Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          iNmIzbC0D55+L7eBMWcmbyy31KcmEboF84a5j49Q5xs=
Subject key identifier:   A0:02:1B:77:9D:80:74:2E:D5:82:7C:E6:9D:C4:09:C8:37:51:95:EF
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       019D273A8A44C5BD4D3B01321DEEB7E5D48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          13AB
Signing time:             Wed 25 Mar 2026 23:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:40 +0000
Files and hashes:         1: 2ykxp1RC0SDW_olwDTCv-_MLiXQ.roa (hash: lHkNZLkgWFsMzYreyxJfbV91bR62pQ6AlcQ7rRHMjNM=)
                          2: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: 8bZR2eWsADUcPQP4abNMcP2oiowGdQ84GncpMWhqG5k=)
                          3: Vhg0NY4jLKFZehorU_HupjxbgqM.roa (hash: ZZVk+nzM5sjrEyBiJMYznTGMxJYwAgph6Xy/eIIAOF0=)
                          4: wLlS8Jywk1Z2A3Ni9ePUaXlglZA.roa (hash: HsiaEAzxY6GNFLXp4J8wvPh2SdvP1m/Tm0n/2wRXxXs=)
                          5: zLPd6uaNhEYIigV3kvzlHJIvTH4.roa (hash: tk6Y8DqBSL9/1u7Y9F6ipEsLVlx2f1XyZLdRg6GvQEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:8a:44:c5:bd:4d:3b:01:32:1d:ee:b7:e5:d4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Mar 25 23:00:40 2026 GMT
            Not After : Mar 26 23:00:40 2026 GMT
        Subject: CN=a0021b779d80742ed5827ce69dc409c8375195ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:5a:6e:ba:c0:e4:d4:92:47:39:49:01:3b:
                    80:34:36:20:fe:85:06:7d:a7:e2:f8:a8:49:f6:ec:
                    3a:c2:a9:52:e6:e3:ff:a1:0c:15:7d:a4:62:67:13:
                    26:4b:9a:79:2a:6a:b5:6f:df:76:3b:b4:66:ee:1d:
                    af:af:7d:ed:d1:d0:b9:09:41:da:e8:1c:9c:6e:fb:
                    10:6d:04:90:52:d3:6d:f5:60:37:5d:7c:ce:76:5c:
                    ec:7a:df:77:6d:b3:73:f2:75:68:0b:88:08:cf:7a:
                    3f:41:b5:20:3f:ea:4e:cf:bd:d4:28:54:c9:aa:49:
                    86:d2:61:aa:15:fd:c9:de:33:20:42:2b:aa:fe:38:
                    e3:84:07:79:18:51:ad:de:67:a1:c6:59:31:c1:d0:
                    6e:ce:76:f6:88:a6:0e:a1:58:d1:1a:91:72:4c:f2:
                    37:93:06:14:f5:ba:6b:15:9b:39:35:e1:9a:89:3e:
                    48:42:fa:72:af:d6:d9:9c:ee:95:ac:8b:97:52:7c:
                    1d:dd:80:4d:9e:92:4f:5e:56:e4:37:ae:b0:59:fb:
                    33:0f:f0:cd:bf:a0:74:8f:2c:0f:0e:2b:1f:e6:b0:
                    f4:91:6a:60:f4:89:23:5f:ae:34:fa:ce:d2:52:b1:
                    13:5d:23:d7:3b:b8:c2:13:51:4c:32:8c:96:b2:34:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:02:1B:77:9D:80:74:2E:D5:82:7C:E6:9D:C4:09:C8:37:51:95:EF
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:38:25:b4:87:d2:9d:8f:2e:ee:a2:00:f6:cb:89:82:20:
         0e:e2:10:b2:a7:0d:3d:46:0c:94:b3:4f:c2:f9:4d:0e:80:c0:
         0e:1d:3e:cc:b5:a9:6e:97:13:81:46:93:61:0e:f5:08:d1:c9:
         0a:4f:ab:bd:69:ca:18:50:41:dc:f7:53:08:29:94:a0:af:a8:
         1c:49:4a:c1:f6:92:1b:0d:08:33:f2:b8:0c:22:69:5c:57:c5:
         7c:3c:34:29:04:78:04:14:81:a4:86:b5:e6:28:16:2c:ca:b4:
         67:53:ec:04:b7:2d:97:b4:71:6f:28:52:16:cf:fb:7a:75:b5:
         05:b9:18:42:a4:50:85:51:0c:ac:4b:de:72:59:e0:6b:5c:04:
         3c:36:c3:d7:97:ca:45:58:92:5b:fd:49:15:27:31:55:0f:78:
         4a:fa:98:79:67:96:6a:4e:85:55:73:90:b7:8e:ae:2e:46:14:
         09:d9:95:61:f4:31:5b:e5:4b:a9:35:7f:b7:58:8d:6e:10:25:
         2e:3a:cb:e3:e5:2f:83:fc:49:22:14:fe:c2:cd:cd:5c:6b:af:
         61:62:0c:71:76:e7:0a:25:2e:ba:51:1d:70:c6:55:81:80:b9:
         fd:9e:8c:ce:1c:67:57:62:20:ce:87:2a:54:1b:14:36:37:cb:
         a4:96:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:40 2026 by rpki-client