Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
File:                     HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json)
Hash identifier:          RzJUmGy8GbUtENJSYbPpgTqXpVjvJHxG6dToGzIci/I=
Subject key identifier:   5E:72:42:20:DF:06:07:67:66:89:5E:9E:61:25:74:E0:CB:56:E7:D0
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Certificate issuer:       /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial:       019E1EDA2B100FBE76BB508B80F7CA09B850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
Manifest number:          13D4
Signing time:             Wed 13 May 2026 01:01:14 +0000
Manifest this update:     Wed 13 May 2026 01:01:14 +0000
Manifest next update:     Thu 14 May 2026 01:01:14 +0000
Files and hashes:         1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=)
                          2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=)
                          3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: N+0yHglgQMulsq7nq5XrCGR1sndx0nr0kI5+yofi7Lc=)
                          4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=)
                          5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=)
                          6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=)
                          7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=)
                          8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=)
                          9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=)
                          10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:2b:10:0f:be:76:bb:50:8b:80:f7:ca:09:b8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
        Validity
            Not Before: May 13 01:01:14 2026 GMT
            Not After : May 14 01:01:14 2026 GMT
        Subject: CN=5e724220df06076766895e9e612574e0cb56e7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:e3:a3:81:35:d8:8b:b5:b5:ea:e4:d4:02:
                    45:82:0b:ad:a5:76:7a:73:d8:d3:4a:18:54:00:9e:
                    47:6e:c2:c5:00:aa:76:cb:22:f8:65:00:c7:71:ae:
                    a7:19:68:4c:7a:5c:36:8d:73:e8:1d:94:06:89:b3:
                    d3:26:af:cd:66:78:f2:fb:bb:6d:9e:6b:e0:b6:1a:
                    e0:d0:7c:0e:ef:14:da:c6:11:73:a2:73:c4:4f:c0:
                    de:34:5a:02:81:5b:d4:d7:d0:44:1b:5f:c2:56:d8:
                    0e:e2:bd:6c:60:6d:5e:dd:3d:68:a7:e2:0d:e6:2e:
                    38:9a:43:07:ca:51:a7:a0:c8:05:0e:e7:fd:84:cb:
                    8c:18:03:f7:31:05:1a:6d:6d:03:e4:19:30:bc:c9:
                    ae:56:fe:04:bf:e7:d5:c1:ad:97:92:07:ed:25:4b:
                    a4:db:15:55:14:6b:b8:74:97:70:74:3f:49:07:be:
                    b3:45:2a:53:f0:99:e0:03:7e:37:5e:ce:04:b3:91:
                    36:45:35:fd:e4:33:fb:50:8c:86:7d:49:ff:9e:77:
                    78:a3:a8:c5:37:e8:3a:c3:7a:53:9a:0a:d8:47:88:
                    be:10:b0:94:24:ad:58:db:75:c7:47:09:87:c0:12:
                    b5:9d:14:79:b9:ea:1a:bc:26:cb:04:52:4b:9e:70:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:72:42:20:DF:06:07:67:66:89:5E:9E:61:25:74:E0:CB:56:E7:D0
            X509v3 Authority Key Identifier:
                keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:94:ce:c0:27:65:e3:a8:b3:87:af:86:86:69:ec:2f:8e:e0:
         1d:cd:3d:89:91:ea:09:7d:9a:90:6b:f4:86:cb:38:27:dd:c1:
         f3:e7:0b:32:11:2b:60:db:5b:0f:ab:79:1d:d0:d9:52:b4:af:
         d0:a5:89:2c:98:75:c5:32:5f:fc:1c:1b:b2:cb:72:ca:7f:42:
         9c:cd:d1:df:b6:b6:50:5b:bf:7c:f0:df:9e:df:63:86:ca:1f:
         4c:b9:0f:e5:b8:13:17:9b:93:b5:46:51:14:af:90:0a:6d:22:
         fb:26:2e:a0:9a:f6:2b:1e:d7:bc:c6:1e:81:14:86:49:aa:73:
         a1:fb:01:45:49:8f:c6:b9:da:22:ce:9e:b7:ff:64:cc:7a:bf:
         c3:16:c2:64:37:4d:25:8b:dc:49:e0:65:2f:af:f1:9c:b9:3d:
         6b:e4:58:87:63:d7:46:71:86:a6:8b:80:f3:ce:2d:ca:d4:ee:
         bc:66:c9:81:50:f0:49:f0:9d:57:35:a6:2b:92:3c:03:1d:4d:
         fe:4c:49:e6:f3:b6:9f:5c:2a:6d:e1:e8:fd:af:2d:7e:23:2a:
         8d:44:fb:bb:b7:0d:6f:85:cd:3f:63:e4:f1:e8:2f:00:34:63:
         00:ab:77:0b:ca:a2:d4:39:bb:31:0a:d0:70:10:03:a7:fa:0e:
         38:75:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:40 2026 by rpki-client