Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File:                     hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier:          RpUHOGphbF6Tx2bLwZvSA7giZTPWn0zKku9ibWtun94=
Subject key identifier:   6B:26:7F:85:DD:86:3F:F4:31:10:DC:61:AD:42:A2:CB:D6:C1:B4:E1
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer:       /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial:       019E205A5CD3FC07C9520BCC541497E62556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 08:00:53 +0000
Manifest this update:     Wed 13 May 2026 08:00:53 +0000
Manifest next update:     Thu 14 May 2026 08:00:53 +0000
Files and hashes:         1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: CD0SPIchUenJ2mYsQv41AKi81/f17MPGGq+yycwnVJM=)
                          2: yfgLpeAIQyC5y-W4IaKpK2L1_yk.roa (hash: oWLVNeWnqZmGvQRxIBi9f/jmIyhTqkilRZKKYPg6VeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:5c:d3:fc:07:c9:52:0b:cc:54:14:97:e6:25:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
        Validity
            Not Before: May 13 08:00:53 2026 GMT
            Not After : May 14 08:00:53 2026 GMT
        Subject: CN=6b267f85dd863ff43110dc61ad42a2cbd6c1b4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:e6:c6:79:bb:7e:c4:56:c3:06:71:2b:29:
                    d0:4c:14:9c:e9:fc:55:05:b1:90:c4:27:87:92:82:
                    7b:dd:2a:a9:de:e5:fd:2d:04:d9:57:7a:f6:ec:c7:
                    01:fe:7e:d5:60:20:e9:b9:eb:1e:57:03:0f:df:2d:
                    74:33:92:44:5f:25:90:a7:ac:93:0c:35:cc:5b:5a:
                    8e:cf:77:94:c5:64:f7:85:e1:6e:cc:fc:4b:38:2d:
                    2c:87:be:57:85:63:59:96:f0:84:56:a2:e3:da:19:
                    f0:dc:f2:7f:a5:76:5d:3e:14:f8:56:4d:3c:36:a0:
                    d8:af:8b:53:cc:11:60:4a:13:8d:28:5e:07:1b:ed:
                    e0:27:1a:a8:7e:9c:72:26:60:11:64:37:d5:2b:27:
                    00:ee:20:4b:c7:25:26:09:90:96:08:ed:1e:58:29:
                    0a:fd:1b:92:31:56:53:28:bd:9e:df:6c:82:2d:85:
                    5c:72:d6:29:98:97:d3:bf:10:0c:16:cb:a4:33:20:
                    8a:cd:85:1e:eb:34:69:8c:c3:25:e7:ca:3b:fc:fe:
                    f9:99:fd:7b:35:83:fc:90:42:f9:7e:75:63:30:0e:
                    a3:e1:83:c1:2a:01:e8:23:7c:b3:15:2d:19:b9:b5:
                    66:04:fc:8d:7f:f0:97:5e:43:b6:a5:b7:10:2b:57:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:26:7F:85:DD:86:3F:F4:31:10:DC:61:AD:42:A2:CB:D6:C1:B4:E1
            X509v3 Authority Key Identifier:
                keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cb:04:cf:17:29:e5:e8:2d:f4:d2:5f:04:3e:f0:cb:8f:5b:
         c4:21:60:c3:e3:94:42:44:64:fd:9a:8f:cc:f0:7a:54:fb:4c:
         90:ad:de:47:76:d2:21:c4:aa:6c:e3:0f:f4:f9:37:52:f9:f8:
         d2:20:c1:aa:5c:c6:64:76:12:e0:dc:53:4a:ec:f6:8f:d8:de:
         b6:91:60:ab:60:88:32:5f:7f:32:71:63:70:56:33:fa:23:3b:
         55:b1:b4:c0:7e:4e:3d:08:ac:fe:ad:c7:74:37:28:4b:d2:ed:
         4c:d0:1e:ec:7b:2c:8c:94:a7:fe:f1:f9:de:8f:5d:8e:39:99:
         71:d8:bd:16:a2:ce:40:8e:00:18:a9:12:7c:db:9e:4b:64:3f:
         06:ea:4c:83:bf:a0:ef:6d:6f:03:80:24:88:10:38:92:4b:a8:
         d7:df:e8:69:73:56:b1:d3:b0:4f:7a:fa:eb:69:2e:45:10:13:
         b6:03:6a:6c:62:55:88:d7:95:32:ea:f5:4a:64:4a:f0:fd:bf:
         58:02:27:eb:81:5d:ec:e2:b6:8c:56:7e:17:ac:ea:fe:b8:73:
         8f:c2:e1:3f:6a:ec:a6:a5:b9:f8:a0:7d:18:5e:c2:00:43:de:
         d5:75:dd:48:cc:3a:99:88:39:a1:7a:c3:31:70:be:9a:71:fd:
         95:7f:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:40:17 2026 by rpki-client