Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File:                     HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier:          wPOsnX7vlNHRJ7K08sK9Wz6vpjTYp0madg2/JKhR+M8=
Subject key identifier:   EF:4F:0A:1B:48:24:45:37:C0:B0:49:B1:8E:0F:2D:FD:F6:57:24:8F
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       01A0EC2ECC08A859AB8674116E5709089975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number:          160D
Signing time:             Tue 29 Sep 2026 08:01:24 +0000
Manifest this update:     Tue 29 Sep 2026 08:01:24 +0000
Manifest next update:     Wed 30 Sep 2026 08:01:24 +0000
Files and hashes:         1: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: 5v261r9izYy9a4KOqGc9WA7/3j89gIuAnEIFBA4m/9g=)
                          2: WrV4ZemJwrw_kjB05-5Id3wYxlE.roa (hash: eepRF61Uwq1JqMLzpuul90ksZb6fVRDXJtYxt1swjFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:2e:cc:08:a8:59:ab:86:74:11:6e:57:09:08:99:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Sep 29 08:01:24 2026 GMT
            Not After : Sep 30 08:01:24 2026 GMT
        Subject: CN=ef4f0a1b48244537c0b049b18e0f2dfdf657248f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:e0:d0:49:d7:49:61:d1:a1:f4:da:da:30:
                    83:56:9c:45:ce:f6:42:03:13:06:42:24:bf:53:4f:
                    f9:c4:89:52:dd:dc:ac:9f:85:ed:ca:33:7b:38:d5:
                    e6:be:38:39:5b:58:36:58:d8:a1:b8:29:ee:72:9d:
                    00:20:01:bb:50:42:4f:14:76:b4:95:30:52:68:4b:
                    2c:b4:e6:ad:d5:87:e6:db:91:c8:fe:54:f9:1d:5b:
                    f7:4f:c2:2a:dc:95:12:d1:89:b6:40:ff:eb:3a:33:
                    e1:4a:89:4b:62:e6:71:d5:e5:c4:37:a6:c8:4c:3d:
                    e8:7d:cd:18:c5:37:08:2d:ba:64:3b:ac:fb:ed:ca:
                    25:ad:1e:a2:57:b9:74:d5:46:e7:0d:9c:c4:dd:10:
                    25:6d:17:88:3c:b0:71:2b:ac:79:1e:b2:25:0a:9a:
                    93:80:5e:5d:3e:28:5e:b2:ac:cc:b7:08:fc:03:48:
                    b0:1c:b7:80:e7:82:17:8c:67:f4:87:29:e5:57:b9:
                    d5:2c:81:ab:7f:5e:68:32:aa:00:2f:23:cd:02:ec:
                    79:b9:58:48:b3:36:5b:07:59:d5:93:1f:75:87:9a:
                    0a:08:fb:ba:78:e5:b5:fb:a5:3d:c3:73:68:f5:d5:
                    ba:7d:18:4c:e0:88:54:b6:04:22:9b:c6:8f:59:33:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4F:0A:1B:48:24:45:37:C0:B0:49:B1:8E:0F:2D:FD:F6:57:24:8F
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:30:9c:25:23:be:45:88:58:5f:1c:9a:64:96:02:bd:46:f4:
         4e:1a:d1:df:39:f5:e5:02:58:db:18:37:2c:30:55:dc:ec:bd:
         c0:dd:6a:de:7f:74:fa:4b:47:c2:ae:97:ae:3e:e4:e8:6d:fe:
         6b:c3:e1:5c:72:b9:db:c5:83:04:0c:fc:2a:eb:63:48:7d:a9:
         ae:f2:33:60:f4:44:e1:e7:1a:c8:58:ae:8a:56:59:16:de:bf:
         27:37:07:24:70:88:b3:ee:d9:16:5b:9a:78:89:df:07:83:be:
         33:33:44:6e:0b:ed:17:1a:23:6c:79:ab:6d:ca:a9:a4:70:ca:
         e0:2e:90:84:e5:0f:07:31:e0:a9:73:30:c4:d9:dd:26:e4:6c:
         86:e7:88:31:7c:71:6f:13:31:50:2a:21:b3:f8:62:39:11:9b:
         b0:42:2f:a2:15:17:f7:5b:b0:fe:70:10:19:0f:c1:d5:1f:be:
         c2:df:8b:30:0e:07:be:5a:65:df:12:47:96:b9:01:ba:40:4a:
         35:a0:81:c8:a3:2c:bf:2a:a7:82:c2:7e:e9:5a:70:34:17:f6:
         8d:e5:57:46:53:4a:ab:22:39:b5:f3:51:60:ad:e5:e9:37:1c:
         fd:76:27:c9:d5:f9:a2:99:b5:38:29:6a:d0:c3:60:61:ff:92:
         71:8f:d0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:18:59 2026 by rpki-client