Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
File:                     HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json)
Hash identifier:          UEuc8zqpsAy4bG7z+tUxvj0Do2beReksZCYKRrQbiXY=
Subject key identifier:   93:23:92:40:31:4C:ED:5F:3D:52:F7:41:E6:3D:F4:EA:06:24:76:44
Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66
Certificate issuer:       /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
Certificate serial:       019E1F116D7F9A3E1C6FFC22F17DC2FC30AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
Manifest number:          01C3
Signing time:             Wed 13 May 2026 02:01:36 +0000
Manifest this update:     Wed 13 May 2026 02:01:36 +0000
Manifest next update:     Thu 14 May 2026 02:01:36 +0000
Files and hashes:         1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: TNq7r//IxJByMGckDuMIa6MDzb5D85P2uq9+avPUCmU=)
                          2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:6d:7f:9a:3e:1c:6f:fc:22:f1:7d:c2:fc:30:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
        Validity
            Not Before: May 13 02:01:36 2026 GMT
            Not After : May 14 02:01:36 2026 GMT
        Subject: CN=93239240314ced5f3d52f741e63df4ea06247644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:12:e2:40:ed:a1:71:a3:76:61:86:25:3d:
                    f3:29:73:ee:25:00:fd:59:5f:d8:4e:d2:3b:53:59:
                    bb:78:53:b4:2c:bd:db:04:cb:b1:a6:61:09:b7:92:
                    e3:24:b7:18:22:d5:76:fa:52:eb:3c:cb:48:50:5b:
                    28:67:06:6b:c5:05:0f:e5:66:00:ff:f2:5c:ed:13:
                    11:71:24:f1:38:51:78:91:88:59:40:95:c4:3a:0c:
                    18:ec:e8:07:12:f0:eb:cb:49:d0:56:4f:4f:ff:42:
                    49:4e:76:21:ab:47:c9:4f:e1:c5:77:71:c6:2d:79:
                    5b:4a:7e:4b:54:8a:c2:f5:e5:17:59:73:1e:90:56:
                    3b:ee:be:6c:58:c1:ff:27:c4:93:9f:da:26:02:bf:
                    62:e6:87:a0:e2:16:c5:9c:c6:e3:e7:d4:ec:40:b3:
                    b1:49:44:ee:1c:b5:6a:76:2b:cd:41:aa:bb:0f:b1:
                    49:ba:75:bf:9f:13:6e:c8:51:cd:c8:9b:1f:2a:bb:
                    ce:28:c9:64:54:1d:80:1f:50:ed:90:b2:92:91:f3:
                    61:8c:a9:ec:54:c7:e5:37:42:04:03:79:0d:15:02:
                    b7:d7:af:7d:5d:03:60:a7:e3:89:c4:ff:b2:2b:dc:
                    bf:5e:3a:ca:a3:7b:4a:93:8f:cf:f8:68:57:49:6e:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:23:92:40:31:4C:ED:5F:3D:52:F7:41:E6:3D:F4:EA:06:24:76:44
            X509v3 Authority Key Identifier:
                keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6c:d4:50:a2:78:01:c8:6b:f6:e9:d6:c7:93:45:9f:2f:7e:
         30:a4:e7:27:a1:1b:0f:c0:48:ef:bf:67:37:ec:14:e8:68:69:
         d7:e0:f5:a6:03:d4:a5:2c:56:e0:84:63:a5:46:2b:9f:cc:0b:
         ee:eb:ab:b1:fe:23:5c:48:31:80:96:40:35:57:65:fc:06:cf:
         d8:6e:18:ee:3c:0f:4c:42:8e:30:24:57:d9:26:93:5a:45:d3:
         00:57:54:52:62:d0:7a:bb:c5:f4:b3:37:62:6f:31:88:ad:7b:
         68:55:cf:d3:00:b5:6b:43:ab:50:f3:b8:a5:9a:83:8a:67:79:
         f9:62:92:1c:ad:d8:fe:96:b9:48:e0:89:ac:d1:77:1c:c7:d6:
         15:8e:44:80:ee:38:eb:31:ff:e1:9b:ba:65:92:02:d7:4d:02:
         fd:b7:5f:f8:d5:d4:02:3d:40:8b:b7:b1:b9:24:66:d1:b1:6d:
         e7:58:9f:c8:9c:50:00:24:6e:4f:86:fe:07:79:93:3d:6e:54:
         20:6c:6e:85:c6:97:2b:7e:e4:54:ee:85:7f:ab:99:f2:15:c0:
         b6:38:da:30:0a:17:3a:e0:aa:99:93:ed:53:54:aa:f1:9d:aa:
         9b:46:3e:6e:c6:df:da:32:db:48:dd:ac:30:3b:88:bf:f6:68:
         3a:45:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:49:28 2026 by rpki-client