Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File:                     HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier:          yUOwHL7cNKI2/sF/klESxcBDZb3iXcfYZoIHZLk1eM0=
Subject key identifier:   C6:C9:15:5B:A0:C8:C5:F2:8C:02:B7:9C:DC:54:E4:99:57:F1:0A:8C
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer:       /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial:       019D27723DD4BDF951639BA7147C8E9F65EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number:          14D5
Signing time:             Thu 26 Mar 2026 00:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:31 +0000
Files and hashes:         1: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: e/mw/m95VyAxi9EbpLywNYey1q2rDx1mZ2gaHR72Ruc=)
                          2: T_J2gttaZHfPXFwYPEnqU4DuSH0.roa (hash: ehbYh6/mcaifo0NfLUxIkQ+Z4QysKZUHdNB+6ZGBtPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:3d:d4:bd:f9:51:63:9b:a7:14:7c:8e:9f:65:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
        Validity
            Not Before: Mar 26 00:01:31 2026 GMT
            Not After : Mar 27 00:01:31 2026 GMT
        Subject: CN=c6c9155ba0c8c5f28c02b79cdc54e49957f10a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:90:8c:a1:12:07:9c:c1:9b:9d:7a:3c:f4:
                    03:2f:98:a2:3a:71:44:2e:c1:35:e6:0f:76:55:48:
                    df:5b:fd:dc:f6:04:78:4e:ad:74:92:33:37:3b:50:
                    8b:50:19:e4:55:ad:61:68:8b:9d:1b:33:d5:32:22:
                    dd:88:ac:f0:a8:da:c3:bd:e5:a2:7b:3e:c5:7e:d8:
                    f0:c6:27:05:3a:d0:f8:55:15:e7:11:47:f0:70:50:
                    b2:4b:cf:30:dd:57:37:39:ff:22:15:a2:4e:8a:dc:
                    02:07:84:d7:5c:6d:95:81:f2:5a:87:32:c7:d9:f5:
                    e4:5e:04:e7:c3:a8:54:22:f3:17:f0:da:cd:4a:ef:
                    7e:35:05:81:60:0b:cb:5d:86:0e:7f:66:f5:80:61:
                    de:e1:ae:28:74:62:45:77:78:48:48:c9:a4:52:54:
                    1e:73:d5:92:58:f4:f0:3c:b2:2f:5e:1b:3e:de:f2:
                    38:eb:64:12:f5:d5:a2:7a:f4:de:b0:ae:df:2d:26:
                    ac:43:10:ac:7b:f8:94:7d:34:ed:d6:70:1b:9e:e7:
                    c7:a8:25:94:a8:04:f5:b9:62:5d:1d:0c:aa:a5:38:
                    f1:2b:17:e3:29:75:62:f8:b6:ff:92:eb:8b:16:48:
                    c2:67:84:3d:d7:2e:c6:5b:fc:46:d3:81:dd:a0:f1:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C9:15:5B:A0:C8:C5:F2:8C:02:B7:9C:DC:54:E4:99:57:F1:0A:8C
            X509v3 Authority Key Identifier:
                keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:db:b2:41:dc:cd:1a:57:2f:c2:3e:bf:89:f2:6f:bd:3f:
         e4:7a:1e:b3:99:16:16:2f:a7:97:ba:97:23:46:44:48:68:91:
         fd:9d:f6:09:0d:01:78:7e:d3:72:21:6f:91:af:f1:8a:42:ad:
         0e:86:c5:b1:a4:86:0a:56:1c:d2:9c:2f:14:44:51:ed:e2:85:
         70:ba:f2:55:10:c1:f1:52:02:1e:a2:31:66:e0:54:71:9a:b1:
         ff:f5:2d:bf:cc:c3:73:12:92:f8:8a:e2:ec:86:82:a4:44:64:
         c8:87:be:72:a4:2f:8e:e1:27:fc:23:54:fb:0c:e5:98:46:bc:
         f7:6d:58:4f:34:5e:62:11:7f:69:3c:e3:76:13:e9:25:3a:a7:
         7a:74:ca:ba:d2:6a:42:b7:f4:fd:8a:cc:d2:bb:0c:f9:6c:8a:
         b8:37:f4:48:10:8f:77:ff:e6:07:77:11:30:c4:06:78:ab:2d:
         5f:a6:fb:3d:c6:8c:df:24:53:26:b8:1c:33:df:f7:fc:d8:98:
         bb:5c:a8:1c:ce:c3:0f:dd:2a:47:f9:81:11:85:eb:b5:f1:34:
         12:61:45:e6:e1:61:4e:ea:ea:b8:9d:45:74:0b:8a:16:3b:42:
         fd:d0:53:82:f9:49:4e:f7:f8:4b:80:f0:09:6a:d1:68:09:44:
         67:2f:be:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:02 2026 by rpki-client