Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File:                     Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier:          lw0mNjDdkWBYegZnhB0k8Z2HO616YSG/SBOz+3ei+JE=
Subject key identifier:   DF:2A:4F:7C:C0:6B:EE:00:92:96:23:D6:09:2C:97:8E:D7:3A:D5:67
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer:       /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial:       019D2816B1E0ADE402FCE652BDE0F606425A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number:          0F6B
Signing time:             Thu 26 Mar 2026 03:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:09 +0000
Files and hashes:         1: GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa (hash: kAQmoNaAQulFXJOFBcFbnsHdNI15L9bljvuL0WjJrFg=)
                          2: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: nxVFdLRM9/jgsbQB2xmJI77+LPAYu8yp1qxCGv3gTOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:b1:e0:ad:e4:02:fc:e6:52:bd:e0:f6:06:42:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
        Validity
            Not Before: Mar 26 03:01:09 2026 GMT
            Not After : Mar 27 03:01:09 2026 GMT
        Subject: CN=df2a4f7cc06bee00929623d6092c978ed73ad567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:e3:92:21:4f:13:92:d0:4b:22:a3:af:16:
                    b9:57:d7:10:36:a5:fc:73:08:4d:b2:af:f7:8e:93:
                    88:53:1f:0e:0b:1a:99:16:b6:2c:5a:54:77:17:24:
                    bf:c6:b6:8d:b4:1d:81:34:5e:e8:2f:86:ad:3c:c6:
                    94:a1:34:aa:16:62:a0:e3:be:c8:0b:1e:74:69:53:
                    a4:f9:fc:d1:70:fc:2f:d6:98:eb:33:9c:34:cf:34:
                    4e:46:16:89:eb:33:02:8d:23:ee:e4:9b:07:b7:a1:
                    94:9c:18:64:61:87:3c:00:82:47:9d:39:fd:62:de:
                    5b:6e:e3:c4:c6:39:54:10:f5:f5:00:c6:da:78:f2:
                    7a:0d:a2:95:e1:95:c6:2e:50:b6:88:d4:7a:d6:43:
                    94:83:07:01:b7:55:2a:69:76:e5:3b:bb:fb:a6:d7:
                    a8:5c:0e:69:b0:9f:99:a7:aa:4f:8a:70:cb:47:94:
                    96:46:2c:ca:f4:ba:95:bc:00:55:1e:1b:50:5e:ab:
                    2d:f8:4b:f7:b9:51:fe:cc:0a:df:ad:b8:99:52:43:
                    e8:41:fd:7e:73:20:32:46:1c:b7:c4:e6:da:8e:0e:
                    84:4e:28:ea:fb:b8:b3:4c:85:b0:6e:e6:ed:95:c1:
                    2e:bb:5a:5f:01:a9:74:30:0a:13:e2:2d:5e:6d:0b:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:4F:7C:C0:6B:EE:00:92:96:23:D6:09:2C:97:8E:D7:3A:D5:67
            X509v3 Authority Key Identifier:
                keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f3:39:01:c6:8f:ff:7f:95:ae:d2:df:c5:d2:16:42:2c:df:
         2a:f3:81:78:5b:6c:04:25:c0:1f:e5:e4:75:4a:45:7d:a0:26:
         07:87:13:37:84:68:ee:66:93:90:c0:f3:f0:75:4c:ab:10:35:
         87:a5:40:b4:70:8d:99:a7:0f:fa:35:24:cb:fe:e1:5b:e9:d8:
         30:20:04:d8:b7:64:a9:0d:7b:d3:54:8b:49:02:6d:19:a5:0b:
         7f:44:a4:93:e9:c5:09:16:12:78:f8:d8:99:c0:8e:7a:aa:05:
         89:95:fe:ab:bc:9c:c4:5f:7c:47:9e:a4:0f:8f:37:57:b3:09:
         38:48:3a:4a:cb:86:a5:67:25:c3:4e:96:35:d9:d6:2e:a4:6a:
         d4:22:b7:62:ab:6a:fe:41:a1:e8:9e:07:a4:26:4e:35:b4:2c:
         8c:a9:8a:69:82:67:bd:30:4b:c7:25:39:ff:4e:6b:47:21:a8:
         53:df:3e:12:d2:4f:08:b1:06:88:51:d1:97:aa:34:11:b0:e3:
         3c:86:e7:43:eb:7c:fe:f1:1f:66:1b:36:b0:d7:a8:88:67:f6:
         0f:cc:43:ac:03:82:ed:e7:95:cc:f9:18:4e:0e:84:bf:fe:f3:
         68:23:12:03:31:25:73:88:a5:e6:ec:c3:2a:0e:5e:71:fd:4d:
         3a:fc:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:37 2026 by rpki-client