Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
File:                     HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft (raw, json)
Hash identifier:          A0CVSxUotH7EQ5pP51Wpi027NYwBs7hqQNNeFdk7BHM=
Subject key identifier:   DF:9E:50:42:F9:22:9C:56:13:51:EA:19:38:C5:80:2A:B8:12:86:A2
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Certificate issuer:       /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial:       019D27A8AE9AF815789DDEF5971FB83D0C55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
Manifest number:          1891
Signing time:             Thu 26 Mar 2026 01:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:59 +0000
Files and hashes:         1: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl (hash: r8HNbSDmwC4MZIlQndn9PScriCh2HQ5R3Xn+83Y3EyY=)
                          2: gfabm9UWQoAATxByyOzldR-OoLw.roa (hash: WKaBZla4LRLfqgI3uwqubZPPQ3HBh8rqcOXnhfR6oF8=)
                          3: pVhPz1Lv4Tfe1koijnFU9xHK8TY.roa (hash: 9qDr4kEVPSIWiFKaY/CZHN8PT6dMsGvFWVv39pNQi2Y=)
                          4: vGBPTsN1UTQ9ljsou8EYqesA-xA.roa (hash: KDijiFyY5rddvKU52MlKJXu0OVC57lOatdyVnFfXTSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:ae:9a:f8:15:78:9d:de:f5:97:1f:b8:3d:0c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
        Validity
            Not Before: Mar 26 01:00:59 2026 GMT
            Not After : Mar 27 01:00:59 2026 GMT
        Subject: CN=df9e5042f9229c561351ea1938c5802ab81286a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:67:5f:d0:13:26:45:af:be:1b:8d:30:3c:
                    56:89:af:58:e1:70:30:2d:40:38:d6:cb:d5:14:d1:
                    82:34:8a:dd:d3:2e:8a:63:03:ca:19:dd:6c:dd:b7:
                    57:4e:2e:01:33:17:04:9c:be:bc:31:ea:2e:a4:89:
                    03:c8:7c:fa:bb:c5:b5:85:5c:eb:78:6b:ad:83:13:
                    49:72:22:6e:3f:a2:0a:c4:ff:92:3c:bb:30:62:c1:
                    fb:c4:93:1f:3c:ca:75:a2:0d:02:ed:dc:0b:e3:d2:
                    52:c2:03:e6:24:3e:c5:69:ef:d1:a2:e2:1a:69:c0:
                    34:d7:b9:fd:a8:df:77:d8:95:13:56:9c:85:87:b1:
                    a3:66:fd:3d:da:2f:61:02:31:6e:aa:e6:58:33:d9:
                    f7:8c:60:dc:aa:03:f0:3d:01:43:b6:b2:b8:de:74:
                    79:af:3d:e8:dc:d1:dc:43:3d:48:23:12:76:3d:c0:
                    73:be:b1:15:10:f3:d6:ba:62:ad:d5:ae:d2:55:8f:
                    de:51:99:c6:0e:28:5e:ee:25:51:30:ff:d7:c2:e6:
                    ed:e0:77:91:23:44:58:52:62:0d:6a:5d:64:d5:53:
                    66:c1:49:86:be:1a:2c:bf:40:cc:6c:ac:66:cd:29:
                    b5:8f:d0:28:fd:2e:93:02:29:ae:b5:9f:77:7f:ef:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9E:50:42:F9:22:9C:56:13:51:EA:19:38:C5:80:2A:B8:12:86:A2
            X509v3 Authority Key Identifier:
                keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6d:43:32:28:51:6b:53:0b:0c:99:ee:63:78:7a:90:f0:bd:
         d1:5e:d8:74:89:40:6f:13:bb:ef:0b:d4:a5:5d:70:1b:90:fe:
         24:f9:70:ac:a4:9a:4b:e9:ab:87:e6:ce:54:11:79:86:e2:08:
         49:dc:5c:fc:8e:e1:eb:61:a9:e6:e2:88:68:73:fc:95:d7:fa:
         31:db:31:a1:ed:9f:d0:8b:c2:9b:a3:48:f9:a3:38:80:13:76:
         fe:03:e4:8d:af:db:e0:46:0d:1c:82:a7:6c:c7:a5:1a:fc:d9:
         c6:e2:12:93:eb:85:86:12:16:15:1c:4d:f0:0b:89:0c:58:92:
         d8:f7:d7:94:41:fc:61:6e:aa:fe:cb:83:b9:65:f7:ce:e7:87:
         bc:5d:92:4f:74:4d:ae:b9:04:7a:94:3e:d6:4b:24:b9:0a:b2:
         87:9c:e7:12:38:b1:06:6e:df:0c:b7:97:66:8a:77:f9:d8:9b:
         2b:8c:a0:da:90:a9:f2:46:0f:4e:a3:38:1a:0f:b3:67:82:8f:
         5d:b7:ae:2b:b7:f8:26:cb:df:12:7c:93:18:91:9f:85:1b:08:
         16:a1:42:25:c2:9f:e1:f4:e6:13:3a:60:71:56:c6:7d:4e:df:
         6b:a0:94:27:8c:bb:e5:6f:b4:3f:19:15:67:db:17:80:aa:e7:
         10:69:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:53 2026 by rpki-client