Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          i8OQKcEzTnfJrVnQR9SpxUVD9Q/dosetZIrjhuNaAJc=
Subject key identifier:   6C:8E:CF:C9:B7:63:51:95:25:0D:BA:DC:18:6B:65:85:28:1B:92:26
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       019D277246E8B40306DB03FB4B8B2D077829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          159C
Signing time:             Thu 26 Mar 2026 00:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:33 +0000
Files and hashes:         1: 8xW6dotWOxBryiPnauuCXj7XuSI.roa (hash: zASgDwULaWpUbCGZvnjqbpSShkEykQFL5DbnV3AjxvA=)
                          2: BDqHlt60SCUsG6m1jsuhJtjmd-g.roa (hash: qc0DKSPVeA1IXC/yas0jKMH1maqSIbQPdur6MCx7sBE=)
                          3: ESQujN5DaULTkC6C6ybAQLdooUw.roa (hash: kGih2+U+odRcMpkYTKXLRUpY39oIhEjGgAU5Suq/FjE=)
                          4: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: g2UlF0vL1raFjrN6IaRhIjvygeQsNskacIK1cvLmuBU=)
                          5: Kgbb1ha1ETHNo6kDG9FbSmQXGu0.roa (hash: stqHaq0z6FCaDr4UcodVJdSho5SpMpajccdtCCU7/O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:46:e8:b4:03:06:db:03:fb:4b:8b:2d:07:78:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: Mar 26 00:01:33 2026 GMT
            Not After : Mar 27 00:01:33 2026 GMT
        Subject: CN=6c8ecfc9b7635195250dbadc186b6585281b9226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:5a:f3:f9:54:8f:dc:85:0c:48:28:d5:40:
                    db:99:43:6d:48:94:f9:b3:16:c4:9e:bb:fe:42:43:
                    a1:75:d8:60:c9:9f:e3:9d:31:6c:fc:ea:ab:21:a3:
                    ba:97:4e:6f:41:d7:ea:35:9d:6a:34:60:6b:11:a9:
                    2f:08:0d:f7:c5:21:09:c1:49:be:53:fc:4e:f5:9b:
                    b0:34:26:73:bb:df:ea:cb:2b:c3:d3:dd:af:25:14:
                    78:7c:27:de:7d:91:61:26:3d:d3:4a:58:25:27:99:
                    de:36:1c:fc:43:2a:6a:77:27:bf:1f:5f:13:2b:23:
                    46:d1:89:e2:69:f4:5f:3d:ab:5c:a4:d2:f6:a6:53:
                    17:25:99:3f:93:91:c7:59:fb:53:28:fa:72:05:b6:
                    10:32:c1:02:6a:be:89:50:8d:81:e3:69:77:34:ab:
                    a8:c6:70:d3:99:14:fc:6a:76:81:a9:d1:c8:16:44:
                    42:25:3f:17:a0:49:5d:f9:47:48:8c:45:d8:09:00:
                    04:d8:b0:5f:61:4c:f9:a7:17:10:17:f1:e8:0a:89:
                    79:eb:3b:dd:23:e9:b9:e2:cf:ab:6e:49:5f:64:ef:
                    9e:65:df:e5:5f:79:23:da:af:8c:89:0d:9c:ee:95:
                    55:92:cc:cd:ea:7c:04:bd:91:06:d6:ab:f4:92:72:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8E:CF:C9:B7:63:51:95:25:0D:BA:DC:18:6B:65:85:28:1B:92:26
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:55:10:1e:81:91:50:40:62:39:19:13:34:5e:4e:1f:a5:cf:
         49:be:4c:ff:48:c1:3d:59:4b:01:ca:83:41:f2:be:5f:66:fd:
         35:60:e5:ec:8e:17:23:d3:53:17:c9:99:52:41:9b:01:a5:59:
         2b:a4:4c:1a:b5:4b:54:92:92:52:c9:1d:c5:ee:93:a1:7c:47:
         a7:85:ec:99:c3:1a:82:6e:2a:f2:c1:3c:82:16:af:40:9a:16:
         d1:5d:e2:04:6d:37:ca:ec:b2:f6:3a:53:f7:29:73:46:6b:4a:
         e4:a2:19:39:b7:9e:d5:3d:b6:a6:62:65:29:58:96:69:95:ce:
         08:40:91:9a:a4:3e:4f:d7:55:3d:96:06:62:ee:8e:72:69:ca:
         c1:bd:d4:01:96:79:06:f2:d0:41:2f:d2:9d:45:a8:a1:d8:c6:
         b7:66:c9:08:ec:46:d9:35:22:bd:5d:6e:d5:d8:cb:12:5e:46:
         11:c6:81:08:5c:33:14:2e:ef:e4:32:fd:41:9b:ce:fe:36:63:
         16:d0:75:a7:da:4b:fc:ef:21:6e:11:10:d0:b4:52:61:cd:f7:
         3d:04:f3:36:7e:8f:2d:b8:de:67:a8:3c:16:ff:56:24:36:f8:
         4a:3f:02:9d:b1:8c:5f:f7:a7:d6:ba:37:7f:fd:9d:38:d8:b8:
         00:25:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:20 2026 by rpki-client