Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File:                     hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier:          Vo9tWd/ikj2Dnnmo6vhAjPXCBEBU3IHRU2q0ichSscY=
Subject key identifier:   7B:06:7B:C6:62:89:DD:5F:1C:39:2E:A6:11:14:D9:D9:E0:69:0B:EA
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer:       /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial:       019D29978177E7D064C8F6D2A957242403BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number:          136E
Signing time:             Thu 26 Mar 2026 10:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:27 +0000
Files and hashes:         1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: ZYMWcj0s2O7l96j2tla5Nt2jDvM4OMBzFQuUGqGZys0=)
                          2: iw4AqRmRIMQgRY1v_jIj27JTYNA.roa (hash: gkzi1z5bUJVhySMVCKKlEz9ici4xT0whvHOWhFzYVIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:81:77:e7:d0:64:c8:f6:d2:a9:57:24:24:03:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
        Validity
            Not Before: Mar 26 10:01:27 2026 GMT
            Not After : Mar 27 10:01:27 2026 GMT
        Subject: CN=7b067bc66289dd5f1c392ea61114d9d9e0690bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:a4:0f:cc:09:a1:fd:e6:10:51:52:da:a5:
                    e2:18:1f:6d:65:97:3b:de:c5:f5:90:69:49:d8:73:
                    17:b9:1b:24:43:de:ce:59:25:89:fc:71:7c:05:4d:
                    b7:2f:19:f4:c3:21:2e:fd:06:60:a8:17:20:87:51:
                    c1:81:8e:c2:bd:e8:a8:7d:6a:df:6e:4e:ac:40:83:
                    34:f3:34:36:79:30:ef:e6:1c:8d:79:4d:e6:a4:a4:
                    cd:a0:2d:31:4a:1c:64:98:38:64:68:85:b0:28:ff:
                    70:cf:78:e7:44:34:f2:32:75:88:ad:ef:22:b8:be:
                    6b:28:e0:49:4a:e0:7d:eb:24:d1:83:36:8a:19:18:
                    8c:ee:39:ea:57:37:b7:e0:a6:47:34:b8:cd:9b:fd:
                    3f:8c:7c:5a:e4:47:d1:7d:b8:44:a9:e9:25:24:de:
                    65:fb:0a:f5:2e:49:83:03:3f:ec:cd:59:4f:7e:08:
                    b6:17:1b:04:3b:ba:05:45:6f:a3:35:af:c9:e9:0c:
                    11:37:6c:0a:2f:03:d6:f2:98:11:1e:47:c3:a6:2c:
                    86:20:75:0e:3b:65:f4:f2:b1:ec:9f:ca:b1:f5:8c:
                    98:c0:4b:47:96:1f:0b:a5:59:a2:77:8b:39:41:45:
                    6a:c9:e3:4e:57:92:ff:87:15:14:0a:6c:e8:47:9c:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:06:7B:C6:62:89:DD:5F:1C:39:2E:A6:11:14:D9:D9:E0:69:0B:EA
            X509v3 Authority Key Identifier:
                keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:8a:66:e4:0e:44:13:32:b9:5d:8e:30:24:0e:63:87:a2:a0:
         a7:20:b0:dd:70:8e:a7:6c:ad:3e:59:03:76:a3:33:ef:e2:52:
         87:43:6c:bd:55:98:b0:a5:fd:08:ca:3e:25:11:73:bc:bf:1e:
         dd:f6:c7:13:70:9f:2a:66:a7:8c:0c:ff:88:dc:28:c8:dd:63:
         0a:d9:18:18:83:da:89:4d:ce:61:53:78:18:40:32:68:70:fe:
         32:ec:5c:ff:49:2e:6c:c6:e6:03:95:b0:9d:b8:17:5e:1b:e6:
         50:47:9b:de:fa:16:33:76:bf:3d:98:c7:b9:ae:3e:66:d3:95:
         2d:b0:53:6d:8c:84:be:55:dd:72:6c:d5:81:ef:81:ef:0b:6e:
         47:20:fa:bd:80:ed:b7:d1:d4:f8:31:49:71:24:fe:d2:23:59:
         7a:f2:71:e5:f3:df:e4:75:a1:32:d8:0f:19:ec:5c:73:23:f2:
         9c:67:29:a4:80:79:9a:81:97:8d:ee:0a:b7:1a:9a:25:2c:5d:
         af:72:f5:f0:58:12:d0:2a:0c:4d:a9:b5:cb:5f:32:29:9e:69:
         ba:c2:75:60:b4:f6:77:9f:b0:4d:18:ff:33:0d:03:5f:d2:d9:
         de:62:d0:ea:29:7d:ea:f3:2c:2e:11:d1:de:ff:b1:64:3c:d3:
         8c:47:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:03 2026 by rpki-client