Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
File:                     Hms-F_m50MMT0FMCNCUnWydF_IM.mft (raw, json)
Hash identifier:          OtaVVS+YZhjIPO0G43HbH8uicmF14BePg1e88v2CLOI=
Subject key identifier:   52:41:34:52:5E:E0:4D:BB:0E:F4:5A:5B:1A:AF:E0:AA:40:71:6C:E4
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Certificate issuer:       /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial:       01A0E99BD773074DD11770E2819767D1C07F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
Manifest number:          1A0B
Signing time:             Mon 28 Sep 2026 20:01:39 +0000
Manifest this update:     Mon 28 Sep 2026 20:01:39 +0000
Manifest next update:     Tue 29 Sep 2026 20:01:39 +0000
Files and hashes:         1: Hms-F_m50MMT0FMCNCUnWydF_IM.crl (hash: Mi9Q+hbSqsLQJ46Se7qEQnnVNcnQTSW5Onfxc0DNLrY=)
                          2: VU2zNi6GXyBR_Kxxaa0Tcvmf6FM.roa (hash: 3Kij+pdAh6hVG1cxRMJCxmbZU6rFpPSUJMYxL2WpuAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:9b:d7:73:07:4d:d1:17:70:e2:81:97:67:d1:c0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
        Validity
            Not Before: Sep 28 20:01:39 2026 GMT
            Not After : Sep 29 20:01:39 2026 GMT
        Subject: CN=524134525ee04dbb0ef45a5b1aafe0aa40716ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:48:d9:c4:9f:c3:31:2e:9b:7c:fa:cf:0d:
                    42:a6:93:b5:2b:2b:a1:b5:36:0a:cb:ca:7b:6a:af:
                    41:69:d0:5e:96:df:b8:6d:e0:d7:22:ee:36:9f:92:
                    a2:c4:30:c0:5b:f7:cc:01:8f:22:ea:43:6f:ec:7a:
                    76:33:21:97:e9:87:b4:f8:5a:6d:30:ed:35:de:6a:
                    3c:6f:65:38:20:64:17:12:8f:96:98:19:0a:95:db:
                    e8:67:09:d0:85:89:e3:2c:04:53:c8:01:b9:ee:24:
                    c1:4c:36:3b:91:6b:01:6e:97:10:70:0e:6d:df:3d:
                    67:b8:ca:45:00:2f:49:68:5e:83:aa:2d:b5:69:56:
                    ae:54:e8:df:01:84:39:6a:e6:dc:f2:e5:d7:12:aa:
                    cc:52:5b:5e:6d:d8:5a:28:5e:f8:48:3a:89:35:96:
                    42:9e:0a:06:47:0e:20:e9:cc:ad:d8:8c:44:fb:eb:
                    f5:08:f7:4b:9f:f2:4f:3d:89:f2:fe:cc:72:df:09:
                    8d:36:6f:67:fc:62:00:c4:29:a8:bb:40:fa:2e:a9:
                    81:ce:d5:82:5e:d4:9b:77:0e:b5:a7:e4:fd:bf:c1:
                    89:6a:0d:46:a6:a2:99:1d:1b:ff:a6:3f:04:89:94:
                    10:d8:b0:1e:23:50:25:1f:67:61:5e:b5:d5:8f:b5:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:41:34:52:5E:E0:4D:BB:0E:F4:5A:5B:1A:AF:E0:AA:40:71:6C:E4
            X509v3 Authority Key Identifier:
                keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b3:2d:81:db:2a:bf:26:68:5e:fb:3a:ac:50:66:41:ad:7d:
         3c:2f:bc:4d:1d:ca:79:03:86:b2:ea:15:41:25:1b:ae:fe:19:
         cf:e4:5c:dd:fa:ad:fe:aa:80:97:32:5f:39:0e:05:82:8f:f9:
         69:c7:24:1e:22:77:f7:d9:d9:d1:c2:98:10:b9:bd:ff:7a:c7:
         a7:62:3e:9f:42:dd:f8:1c:39:2a:6b:d5:38:17:83:4c:66:64:
         44:f3:0d:9d:19:e8:e4:23:96:ca:46:af:aa:86:33:f7:70:b1:
         63:a8:f8:35:26:b8:fc:8d:82:eb:45:59:22:b5:7c:56:ea:87:
         ab:1d:1b:25:13:52:6a:50:bc:b7:09:c4:80:8c:d4:f7:25:0a:
         d5:c1:c2:f5:27:11:67:0b:fe:11:cf:9c:67:bd:c1:9e:44:c5:
         b0:bd:44:f5:2f:ca:3d:44:5a:78:d9:10:ea:58:1d:37:b2:a4:
         c8:71:12:24:0f:e8:f6:56:a0:95:86:46:ec:cd:6a:87:10:bf:
         de:93:d6:86:2f:a6:44:33:22:fc:fc:7f:23:c4:3d:16:49:d4:
         27:46:58:63:2a:ac:82:68:2f:db:31:f6:4f:e5:29:ca:7d:a4:
         5c:02:db:3e:bd:59:8e:0e:d7:8a:8e:47:4e:50:5d:1a:a3:71:
         58:62:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:33:09 2026 by rpki-client