54:
         ad:05:62:58:62:74:56:e8:04:1c:9f:27:03:ae:50:4c:4e:f0:
         0e:52:59:bf:7e:02:21:8a:80:eb:58:66:df:4f:cb:95:b6:2f:
         90:ae:b4:d2:bf:2f:c9:ea:8f:99:cf:9c:1a:57:8a:35:bd:3e:
         68:7b:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:46 2026 by rpki-client