Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
File:                     htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json)
Hash identifier:          P+eZYB09EC7Pjp8+6wOn4dQVqcRYjeVfXoFGcwYJn1o=
Subject key identifier:   60:FA:85:28:D4:3A:70:AE:CF:79:06:1A:37:12:20:D0:BB:7D:64:CB
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Certificate issuer:       /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial:       019E1DC77B93FE7A52EB0B60D437B3BAE9BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
Manifest number:          022F
Signing time:             Tue 12 May 2026 20:01:13 +0000
Manifest this update:     Tue 12 May 2026 20:01:13 +0000
Manifest next update:     Wed 13 May 2026 20:01:13 +0000
Files and hashes:         1: AL6_iNyYf5_-8MNJEgieEgNDMIY.roa (hash: 0+d8aJSNzAigR1rPUuhEaaIGr2KsvOX77RXS9BnQQ0E=)
                          2: Ri6eR0hyModJmhU4qRXYfOTF-Qg.roa (hash: vp43LSqg4UfumRnhKAC/q4lMv6KhCs9VlzcPfCyPdH4=)
                          3: SNSZyMcxHfPqzsZovpnv0TS4kEk.roa (hash: 6uX+ryYbLRIBx9RtsjWqz+fa+ZH7FgeP5Ku25N+gV9g=)
                          4: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: 7hFA3sJegdHAhl+LZskjyt+vZLK4xlSLZYjzNR5XPkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:7b:93:fe:7a:52:eb:0b:60:d4:37:b3:ba:e9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d963844f8205d1369434531c998600c15781a1
        Validity
            Not Before: May 12 20:01:13 2026 GMT
            Not After : May 13 20:01:13 2026 GMT
        Subject: CN=60fa8528d43a70aecf79061a371220d0bb7d64cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:92:e2:1a:7c:a5:03:91:d7:75:a4:27:c6:
                    a4:a9:f5:80:f8:d4:68:45:28:76:47:94:ff:19:f8:
                    c8:d1:90:be:bc:87:ae:fb:62:28:cc:3f:28:9d:ea:
                    29:3e:1f:ca:f2:3c:e2:d1:f3:f8:7c:81:03:d8:8c:
                    ad:46:b7:36:06:ca:ce:8a:eb:af:4c:59:23:5a:fe:
                    bf:86:8b:aa:5a:b3:5c:d5:b8:54:d7:f8:39:a7:e2:
                    a3:a8:3c:fc:e0:ea:b7:31:47:48:30:6a:2e:33:77:
                    cf:37:6a:74:4f:db:46:90:21:ef:fc:bc:2b:b7:f3:
                    6c:c9:d3:e3:60:54:25:8d:8e:8d:0b:2e:7a:2d:a2:
                    2d:19:3c:ff:1c:b3:07:ee:c8:21:66:5e:09:d4:2a:
                    d6:92:18:0b:e9:0a:53:84:0d:0f:8a:96:f8:a7:0f:
                    33:01:27:f5:bc:56:3f:65:7a:72:1d:e3:32:99:1c:
                    18:4c:90:02:37:54:e3:62:ad:bf:3f:f0:56:92:44:
                    b2:ba:03:73:db:fc:d3:a8:46:9f:b3:58:d8:80:63:
                    a8:d7:2f:10:c1:24:63:e1:82:46:92:2f:f9:58:30:
                    2d:c0:78:d8:b7:5c:6b:bd:c4:52:88:15:1f:bd:38:
                    a4:3b:a8:c9:98:53:96:08:8e:e2:76:af:b5:00:e5:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FA:85:28:D4:3A:70:AE:CF:79:06:1A:37:12:20:D0:BB:7D:64:CB
            X509v3 Authority Key Identifier:
                keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:99:86:31:ba:15:25:d2:72:0e:19:aa:01:17:68:d8:04:72:
         44:12:0b:99:42:a2:7a:bb:94:3a:b2:f2:9e:71:52:e3:dd:af:
         27:bb:d5:b3:18:b1:3b:e0:6f:b5:bc:c6:e0:7d:92:81:c2:5b:
         a8:3c:1f:8d:48:46:40:e4:22:a4:78:6d:4f:03:64:ad:41:52:
         5a:56:f3:f8:f5:e0:c5:dc:4a:fa:0f:c6:47:6b:0e:06:8e:af:
         43:99:38:56:3e:0d:58:e7:d7:fa:a5:d2:9f:22:24:e0:ce:07:
         62:69:69:d4:f5:12:0c:d4:bd:6c:82:21:a9:5f:66:c0:64:ea:
         76:33:5c:01:38:3c:7f:63:6b:5a:87:64:63:8e:74:85:89:bd:
         91:de:65:55:02:e5:87:92:8c:11:13:07:ce:a9:a8:b5:d4:23:
         9a:73:a0:65:a1:2b:d1:d0:1d:e3:3d:06:2e:d2:78:54:ba:19:
         c1:12:b5:0f:e8:a5:34:44:c6:1f:b0:2b:42:f0:d1:94:d4:e4:
         e9:67:08:9b:a8:e9:a0:e8:37:f7:02:cc:a1:15:9a:8f:7e:b5:
         05:3c:17:f9:79:62:5d:f2:4c:51:85:48:af:cf:63:97:20:58:
         eb:92:82:00:6c:2d:31:28:5d:a5:63:ea:96:fe:45:c5:8c:57:
         08:59:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:32 2026 by rpki-client