Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File:                     HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier:          taGr34xO6JWtZRqGPy8HawcIT06XLY9EalmlfT2R1Ok=
Subject key identifier:   B5:FE:D3:88:A5:4B:6B:A3:C6:7A:19:3D:F4:5A:23:7F:A3:8E:26:1B
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer:       /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial:       019D27A8ACE661A5A1744483A3373F1FF96B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number:          0F27
Signing time:             Thu 26 Mar 2026 01:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:58 +0000
Files and hashes:         1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: B+SDzjWLwXvLdKvT5ZxzO6Flczs7haO7laK85a5k/I0=)
                          2: JtB-_mP0CPyoUgsFyVWDrEIlud8.roa (hash: egfxT7xeT/hTTg3h54ZByaWRlZbXWQEqw5+/1nELFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:ac:e6:61:a5:a1:74:44:83:a3:37:3f:1f:f9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
        Validity
            Not Before: Mar 26 01:00:58 2026 GMT
            Not After : Mar 27 01:00:58 2026 GMT
        Subject: CN=b5fed388a54b6ba3c67a193df45a237fa38e261b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:7d:8a:e4:cd:8b:eb:1b:62:19:4e:24:91:
                    38:01:fb:de:20:e5:4d:99:3b:75:20:ac:68:06:1b:
                    6a:ac:b5:d7:1a:cc:11:ae:db:76:5f:ab:ec:24:1b:
                    49:97:b8:cf:84:56:ae:ee:a8:b4:49:20:23:44:ae:
                    73:95:aa:2a:65:5a:91:4c:f0:db:8c:91:f4:e5:12:
                    dc:9d:f9:e9:e1:3a:f4:0b:71:fc:91:0e:08:ab:27:
                    ab:d1:01:63:a4:14:35:eb:35:69:63:c4:c2:8b:ca:
                    c5:29:6a:a0:7d:04:86:f0:43:7e:fe:b8:87:c1:82:
                    42:df:99:54:fe:d2:9b:59:13:39:03:d7:15:0a:ed:
                    db:36:0b:b5:af:a9:59:e2:55:70:ff:30:a8:4d:1b:
                    89:2d:e3:fc:2a:a7:0e:a9:df:7c:29:c7:4f:55:ce:
                    cb:d9:8d:09:e1:87:62:f5:71:84:63:e2:73:62:28:
                    17:94:ec:01:8d:59:41:76:8e:d4:a7:74:29:da:08:
                    55:21:d1:d6:6b:6e:6b:13:55:55:78:14:c4:0e:e1:
                    1e:2d:b9:0d:47:5c:32:05:39:48:e6:9b:a2:2a:b1:
                    14:49:a9:0f:97:85:c9:cc:0f:4f:3f:cd:5a:13:b0:
                    db:4f:61:14:c5:d7:41:22:5e:a8:f6:4b:c4:30:e8:
                    da:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FE:D3:88:A5:4B:6B:A3:C6:7A:19:3D:F4:5A:23:7F:A3:8E:26:1B
            X509v3 Authority Key Identifier:
                keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:84:c8:05:eb:8e:11:b4:f7:24:f4:67:64:1b:81:1f:24:f2:
         52:c5:3f:c3:34:01:98:40:60:c3:6b:44:c9:81:02:3c:ba:67:
         14:6e:d7:eb:b3:11:c3:a5:09:22:62:aa:2e:a6:f3:8c:64:c2:
         4a:ad:73:5e:6b:24:40:36:0f:dd:ee:63:5b:9f:ae:26:0c:43:
         9b:5c:62:be:58:db:8e:da:27:13:48:8a:f7:27:de:fa:0b:61:
         46:86:10:87:2f:14:ef:96:f7:31:70:12:4f:cd:15:78:63:d2:
         0b:80:63:29:6c:fb:38:cb:c6:15:a1:09:a0:bf:8b:fe:72:ec:
         4c:67:73:1f:ea:39:2f:4f:3c:19:21:dd:b8:24:2f:30:3e:db:
         64:f9:1a:42:95:6a:74:34:3b:3c:83:5f:52:bd:5e:00:c1:8c:
         e3:99:85:5a:a5:6d:67:56:c2:33:73:fb:18:ac:46:75:35:1c:
         e7:c7:d0:bf:00:af:17:c4:b4:b3:b7:c4:0b:55:be:9e:72:c0:
         e9:00:71:67:25:20:4a:3d:30:38:38:25:66:95:af:45:1d:f0:
         18:34:02:5e:d6:9e:22:ff:43:e6:69:80:f1:65:1d:12:d5:96:
         29:fd:e7:ef:90:71:57:04:f8:a3:fe:db:41:b4:c5:9a:36:a5:
         10:60:3f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqKzmYaWhdESDozc/H/lrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTg5NTUxMjhiY2JjNzY5M2ViMWE5MzdmZjI4YjQwZWIz
NDQ4YTAwHhcNMjYwMzI2MDEwMDU4WhcNMjYwMzI3MDEwMDU4WjAzMTEwLwYDVQQD
EyhiNWZlZDM4OGE1NGI2YmEzYzY3YTE5M2RmNDVhMjM3ZmEzOGUyNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGh9iuTNi+sbYhlOJJE4AfveIOVN
mTt1IKxoBhtqrLXXGswRrtt2X6vsJBtJl7jPhFau7qi0SSAjRK5zlaoqZVqRTPDb
jJH05RLcnfnp4Tr0C3H8kQ4Iqyer0QFjpBQ16zVpY8TCi8rFKWqgfQSG8EN+/riH
wYJC35lU/tKbWRM5A9cVCu3bNgu1r6lZ4lVw/zCoTRuJLeP8KqcOqd98KcdPVc7L
2Y0J4Ydi9XGEY+JzYigXlOwBjVlBdo7Up3Qp2ghVIdHWa25rE1VVeBTEDuEeLbkN
R1wyBTlI5puiKrEUSakPl4XJzA9PP81aE7DbT2EUxddBIl6o9kvEMOjaEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX+04ilS2ujxnoZPfRaI3+jjiYbMB8GA1UdIwQY
MBaAFByYlVEovLx2k+sak3/yi0DrNEigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQt
YmY4MTNjZjA4MWI3LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQtYmY4MTNjZjA4MWI3
LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApITIBeuO
EbT3JPRnZBuBHyTyUsU/wzQBmEBgw2tEyYECPLpnFG7X67MRw6UJImKqLqbzjGTC
Sq1zXmskQDYP3e5jW5+uJgxDm1xivljbjtonE0iK9yfe+gthRoYQhy8U75b3MXAS
T80VeGPSC4BjKWz7OMvGFaEJoL+L/nLsTGdzH+o5L088GSHduCQvMD7bZPkaQpVq
dDQ7PINfUr1eAMGM45mFWqVtZ1bCM3P7GKxGdTUc58fQvwCvF8S0s7fEC1W+nnLA
6QBxZyUgSj0wODglZpWvRR3wGDQCXtaeIv9D5mmA8WUdEtWWKf3n75BxVwT4o/7b
QbTFmjalEGA/lA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:29 2026 by rpki-client