Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
File:                     hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft (raw, json)
Hash identifier:          LPUt7UYhu6hIOockJGP6Rsn6Kqd4ilfW2V/dNfot4ko=
Subject key identifier:   63:8F:BD:26:CE:A8:DB:B3:50:25:4C:03:6D:3D:38:8B:AB:6B:57:36
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Certificate issuer:       /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial:       019E1FECF247DD12D1230CAFC6682D7E6B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
Manifest number:          0C22
Signing time:             Wed 13 May 2026 06:01:22 +0000
Manifest this update:     Wed 13 May 2026 06:01:22 +0000
Manifest next update:     Thu 14 May 2026 06:01:22 +0000
Files and hashes:         1: GPPNPmR8KUY_sEY8Xyw8dhEolxg.roa (hash: JjmXr+ibRaRGfx0pfBbomv1IH9Jgiuy25aSKoWiXJmg=)
                          2: hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl (hash: wX6IMuTHJVd6sxXcrQIUL2CwK0XlBUYwDx4eCrKliU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:f2:47:dd:12:d1:23:0c:af:c6:68:2d:7e:6b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
        Validity
            Not Before: May 13 06:01:22 2026 GMT
            Not After : May 14 06:01:22 2026 GMT
        Subject: CN=638fbd26cea8dbb350254c036d3d388bab6b5736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:9a:cc:08:be:09:ce:cd:1c:9c:de:9a:a2:
                    74:eb:f2:2a:08:69:b9:5f:e3:79:f5:3f:af:e7:a9:
                    e0:80:0e:da:64:a7:f2:e9:89:8d:9c:72:c0:f2:a1:
                    f3:a9:74:69:97:10:56:6c:e2:73:65:e2:29:da:1f:
                    ac:3a:8d:6d:1c:9b:69:7d:f8:d6:ab:74:c8:5a:4b:
                    3a:8a:78:f4:ee:fe:86:27:79:99:2f:a2:c9:55:2e:
                    42:be:9f:cc:eb:d7:32:58:a3:c6:68:7e:b2:5a:c3:
                    5f:2e:33:1c:f9:f1:2f:87:66:c6:82:70:32:2c:6a:
                    39:95:bc:dd:a2:a2:27:8b:f9:c7:17:68:32:0b:c9:
                    c0:1f:97:cd:4b:5d:30:56:14:f5:4a:d2:42:dd:63:
                    0d:07:38:e6:0c:ea:76:18:ba:3c:fb:b0:15:39:1d:
                    85:76:02:80:06:b5:3b:64:2b:33:52:57:03:a5:24:
                    6a:b8:45:f8:ba:2b:fe:5c:3e:7c:e6:4f:28:24:43:
                    c0:d3:d0:d9:ce:21:27:64:24:0f:52:18:d4:ea:c2:
                    cb:c4:70:47:70:0b:52:6b:ff:22:db:ed:23:5a:ed:
                    61:42:4d:c6:91:d5:f0:10:3e:d5:2f:92:10:8d:2c:
                    f2:bd:04:3a:61:44:1a:b2:c8:40:bd:2b:e4:1e:86:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8F:BD:26:CE:A8:DB:B3:50:25:4C:03:6D:3D:38:8B:AB:6B:57:36
            X509v3 Authority Key Identifier:
                keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:32:2c:d9:a8:50:f6:20:d1:9c:d8:16:a4:54:bb:de:17:01:
         da:8d:7e:78:ff:1d:a2:be:d4:35:db:e9:f5:17:21:8e:ed:3b:
         7f:10:f9:e7:61:3c:37:e6:66:92:37:42:2f:28:e1:74:80:24:
         78:e4:1c:db:7f:3a:bc:a1:78:3f:00:2b:3f:d2:a6:12:f6:a6:
         c4:c2:1c:4c:ed:8b:a4:b6:a7:49:c0:29:c1:29:ad:67:74:f4:
         7c:b0:b5:e1:42:4b:cd:84:19:1b:54:f3:2a:e7:c1:25:a4:aa:
         56:26:88:cc:ae:0d:37:5f:8b:7f:69:a6:37:7e:4e:60:e1:af:
         e7:2e:dc:14:4b:b1:be:46:c0:cb:4d:a9:4b:7b:88:6c:52:73:
         3f:d9:2d:8b:8e:11:6b:ab:fc:5d:3e:a3:df:37:99:47:4c:51:
         a3:b8:e7:22:7f:52:28:02:3a:48:32:a6:74:15:61:4e:33:05:
         2d:75:06:93:dd:6d:fe:24:bc:6b:22:4b:66:99:d3:a3:9d:06:
         2b:77:af:d9:bf:25:3f:c3:c6:a5:35:78:65:e5:3a:c6:3e:bb:
         b3:5e:b9:00:8a:b8:b2:85:d7:16:16:ee:4c:a1:2d:57:b6:72:
         6b:dd:8c:26:6a:08:32:67:ca:8d:55:fe:67:e4:00:a4:b9:0f:
         58:d1:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:25 2026 by rpki-client