Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File:                     HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier:          BCrzkEhh7vmkeEad9fqnW4YvNG2lirU2mo062XDnD3c=
Subject key identifier:   C6:78:60:E1:E7:07:30:DB:6F:4A:E9:25:9E:58:70:DF:80:E3:CA:81
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer:       /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial:       019E29CB91641E731A958ACA6C459F9FC86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number:          18BF
Signing time:             Fri 15 May 2026 04:01:07 +0000
Manifest this update:     Fri 15 May 2026 04:01:07 +0000
Manifest next update:     Sat 16 May 2026 04:01:07 +0000
Files and hashes:         1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: rURchJsOonCrr14WQan5e4txHVGIhQicvfCGylF770M=)
                          2: Y0yvGwL8N-nOEiU7zOM6SSHHJLQ.roa (hash: 8/QpRSCZ4OTmfd3cZORygSL1Lec3LinxRtnyUo2sHK8=)
                          3: j4FzHGNM-x8JCvJ06e6JApa0Mj4.roa (hash: F+UQE401zF1jsBTDqKt2hLCSf3ZWTZdmAcKzmrDSjF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cb:91:64:1e:73:1a:95:8a:ca:6c:45:9f:9f:c8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
        Validity
            Not Before: May 15 04:01:07 2026 GMT
            Not After : May 16 04:01:07 2026 GMT
        Subject: CN=c67860e1e70730db6f4ae9259e5870df80e3ca81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:84:52:44:80:b3:db:b2:06:e8:67:d4:a2:
                    83:41:b2:65:82:61:9a:d9:6c:58:b1:5e:37:2d:9a:
                    97:c5:16:ef:d4:d3:cc:2b:f9:48:bd:4e:a4:ba:c4:
                    59:1b:24:32:3c:7a:2f:97:0a:67:03:46:b3:7a:83:
                    35:7b:4a:10:71:f7:6b:0a:7b:74:6e:c6:aa:0b:e1:
                    68:5d:9a:77:48:1e:25:39:13:5c:b7:1a:37:0b:83:
                    95:22:99:6f:47:9a:c2:a2:27:4b:d5:2f:5b:79:bf:
                    8b:9a:df:70:23:c4:a2:ba:34:4d:21:d7:c1:16:bf:
                    2e:1a:5b:28:90:4d:0f:c0:3c:50:7e:04:30:c9:2a:
                    bf:a2:30:ba:36:6b:fb:5b:f7:0d:74:e3:3c:c6:83:
                    96:de:09:ba:ae:de:f5:f3:1a:a8:fc:85:34:cf:26:
                    30:fc:25:38:1d:12:82:dd:fd:d3:ad:09:20:10:db:
                    83:47:18:4f:08:92:0a:54:88:5f:fe:06:85:93:c2:
                    9a:e2:eb:4e:33:1a:2c:d8:fb:e3:41:e8:4c:2b:19:
                    16:b5:8a:43:db:be:ad:46:31:3a:20:fb:0d:69:28:
                    12:f8:d7:c8:63:4a:7a:eb:e4:9d:15:17:92:b6:3f:
                    21:86:3a:09:37:3d:6b:c6:b4:19:2d:10:df:f0:1c:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:78:60:E1:E7:07:30:DB:6F:4A:E9:25:9E:58:70:DF:80:E3:CA:81
            X509v3 Authority Key Identifier:
                keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b7:0e:b9:8a:a4:87:29:e7:30:37:18:46:01:33:de:a6:c6:
         c8:91:e7:96:e7:4b:20:c5:de:09:66:dc:c0:7f:ec:0a:e5:01:
         51:6f:ee:3a:2a:52:be:19:ec:53:3a:7f:7b:98:97:45:23:cf:
         96:9d:d0:4f:8e:c9:af:86:77:d7:20:bc:48:12:64:00:42:24:
         07:14:aa:22:34:de:55:0f:30:84:b2:36:6a:5b:39:91:2b:18:
         42:47:9a:d1:ea:a2:18:de:f5:d9:85:00:ca:5c:32:8d:42:2e:
         48:55:0e:00:39:73:e3:30:5e:a7:8d:ec:d4:f3:02:96:69:c3:
         15:ba:43:4e:df:c6:a6:45:45:a3:14:a1:b2:f2:ca:a4:a1:84:
         1e:3e:45:89:56:0d:70:ea:c4:f1:b1:6d:15:e8:ff:77:35:8e:
         89:eb:18:5c:ec:1f:93:1d:b3:1b:26:11:56:db:56:6f:ca:a1:
         dd:a8:57:24:46:cc:95:b4:c5:c1:68:42:20:d4:83:54:7a:64:
         49:97:12:d6:6c:9f:2e:c3:64:fb:81:f4:72:94:49:33:88:7d:
         88:38:a4:c5:9c:14:7c:df:cb:76:d4:9f:20:c1:9a:07:1d:86:
         92:7d:1a:48:20:50:7a:c5:4a:6f:5c:dd:a9:9f:9f:c8:b7:43:
         5e:ec:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:04:54 2026 by rpki-client