Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          AO2KiVaSodCUhHZSuyjXm8NOhIhD72kiZnXoFydWEMg=
Subject key identifier:   73:13:C9:8E:B5:8D:DF:0A:CE:29:D2:F9:1E:82:A4:10:FA:F9:CA:D7
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       019D2B4EEDC000E0B28F4100E9F368E95395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          16DE
Signing time:             Thu 26 Mar 2026 18:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:25 +0000
Files and hashes:         1: HYR7suAoxZFnHUn4UXq9B5vF84c.roa (hash: OfYZDqFDE0JPzosM65TT4BEoJbyAfR8HJmA3MMGddgo=)
                          2: cddCVYALDFJtBMyXzZ9UKlRUTrY.roa (hash: gzrPQjV17vSdcuXdvHZRVOack/k8pRc08FPRrAr0hyY=)
                          3: dhlvPCZXb2EkhMlEiuEIkVAgyec.roa (hash: 8F9BXDtvGEBkwGg2A4bRIhZ8Kc7R53vk/fY6rvM59Ro=)
                          4: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: ZG0HD1O6PyMoRtlTAjfpOLRWXe64h59b9phrevv6IvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:ed:c0:00:e0:b2:8f:41:00:e9:f3:68:e9:53:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Mar 26 18:01:25 2026 GMT
            Not After : Mar 27 18:01:25 2026 GMT
        Subject: CN=7313c98eb58ddf0ace29d2f91e82a410faf9cad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:21:03:a9:9c:5e:62:c5:9e:0d:5a:d1:4b:94:
                    a3:f7:cc:67:a2:a7:e1:ab:66:1e:46:fc:73:24:d8:
                    df:4c:14:fe:40:dc:e7:10:d2:e8:00:cc:63:47:03:
                    3a:f2:0c:69:e0:ab:f9:62:63:d2:e9:6d:34:a4:e6:
                    6f:f8:f3:0b:54:1a:a9:d1:68:ea:79:49:a5:bc:96:
                    e7:2f:70:22:f4:3d:9b:4c:ac:f5:9a:5a:2c:e2:6d:
                    06:ac:30:08:67:a2:92:5c:e5:9f:ec:b0:36:a6:69:
                    4c:9d:6e:0b:4b:0c:db:f2:ce:0c:4d:be:c2:16:57:
                    22:c1:0e:15:14:b6:5e:76:e5:cc:51:d9:c4:85:68:
                    8a:16:3c:f2:5a:12:2e:b5:5b:a7:fe:05:65:37:72:
                    6c:f0:10:9e:d9:12:80:5e:e9:7f:af:41:c1:34:5b:
                    3f:be:7b:4a:19:cb:af:3a:44:0f:3d:8c:dd:51:d9:
                    8f:9f:f6:cf:a0:c9:3f:ed:12:64:2c:0d:29:91:46:
                    2c:68:12:2a:f3:f1:bb:00:d7:de:92:9a:79:47:52:
                    03:7b:31:8a:e6:f2:89:1c:f3:76:ed:ea:9f:68:4b:
                    24:3f:55:0f:a5:7d:2a:7b:d1:e5:55:38:ae:2a:84:
                    13:62:ab:f1:87:a5:f0:86:1d:df:37:41:83:53:a7:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:13:C9:8E:B5:8D:DF:0A:CE:29:D2:F9:1E:82:A4:10:FA:F9:CA:D7
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6f:f0:67:b2:b0:5f:e6:53:cd:f8:17:06:d5:5f:78:bd:9f:
         2d:e1:ff:fc:e2:82:81:f1:82:4f:dc:d0:29:90:8e:cd:cf:c5:
         1f:5a:e4:53:ca:31:8b:49:00:53:33:aa:a8:40:94:cb:dc:f9:
         04:5e:ef:48:f3:c3:74:20:1a:74:c4:57:d6:fe:03:fd:6b:9f:
         5a:56:77:4c:43:a3:dd:08:0f:34:11:53:f3:84:ef:82:45:88:
         80:81:af:5b:d0:3d:eb:88:84:0d:2a:90:4a:8d:57:73:f6:fd:
         c9:7d:38:22:ae:2a:ae:3d:0a:d3:8a:91:01:c0:36:34:ef:24:
         d6:55:5a:70:22:8e:55:75:47:76:38:19:dc:80:55:26:3e:c5:
         2b:5c:b5:f4:cc:e8:f9:1b:fa:6a:20:5e:c4:77:1a:f8:5f:5a:
         a0:e7:c1:d7:78:9b:aa:e5:7b:47:08:ea:8b:e4:ff:9d:c5:fe:
         0d:66:27:07:8f:dc:69:d2:8c:64:15:15:66:e2:4a:1c:2f:c6:
         9c:2c:d4:b8:cd:00:17:4b:00:05:77:7f:31:d5:8c:b3:33:8e:
         f2:ab:18:93:2d:11:14:ce:9b:62:ce:79:50:c3:0b:e8:32:b7:
         be:0f:ce:46:1d:e0:7f:b7:3d:de:ec:3a:d8:56:0a:93:a9:b9:
         09:f6:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:28 2026 by rpki-client