Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
File:                     HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json)
Hash identifier:          3HP4wYVa+qxliAve8q/6WMrvpQZ5Z1pOKKuMWad9oLQ=
Subject key identifier:   B5:52:E1:B0:E1:99:C9:82:48:8F:2E:1B:D8:14:FB:6B:F8:61:DA:59
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Certificate issuer:       /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial:       019E1D901DC679E19DF1F3CD870386AE4AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
Manifest number:          0488
Signing time:             Tue 12 May 2026 19:00:44 +0000
Manifest this update:     Tue 12 May 2026 19:00:44 +0000
Manifest next update:     Wed 13 May 2026 19:00:44 +0000
Files and hashes:         1: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: hLY41movrs/jd/Y2RjQ4kBY7JeBAv4A+gbJTs5+mou4=)
                          2: emamOYQH7VSgnUMUP8mvfhqm5dQ.roa (hash: MSxhtnoAd2af3qlANifc6U+2SnTTVeaXrUw3+bcJ3Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:1d:c6:79:e1:9d:f1:f3:cd:87:03:86:ae:4a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
        Validity
            Not Before: May 12 19:00:44 2026 GMT
            Not After : May 13 19:00:44 2026 GMT
        Subject: CN=b552e1b0e199c982488f2e1bd814fb6bf861da59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:32:84:20:3f:58:62:77:31:30:72:73:f1:
                    9f:4e:4a:03:cc:1d:16:5a:48:f4:1d:6c:4b:a0:ea:
                    a9:1e:db:0c:c8:1d:e9:4a:9c:82:f6:8e:4c:d6:e3:
                    a9:e0:d7:50:3a:11:ea:2b:0c:e0:e8:06:d9:dc:ea:
                    35:4b:10:81:05:6d:19:05:c3:ed:e9:8a:38:44:f1:
                    6d:a0:27:a1:57:ce:a9:c4:8d:ab:11:f1:df:21:a2:
                    a8:b0:af:d2:8c:ea:17:98:65:0f:0f:4d:1e:ac:5f:
                    d7:05:e0:23:37:e7:77:fb:d7:c7:b2:59:3d:e8:6e:
                    e2:8b:69:94:a6:34:42:a3:8d:68:67:6b:e2:2c:15:
                    b1:2a:63:50:71:89:fd:1d:87:ff:64:7c:a1:29:c4:
                    0b:32:79:9b:46:f0:01:39:f4:9b:b3:0d:ab:7c:cc:
                    86:f4:77:ec:97:d4:90:6c:46:d3:41:4f:00:a7:31:
                    59:46:59:2b:61:6f:93:39:3b:47:b1:bc:7d:2c:b0:
                    07:18:f1:53:84:98:bf:13:a3:49:d2:05:ec:ef:af:
                    31:05:ab:e2:63:6d:9f:73:06:e6:09:81:41:df:12:
                    56:cc:0d:56:dc:ed:fc:e7:52:5a:e5:82:b9:bf:fe:
                    af:73:ba:04:c0:35:c2:aa:9a:dd:67:0f:0b:11:d1:
                    6b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:E1:B0:E1:99:C9:82:48:8F:2E:1B:D8:14:FB:6B:F8:61:DA:59
            X509v3 Authority Key Identifier:
                keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:fb:28:14:48:95:d7:d9:17:6f:6f:26:c8:77:07:1f:03:
         bf:a0:42:bb:50:f6:0b:a4:45:43:32:cc:cb:5c:ff:34:a4:12:
         9a:26:05:4d:72:64:21:a2:7a:3e:d8:a3:2e:a4:e7:a6:b7:f1:
         5e:61:4c:d4:e5:dc:57:4b:2a:54:ca:85:94:03:b6:39:1b:88:
         c9:08:fa:23:1b:d5:6b:55:c9:11:11:05:5f:0f:e9:22:ec:56:
         ac:b4:ad:cb:69:f4:41:48:c8:bf:da:e8:f2:a0:18:28:9d:e6:
         5c:1a:30:d8:0b:ed:09:b1:82:36:8f:17:b6:cc:67:74:c9:b7:
         9d:53:4f:0b:79:20:91:92:a3:ca:5b:ab:49:2f:e7:b9:c3:71:
         53:ac:b8:6f:21:55:48:de:5a:4e:69:99:03:06:95:31:d4:bc:
         76:84:c3:44:f1:6d:e9:60:19:50:16:2c:dc:50:40:3b:0a:73:
         d1:a6:23:51:f9:ab:e2:d4:06:75:b5:ce:da:2e:b8:8b:72:df:
         42:63:d1:3b:12:98:33:00:d4:03:1a:7c:40:02:c2:74:92:59:
         62:c4:f5:c7:bf:43:d5:61:84:32:84:49:4d:fb:6e:07:a9:23:
         d9:64:b8:02:69:82:00:25:a5:19:7a:46:93:c0:bb:4d:37:00:
         54:4b:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:36 2026 by rpki-client