Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File:                     HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier:          K77cTMrpIoMh6+0ZuDBvtfkURpWPGggrVzrHAXP19+s=
Subject key identifier:   30:40:A1:52:C8:A8:BD:2E:64:CF:1A:F0:B5:95:42:73:A5:AA:36:85
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer:       /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial:       019D28BBAAAA798CFB6F3734D3AC532F9586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number:          13E2
Signing time:             Thu 26 Mar 2026 06:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:20 +0000
Files and hashes:         1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
                          2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: Q4xNaZH5/XxRUai+mS2FWWBqbpRLV12Tgji2jtXiITI=)
                          3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:aa:aa:79:8c:fb:6f:37:34:d3:ac:53:2f:95:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
        Validity
            Not Before: Mar 26 06:01:20 2026 GMT
            Not After : Mar 27 06:01:20 2026 GMT
        Subject: CN=3040a152c8a8bd2e64cf1af0b5954273a5aa3685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:d2:7d:94:99:2e:68:ce:74:91:cf:85:97:
                    62:00:25:46:3d:ce:00:f6:87:d0:11:f2:d5:14:0d:
                    79:2e:66:8e:df:bb:ae:c6:2d:6b:9d:40:6f:56:95:
                    d5:27:b7:25:77:a7:6a:25:5e:96:59:79:91:72:45:
                    67:52:6f:3e:90:93:ee:09:24:07:c7:63:a1:33:da:
                    06:7b:f5:39:14:8a:a3:89:fa:94:8b:8b:ec:ee:a5:
                    cd:41:75:eb:98:0c:de:8e:74:15:fc:3a:36:1f:5b:
                    4a:c0:c6:cc:6c:9a:db:0c:51:9b:47:bd:a4:6d:28:
                    98:de:42:37:e8:cd:07:5c:77:25:08:fa:d3:4f:85:
                    c7:72:77:93:5c:f8:f6:00:64:a1:bb:9d:cc:31:cb:
                    84:0e:b4:4f:1e:d0:12:54:88:50:48:05:03:da:bf:
                    a2:9c:a5:07:43:f2:1d:33:4e:01:10:ca:f5:0d:7b:
                    af:68:56:29:82:8b:df:17:be:04:77:35:0e:f0:d9:
                    86:ad:d5:1f:8a:86:09:45:8a:3c:e1:8c:07:2a:42:
                    42:50:fb:9f:f3:e8:81:a4:40:f1:2f:05:6b:23:61:
                    44:e0:14:ce:04:7b:7b:ea:f7:9b:1c:db:a8:31:aa:
                    64:47:1f:06:09:10:33:d8:90:14:86:3b:44:8f:43:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:A1:52:C8:A8:BD:2E:64:CF:1A:F0:B5:95:42:73:A5:AA:36:85
            X509v3 Authority Key Identifier:
                keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:46:0f:27:a9:8d:d2:6e:5d:cd:08:4e:08:c4:7e:62:d9:f6:
         16:02:9a:57:ff:8c:85:c3:b8:d2:77:c4:2a:a2:27:0d:a9:8b:
         81:a7:eb:c1:8b:71:51:c6:a3:d9:bd:96:85:af:67:79:dd:c1:
         6f:7a:44:0b:40:4b:a6:74:16:dd:00:c0:7e:c9:1a:71:89:67:
         44:91:36:59:ed:e2:62:db:65:ae:18:ac:f6:92:b5:ca:89:b6:
         f1:a3:a9:87:63:40:51:85:0e:5b:91:aa:da:47:e5:f8:4d:e6:
         37:e7:16:de:0e:eb:76:8f:3c:c5:79:18:7f:4d:f1:ec:d8:61:
         cd:f8:4b:b3:a4:44:b0:b4:d7:cd:de:fa:a4:e8:4d:7e:e5:7a:
         00:29:6e:2d:ac:e8:8b:e7:a2:f1:69:89:e8:e6:ce:2f:da:46:
         58:c5:f3:76:6a:22:8d:8d:f0:41:f5:05:61:c6:5f:2f:d1:a8:
         02:97:27:bf:d4:00:b9:a1:59:1b:3a:98:fc:bd:ff:9b:31:77:
         60:e9:54:aa:a1:dd:68:bb:8c:d5:db:f0:51:8a:d9:4d:e8:13:
         01:e8:4c:6f:dd:ef:0a:30:4b:b9:3a:65:d4:dd:ec:6c:0f:d3:
         61:5b:ae:93:0f:7f:a7:58:b0:0f:a7:71:7e:dd:05:ff:d2:bc:
         23:fc:44:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:47 2026 by rpki-client