Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          BhXLTJPchht1e9ljVNk7E8sTmbMs9jz1KwXUsjulnIs=
Subject key identifier:   DF:51:38:51:D2:7B:D3:E5:04:87:34:DD:91:2D:7F:F4:B6:26:1C:4F
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       019E1C7E035CE8E82DE083E7634BEC9D7AD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          142A
Signing time:             Tue 12 May 2026 14:01:20 +0000
Manifest this update:     Tue 12 May 2026 14:01:20 +0000
Manifest next update:     Wed 13 May 2026 14:01:20 +0000
Files and hashes:         1: 2ykxp1RC0SDW_olwDTCv-_MLiXQ.roa (hash: lHkNZLkgWFsMzYreyxJfbV91bR62pQ6AlcQ7rRHMjNM=)
                          2: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: 6GlicLIbRcZTumUHoRxD4VFLqjdz1VkGZuqgK2xYVpc=)
                          3: Vhg0NY4jLKFZehorU_HupjxbgqM.roa (hash: ZZVk+nzM5sjrEyBiJMYznTGMxJYwAgph6Xy/eIIAOF0=)
                          4: wLlS8Jywk1Z2A3Ni9ePUaXlglZA.roa (hash: HsiaEAzxY6GNFLXp4J8wvPh2SdvP1m/Tm0n/2wRXxXs=)
                          5: zLPd6uaNhEYIigV3kvzlHJIvTH4.roa (hash: tk6Y8DqBSL9/1u7Y9F6ipEsLVlx2f1XyZLdRg6GvQEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7e:03:5c:e8:e8:2d:e0:83:e7:63:4b:ec:9d:7a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: May 12 14:01:20 2026 GMT
            Not After : May 13 14:01:20 2026 GMT
        Subject: CN=df513851d27bd3e5048734dd912d7ff4b6261c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:86:a7:aa:e9:1d:89:4a:90:a0:a2:0e:35:
                    f9:fc:48:2b:c8:ea:82:9c:a5:ae:62:3b:21:9b:1a:
                    7f:08:21:47:62:9c:7c:d5:14:0d:b5:6c:1f:9a:7b:
                    64:88:f6:88:4e:d6:8e:62:4a:fb:74:cc:50:c0:dc:
                    76:1c:19:0c:10:60:5f:cd:0e:58:14:5c:dd:19:f2:
                    4f:bf:56:6e:5c:c7:2e:eb:cd:fc:6c:c1:96:30:b3:
                    3c:bd:38:eb:44:48:c1:c9:8a:8f:62:1a:dc:6e:ca:
                    84:24:9a:6e:3c:29:ed:57:16:88:3b:13:03:63:ca:
                    b5:7e:bb:71:ec:91:32:8d:bb:40:a7:0e:58:ba:ff:
                    61:b9:27:da:bc:d0:a7:39:9a:6c:d8:b3:b7:95:cc:
                    f4:dd:e5:08:3f:c6:e6:bb:e2:f5:c6:14:03:65:25:
                    ba:f2:e9:6c:c7:fb:50:d4:61:06:e3:e2:11:2d:1a:
                    78:d3:5d:0e:68:09:28:60:75:58:5f:27:b3:3a:a3:
                    d5:54:34:af:81:d6:6a:00:33:ba:31:a6:8f:98:50:
                    fa:1f:c5:c8:43:dc:19:0e:d5:81:18:3c:6a:da:f7:
                    b7:67:fe:ec:8a:bc:de:d2:c7:a3:41:bc:08:8b:3c:
                    ab:a7:06:de:da:a4:d6:82:48:64:52:25:31:0e:aa:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:51:38:51:D2:7B:D3:E5:04:87:34:DD:91:2D:7F:F4:B6:26:1C:4F
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c8:ef:1b:3e:d9:a1:26:99:fd:5e:7a:f5:a8:98:08:95:99:
         34:a2:b5:14:a7:78:b6:1d:ef:66:f1:c4:dd:ab:6b:83:7b:4c:
         af:57:c8:e9:46:b1:d7:c3:6a:bc:5d:00:6e:aa:1b:1a:e3:6a:
         2c:d6:2f:b1:d8:bd:8c:d9:87:db:18:9f:ec:c9:18:9d:5f:17:
         e1:c9:a4:6c:dc:40:5d:e4:a1:ca:37:63:4f:c6:32:12:19:4d:
         01:a5:68:8e:6f:cf:4f:6d:0e:17:87:1b:4f:4b:28:92:51:84:
         c2:7b:c8:59:a3:23:df:8b:c5:e7:b3:2f:a8:c4:71:be:2d:f6:
         84:f5:06:24:2c:5b:af:9d:60:c4:38:ed:6e:0a:3e:e9:8d:3a:
         02:7e:74:a4:c2:8c:4a:23:39:f8:b0:71:45:91:3f:77:2f:58:
         c1:38:23:3b:67:07:cd:3c:65:c8:b5:81:3b:4d:d1:bc:6d:f9:
         7e:73:35:44:d2:bf:24:ad:cc:e3:17:cb:7f:fe:2f:7b:57:d4:
         06:d5:20:eb:d0:22:a2:2a:a4:4a:8c:80:c6:fa:51:51:ec:98:
         c7:2d:f1:b2:25:c4:69:9b:29:ad:10:78:84:5d:d0:d6:53:05:
         ca:59:b3:03:2d:b4:a5:1c:80:ee:6a:58:06:ee:e4:8f:62:d7:
         f3:7a:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:15:38 2026 by rpki-client