Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File:                     HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier:          mhaZIdxZohBQxeE6qdP28xcPnF/kte4JnKBaGxWOYwU=
Subject key identifier:   0F:79:3A:89:34:F1:1E:7F:7B:D9:BE:52:C5:4E:CE:EE:BB:F7:50:BA
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer:       /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial:       019E1F10999D7D95B8497406D5BB158F84B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number:          1522
Signing time:             Wed 13 May 2026 02:00:42 +0000
Manifest this update:     Wed 13 May 2026 02:00:42 +0000
Manifest next update:     Thu 14 May 2026 02:00:42 +0000
Files and hashes:         1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: UVwguaqS1nZI0JoJ+JldlXNTzhFjdhaSBWBtwivw2HY=)
                          2: fFVfaPEPvGKjg4kJa5a5tDcfzyc.roa (hash: d3fxlkjjTmTR/qE5MofQAuscWNxHOBVvr2boR3ObEX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:99:9d:7d:95:b8:49:74:06:d5:bb:15:8f:84:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
        Validity
            Not Before: May 13 02:00:42 2026 GMT
            Not After : May 14 02:00:42 2026 GMT
        Subject: CN=0f793a8934f11e7f7bd9be52c54eceeebbf750ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:07:5f:17:36:33:74:2a:d0:13:65:a0:2d:
                    c9:5b:c8:ec:02:51:23:ae:ee:87:05:99:2e:1d:e4:
                    4c:23:f2:6c:61:cd:20:a2:5b:26:36:73:b5:c7:a1:
                    c6:f0:09:1d:c3:7a:35:b9:9b:c0:a2:eb:ed:16:ae:
                    64:9a:4b:58:01:26:0a:2c:76:ed:4e:d7:39:14:a6:
                    2f:e5:6f:ad:91:bc:a6:67:a6:60:b8:96:b3:2c:42:
                    ec:53:03:10:6a:94:b9:5f:3c:e0:8d:79:ee:1d:a8:
                    66:1f:f1:2f:a1:cd:a7:cb:06:7e:7e:1d:a4:12:73:
                    86:47:42:0a:f6:43:d0:6e:69:0b:d0:21:f8:a3:da:
                    db:88:54:7c:65:60:6b:f6:de:99:53:a7:9b:24:78:
                    09:9b:e4:a0:22:75:bf:02:45:bb:14:11:f9:df:2e:
                    cd:09:68:02:45:3f:77:f0:12:21:0e:fd:51:63:41:
                    46:e3:48:e4:0b:80:a2:91:53:e1:84:c4:56:06:0f:
                    d4:4c:7a:d6:c8:98:03:d1:11:2a:fa:28:8e:ca:1d:
                    c8:f8:ba:2b:cc:88:14:ef:68:9c:f6:07:bb:44:e2:
                    d9:a9:04:e6:01:fc:ef:31:6b:b0:2d:ad:26:88:f5:
                    2d:1b:44:c4:9b:54:7c:d9:e6:2f:a0:71:49:ca:6b:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:79:3A:89:34:F1:1E:7F:7B:D9:BE:52:C5:4E:CE:EE:BB:F7:50:BA
            X509v3 Authority Key Identifier:
                keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7f:62:9b:4c:3e:cf:50:0e:c2:3f:ed:ae:7e:e7:42:cf:f4:
         15:5b:8a:54:29:15:6d:5a:ca:21:cc:be:59:88:b4:4b:d9:e8:
         d9:7d:bf:03:51:8f:6f:db:71:4a:2d:48:8a:51:58:2e:dd:2a:
         05:e8:80:e6:9c:6b:e6:f4:f3:fb:f3:05:9d:31:50:a7:57:bd:
         2f:4e:cb:ef:9e:4c:ee:44:9d:41:33:ac:15:a4:46:96:0c:d9:
         20:5f:0d:d5:83:ce:c3:5f:60:2d:a1:5a:cc:62:17:6c:56:a9:
         6d:42:9f:d8:d6:c4:c2:4d:03:24:c3:92:7c:93:f7:34:40:86:
         6d:54:9d:36:3d:8a:18:3f:2a:3b:1f:82:fa:a8:0d:1e:6b:94:
         6d:15:5b:2d:ce:79:7e:80:7e:c9:56:14:15:7a:dc:1b:d4:ea:
         c7:d5:24:d8:f7:3d:58:f7:5f:d1:5e:08:0e:a6:0f:d4:bd:7d:
         09:d5:89:3a:1c:39:bb:b3:3a:a7:35:94:6f:f2:b5:53:e6:63:
         54:53:21:3f:4b:81:c4:5f:d2:0a:22:fe:29:ec:8b:ed:0b:ae:
         f1:95:8a:2c:59:a6:13:d4:f0:12:68:a8:2c:b0:a8:dc:4f:c9:
         0a:49:cd:78:04:fb:e7:52:71:a7:cb:4b:56:3c:07:2a:47:38:
         d3:7a:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:24 2026 by rpki-client