Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File:                     hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier:          GtxDQ9icnRZh/GRevzaBKfPP3f8LlQgksrGvvXnlAc8=
Subject key identifier:   14:84:1D:D2:0F:4D:A6:36:D0:6F:88:55:FE:C6:51:57:D3:F2:C7:7E
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer:       /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial:       019E216DB733EAA8AF47F1AC2DB1577E1600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 13:01:38 +0000
Manifest this update:     Wed 13 May 2026 13:01:38 +0000
Manifest next update:     Thu 14 May 2026 13:01:38 +0000
Files and hashes:         1: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: L8kaNKDg7xKAIhyH87rxqkydcKk7GAHO4gQdJBfMFe8=)
                          2: lGyQDQVBEMCDFsipbxjBTxxJg7Y.roa (hash: /B4wk8kwo/lxwB8Izsd2oZk4yH80dIbNot8H0bXk6bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:b7:33:ea:a8:af:47:f1:ac:2d:b1:57:7e:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
        Validity
            Not Before: May 13 13:01:38 2026 GMT
            Not After : May 14 13:01:38 2026 GMT
        Subject: CN=14841dd20f4da636d06f8855fec65157d3f2c77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:24:b9:64:45:54:c3:c3:cd:a4:a6:ae:08:
                    20:12:97:3a:14:33:6b:09:45:dd:2b:ad:52:58:33:
                    ce:29:68:96:ae:53:0b:56:1e:4f:f3:4f:f2:0a:75:
                    4d:73:8c:74:8a:1b:01:68:d7:56:17:6e:17:42:5d:
                    70:42:7d:0d:9e:71:49:30:be:45:b9:51:26:76:43:
                    b0:d7:4e:02:f0:ab:52:da:ab:c0:96:91:e9:2a:c5:
                    ea:d7:43:46:01:08:a5:96:0c:3b:ca:6b:ea:e0:8b:
                    46:fe:5f:4e:1e:1d:0c:2b:69:32:47:d5:5a:05:3c:
                    be:c2:a7:6e:47:c3:09:28:7f:86:47:56:aa:47:62:
                    02:4b:a7:9a:05:ba:17:a5:2f:19:18:18:77:e2:b6:
                    c6:1d:5c:f6:30:a2:be:41:02:d9:35:0b:5d:a4:75:
                    56:fa:d2:32:d4:2f:a3:1d:5e:8e:6f:21:b8:72:0c:
                    5b:17:62:c3:06:86:84:c1:d0:d6:66:06:02:b1:b3:
                    89:70:da:07:fa:b0:71:9b:f9:59:2c:12:f8:45:c2:
                    6c:7d:ba:76:53:db:3e:8e:19:83:fb:62:2d:fc:bd:
                    4b:85:50:eb:8b:ed:2e:c9:ea:d8:1b:41:b9:2e:8d:
                    ad:a4:61:f6:73:f6:54:88:fa:d5:36:3b:66:35:24:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:84:1D:D2:0F:4D:A6:36:D0:6F:88:55:FE:C6:51:57:D3:F2:C7:7E
            X509v3 Authority Key Identifier:
                keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:1f:cb:b1:0d:f6:ac:ed:22:b2:aa:93:4f:e6:e8:73:7f:64:
         9a:08:1a:0d:94:c7:2c:20:33:03:51:54:ec:8e:c6:a3:7b:15:
         ea:57:70:66:2a:45:b0:c1:9d:82:0c:e7:d5:84:5e:59:7d:d0:
         f9:15:82:c2:93:98:12:29:e5:12:6a:ec:cb:40:56:17:5b:c2:
         83:69:ce:96:d8:3e:b3:25:20:e7:da:d1:fa:7a:79:e1:51:c1:
         1e:cf:9a:35:6c:67:b8:6b:5f:77:7f:9b:00:cd:c0:ed:c3:73:
         1a:71:1e:6d:ac:f4:0e:4d:e0:f4:6b:0c:15:ea:75:af:d7:29:
         aa:08:f9:aa:c7:f3:67:2c:65:81:d6:8f:2c:9c:ba:a3:fa:84:
         cf:57:48:41:4a:c0:8a:b2:51:ab:d3:9b:ef:41:b4:29:34:aa:
         09:31:8f:a9:a5:06:d7:7b:25:6e:de:54:72:8a:7c:de:1b:2b:
         20:df:c1:cb:c4:c7:28:84:72:cf:6e:71:d9:b8:20:41:22:fc:
         d7:e7:cf:4e:da:ba:79:50:cf:85:15:4a:94:5d:e4:2e:ba:74:
         f6:48:c7:3f:72:89:96:08:80:f7:4f:99:02:d3:61:49:96:8a:
         ab:10:17:ca:a8:53:c3:b6:6a:b0:b5:51:04:70:a2:77:f8:ef:
         fe:27:8e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:53:18 2026 by rpki-client