Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File:                     hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier:          2WO7lI22CCEFNV5gSFxosPpTgjzaZ3wQXV9U4HvZoSI=
Subject key identifier:   B8:13:75:07:2C:7A:1E:C8:01:75:2B:84:9B:A2:D6:39:55:EE:6B:28
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       019E1ED9B7F1EE2C1E6562C8A3D99E307083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number:          185F
Signing time:             Wed 13 May 2026 01:00:45 +0000
Manifest this update:     Wed 13 May 2026 01:00:45 +0000
Manifest next update:     Thu 14 May 2026 01:00:45 +0000
Files and hashes:         1: DRi6gZm2ApJ9zWvuSIffTh_44j0.roa (hash: NDQ8jCUezYMaYn3NL3pjn/AqInQQgH2COtpVWhCKawg=)
                          2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: pIzAQGsm38ieyAsmcIKn7MFtCqfXCP0tPW/E8RC8cqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:b7:f1:ee:2c:1e:65:62:c8:a3:d9:9e:30:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: May 13 01:00:45 2026 GMT
            Not After : May 14 01:00:45 2026 GMT
        Subject: CN=b81375072c7a1ec801752b849ba2d63955ee6b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:69:fb:5e:62:19:c9:2b:a9:70:92:42:68:
                    21:a2:0a:26:2b:32:b1:86:26:16:fb:02:ca:8c:46:
                    ce:09:7b:b3:a3:f2:9d:98:e7:66:b8:b5:72:29:59:
                    66:95:e4:3d:2f:c7:38:f1:af:9f:bf:9c:36:3a:61:
                    7f:e3:8c:2d:48:5c:99:ff:a2:b4:f0:69:83:b1:6c:
                    47:10:cc:e7:e9:a0:42:66:94:3f:7a:ed:db:42:3c:
                    b5:01:0a:88:64:46:2b:62:fd:92:ee:c5:e9:a5:96:
                    86:75:c4:5f:63:63:e2:f2:97:9a:ae:c6:7e:72:21:
                    63:3e:bf:53:88:84:b2:21:de:99:97:48:52:be:a1:
                    db:ce:5f:5d:91:13:46:dd:24:65:d2:75:35:ef:75:
                    9d:61:ad:fd:b0:05:92:8d:86:db:02:f8:5b:82:19:
                    f1:55:34:24:13:f6:16:23:a6:37:28:c7:99:c1:ae:
                    1f:d8:bf:23:e1:07:7f:b5:a6:11:bd:d7:a5:cc:2d:
                    f1:2f:28:df:2a:b6:23:55:21:40:90:15:37:ec:20:
                    83:f2:23:02:13:8c:81:5c:2b:61:c3:d9:16:47:80:
                    3d:76:8f:6a:66:8d:43:24:5d:27:77:8a:1e:76:a5:
                    fd:e9:39:23:74:5d:a6:cf:8a:e5:eb:dd:5f:f1:d9:
                    9a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:13:75:07:2C:7A:1E:C8:01:75:2B:84:9B:A2:D6:39:55:EE:6B:28
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4e:70:6f:7f:2e:3b:20:66:d4:6b:1f:29:a4:3a:c6:33:4c:
         4e:de:49:86:a8:4f:7d:2f:e3:ac:a1:91:91:88:d0:9c:fb:fe:
         5f:03:e1:49:cd:c0:52:b1:98:04:3d:9f:18:6d:a1:1b:7d:c6:
         5e:34:dd:bb:f8:49:e4:67:3d:8f:16:a5:ac:db:92:5f:f2:0d:
         56:ec:76:04:fa:54:63:50:f7:c9:b4:2f:d7:ff:c2:6e:41:7d:
         d2:c4:f4:b7:62:fe:b7:ef:f4:30:1e:19:62:e5:8d:03:53:0e:
         cf:79:3e:18:c8:b2:6d:2f:b6:35:c6:dc:87:02:07:ef:4e:98:
         d1:92:99:73:d3:46:ca:7f:7b:81:ea:d2:85:4d:2d:80:b6:69:
         d2:d3:df:d2:82:82:d3:f5:12:bb:f9:37:9e:32:78:23:87:d2:
         6e:77:cc:8e:07:ed:fc:cf:69:3a:7a:e2:ce:74:22:b0:55:1b:
         95:fe:4b:8c:86:2a:81:08:e6:b1:9d:7e:28:90:1b:4d:db:e3:
         ff:11:49:b9:e0:9f:97:1f:7e:18:1f:67:a3:6c:5f:0c:82:de:
         f4:5a:40:09:d1:ae:0a:0d:3c:36:80:5e:36:2b:02:47:ce:2b:
         ae:21:b4:c3:3e:d8:dd:70:7e:36:12:a8:e6:4e:6d:05:23:43:
         fc:97:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:07 2026 by rpki-client