Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File:                     HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier:          8YmonhuwDcHhSuWlsjAr4eIC8E0u02VsMeDSxJ+KFHY=
Subject key identifier:   1B:2B:67:4D:80:CF:C0:DB:B0:56:1B:66:3D:64:F9:81:A7:FF:F3:05
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer:       /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial:       019E1CB4756BEF82C6A6F1AC95FADE203B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number:          1898
Signing time:             Tue 12 May 2026 15:00:48 +0000
Manifest this update:     Tue 12 May 2026 15:00:48 +0000
Manifest next update:     Wed 13 May 2026 15:00:48 +0000
Files and hashes:         1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: 2YY2VRNnSayQHmIBYOGL6RFaoVWAymNDYXpdAVPdIpw=)
                          2: LtF7nKZF5Eu_SugtCNfVkUGiFHM.roa (hash: DT5yTfPTZI2KTOuvzB4Bd0By5xLBRBjLmkPSrqIV9B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:75:6b:ef:82:c6:a6:f1:ac:95:fa:de:20:3b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
        Validity
            Not Before: May 12 15:00:48 2026 GMT
            Not After : May 13 15:00:48 2026 GMT
        Subject: CN=1b2b674d80cfc0dbb0561b663d64f981a7fff305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:e4:0e:65:d7:8f:e2:f2:50:0a:0a:53:be:
                    68:59:76:fd:32:7d:46:2d:6b:b8:e1:2a:5b:fe:92:
                    63:10:b9:08:69:e6:6b:b4:51:25:b9:30:24:09:66:
                    28:fa:63:06:87:27:b9:3d:2f:a1:5b:2f:60:a4:96:
                    eb:12:4a:49:53:a7:83:77:fc:69:df:be:d9:29:15:
                    a9:07:ce:d3:87:b6:f5:c8:da:a4:38:c8:e2:54:ce:
                    ea:63:6b:61:55:7b:93:41:ba:d6:12:39:54:9c:be:
                    4f:45:44:63:7f:89:17:c1:f2:ea:e4:b0:50:97:fa:
                    13:27:cd:40:4d:1d:9e:18:1e:fb:1f:66:e6:45:df:
                    de:28:9c:39:10:ee:d8:c9:b7:19:da:dc:5e:3e:14:
                    88:04:39:31:ef:d8:53:6e:44:ad:b9:36:b8:1b:d4:
                    69:62:7a:59:b4:d0:66:3d:c7:a1:72:ef:19:6a:00:
                    f8:2b:cc:39:be:22:5a:ea:f9:d7:11:be:b1:fe:59:
                    45:71:3f:c9:22:d5:0d:b0:48:02:05:57:f7:56:77:
                    87:12:cb:fa:93:38:8d:c1:ed:db:50:f1:d2:d0:27:
                    e9:54:93:37:34:6d:18:f5:86:32:47:9d:5a:58:a6:
                    4a:1e:20:ae:c6:81:7b:02:85:02:5f:13:da:20:b9:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2B:67:4D:80:CF:C0:DB:B0:56:1B:66:3D:64:F9:81:A7:FF:F3:05
            X509v3 Authority Key Identifier:
                keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e4:6b:dd:ff:e1:d3:41:73:26:6d:15:34:94:c0:f4:36:95:
         69:06:df:7b:06:a9:22:a0:14:df:79:95:df:d1:5c:96:c1:bb:
         c0:8b:58:cc:84:49:a7:94:09:11:33:3b:cf:e6:97:4c:26:2c:
         24:b9:0c:df:71:f9:de:47:be:7d:c0:e9:c8:27:76:cf:4f:8e:
         4c:6e:c9:9b:62:c8:02:bc:fe:e9:9b:c3:1b:cd:63:17:2d:3e:
         8e:08:57:19:3e:e9:e5:1e:50:f1:f5:7f:cd:5f:82:74:4e:ec:
         15:63:fe:d4:ba:0b:50:e5:92:f1:55:2e:80:f1:c2:38:09:67:
         89:75:16:f0:ce:c4:b1:ad:24:0a:6e:60:95:57:2a:d1:65:89:
         3f:7a:92:5f:b7:88:0f:18:e6:93:7c:c3:f2:c8:c4:3f:75:d9:
         69:06:7d:a0:9e:01:90:51:19:bd:1d:f7:b6:8c:86:73:9b:a9:
         bd:21:ce:a3:08:f8:f3:4c:9f:cb:18:2b:ac:2f:f9:de:1b:c7:
         4a:64:1f:02:9a:34:d9:a9:e4:f0:ff:5f:1b:e2:2e:27:c3:32:
         9e:3b:ee:29:e1:ae:df:02:bf:54:cf:ed:96:b1:a7:3d:f5:6c:
         35:6d:3e:88:50:f9:88:51:5d:35:81:2a:41:78:20:a7:11:92:
         de:63:00:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:06 2026 by rpki-client