Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File:                     hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier:          pHL9fYqDU1XW1G2nin2gap0HtHRkd5S9RgoQYEUJdlE=
Subject key identifier:   C2:77:8B:DE:F5:A9:89:E4:D5:F1:F5:06:D7:9D:64:42:F6:DB:5D:87
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer:       /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial:       019E1F7F87EE21E08C7900D95308A4CE2FAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number:          0C1F
Signing time:             Wed 13 May 2026 04:01:51 +0000
Manifest this update:     Wed 13 May 2026 04:01:51 +0000
Manifest next update:     Thu 14 May 2026 04:01:51 +0000
Files and hashes:         1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
                          2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: WLIfIW+Nygcd8cxsgvsQ8fy+mSj9oMPFrIHUe4LcHyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:87:ee:21:e0:8c:79:00:d9:53:08:a4:ce:2f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
        Validity
            Not Before: May 13 04:01:51 2026 GMT
            Not After : May 14 04:01:51 2026 GMT
        Subject: CN=c2778bdef5a989e4d5f1f506d79d6442f6db5d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:6e:dc:14:45:00:60:66:76:d6:e7:d1:be:
                    54:ea:39:8a:f7:22:f8:d0:96:5a:58:d9:fe:82:86:
                    5a:01:13:c1:f2:85:c0:1b:f0:a0:65:6d:08:67:a1:
                    ec:6c:4a:52:79:89:5b:1f:d0:68:1d:c8:d3:fe:ea:
                    39:5c:1c:17:ed:69:a6:18:dd:4e:8b:a8:90:02:c2:
                    73:52:04:b9:2f:93:29:8b:0e:2a:b7:7f:ac:84:4f:
                    92:6c:35:02:e4:84:7f:32:80:ef:2e:4a:a5:b3:de:
                    fb:7c:f1:49:44:30:eb:8d:15:33:7d:06:75:c7:12:
                    88:61:3f:9f:10:ed:70:82:7e:82:0a:1b:87:cf:f6:
                    39:d2:f6:c8:96:27:93:d6:4d:c3:29:90:c8:49:55:
                    18:e9:b4:8b:f2:e0:4e:fc:00:c1:05:c8:c3:49:70:
                    5b:39:42:e0:4b:d3:98:be:81:5e:d4:e6:74:e9:af:
                    13:ef:f5:38:f9:25:6c:12:d5:f5:31:ef:2f:c3:16:
                    44:d1:eb:35:5f:d2:99:e3:5e:f2:a3:7f:54:07:62:
                    11:96:47:7b:15:f0:70:4f:21:c5:b5:78:7a:4b:68:
                    2d:ed:11:f8:7e:17:84:de:95:4e:4d:19:70:0c:25:
                    c0:aa:17:f9:b6:f6:5b:7c:b9:dc:97:32:27:8a:47:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:77:8B:DE:F5:A9:89:E4:D5:F1:F5:06:D7:9D:64:42:F6:DB:5D:87
            X509v3 Authority Key Identifier:
                keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d1:3c:09:d4:23:ce:86:6f:fc:45:5d:e2:ea:41:b5:bc:0e:
         98:a2:7c:f5:9d:83:ea:67:2b:2e:95:7b:66:4b:39:06:d9:6d:
         14:4f:6a:fa:57:fc:04:7e:32:2f:dc:33:ac:24:7f:f6:21:b8:
         38:3b:34:a8:cd:84:65:19:78:cb:f8:08:7d:ad:3f:4b:c2:7a:
         74:22:bc:0f:cb:e6:fa:a3:bc:ad:68:a1:82:1d:b0:54:ba:3e:
         ae:21:60:9d:e4:e6:0e:0b:71:7d:73:6b:95:5f:72:0d:5e:59:
         f0:d0:a2:69:6f:93:62:e8:f3:8d:54:f7:d9:08:2d:0c:44:bd:
         10:78:ec:1a:05:f7:5a:c9:b7:4d:b4:75:91:c8:8d:d5:8c:c3:
         74:76:0a:64:80:ed:89:1b:97:b5:62:af:b1:5d:c9:82:8c:93:
         ed:b0:d3:2e:6a:2e:ae:a1:8a:7c:4f:99:24:6b:95:c9:a7:f4:
         06:13:46:7f:50:14:14:0a:b5:90:79:37:d4:21:84:76:a9:f6:
         d7:04:cc:f5:bd:9b:2a:3b:00:fa:b1:53:8b:fd:7d:1b:29:2d:
         de:aa:4f:04:de:07:09:3b:76:8a:41:fd:8a:87:6e:58:b8:d4:
         4d:35:7d:f2:83:bf:ab:85:a2:9d:3b:b5:d1:8a:4b:be:fc:5c:
         57:83:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:49 2026 by rpki-client