Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File:                     HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier:          wwdYUPNSx2wBSUCu7jjofM2xz5e1Ej7Vx1rtAKdeXW8=
Subject key identifier:   A1:F4:3A:BD:C1:AE:3C:98:47:45:B6:3F:3F:9C:F2:96:63:C4:56:2E
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer:       /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial:       019E2091C4672075303C22777E29A0DB8D3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number:          103E
Signing time:             Wed 13 May 2026 09:01:24 +0000
Manifest this update:     Wed 13 May 2026 09:01:24 +0000
Manifest next update:     Thu 14 May 2026 09:01:24 +0000
Files and hashes:         1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: XlIN5+m6FDb2+KJ/vZHd41diDbioOwIe/JhyLczXhX8=)
                          2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:c4:67:20:75:30:3c:22:77:7e:29:a0:db:8d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
        Validity
            Not Before: May 13 09:01:24 2026 GMT
            Not After : May 14 09:01:24 2026 GMT
        Subject: CN=a1f43abdc1ae3c984745b63f3f9cf29663c4562e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:36:52:14:cb:ed:31:d1:ac:93:19:53:1a:ed:
                    97:8c:7b:57:ed:5d:44:5b:40:cf:7a:ad:f5:f7:dd:
                    b9:20:c4:97:9e:7e:e4:01:d1:6a:bb:f0:f6:8c:74:
                    19:36:b2:13:a3:77:10:b5:e9:8e:8c:d3:28:6d:28:
                    d8:41:83:63:86:df:f6:e2:b8:94:4b:82:6c:c7:37:
                    e6:51:5a:c9:11:63:9f:81:fe:e2:cf:2d:a7:94:eb:
                    22:24:2f:58:94:cf:14:be:2f:9e:f3:12:3e:d3:05:
                    d1:10:67:5c:f7:cf:0f:a6:0c:66:af:90:4c:9a:90:
                    82:ef:aa:9f:5f:be:60:52:aa:f5:03:cc:6b:70:f5:
                    e0:3b:18:29:f4:e2:03:3a:79:60:07:59:89:02:3e:
                    98:fe:56:5c:e9:ac:81:de:db:93:96:bf:01:be:c8:
                    fd:fd:74:e4:2f:c1:d2:af:4d:a9:4b:41:2f:e8:3a:
                    f7:ac:e7:0c:88:d3:e5:80:5b:bd:23:7b:cc:5d:e6:
                    73:77:d5:77:34:e0:89:c3:12:41:dd:8c:1f:9b:78:
                    8f:1a:f4:50:10:ae:86:e1:8e:e3:e0:42:ad:3b:20:
                    d5:4d:af:5d:c3:52:8a:f4:7f:e8:26:4f:96:f8:88:
                    17:7c:99:d5:0a:aa:06:5e:8d:89:2f:15:bc:9c:12:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F4:3A:BD:C1:AE:3C:98:47:45:B6:3F:3F:9C:F2:96:63:C4:56:2E
            X509v3 Authority Key Identifier:
                keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6e:ce:af:00:98:49:d7:91:01:68:b5:6f:cb:cc:78:38:82:
         20:3f:fe:82:a9:ef:7d:e5:8c:14:c3:84:97:92:20:82:8f:a5:
         22:47:ca:4c:ad:53:37:a4:9c:0f:55:10:60:5f:72:e9:cf:53:
         5f:a6:75:be:07:39:f0:f1:26:5c:55:73:6d:13:1f:a5:e4:25:
         ba:28:ec:a8:e2:b8:b3:66:de:4a:51:05:39:88:f1:ea:e7:11:
         4b:54:2a:3f:f1:fa:11:9e:c6:19:b2:b0:b5:6a:75:e3:65:3f:
         79:75:21:2c:1a:1e:2e:5e:b5:b0:c0:ef:e1:3e:53:99:8c:74:
         32:b4:35:db:c5:9c:ce:0c:05:7e:c9:46:d3:96:6a:b8:66:d1:
         ec:77:1d:8c:42:7a:5f:b5:74:65:ac:fd:92:9f:c1:68:74:77:
         c9:c7:f3:e6:57:da:95:6d:de:0b:f8:65:8f:fc:23:d0:52:23:
         e8:d8:48:78:6f:08:8f:4e:6f:ee:e5:ae:be:07:b6:c5:b8:53:
         6f:1c:e6:56:11:81:6c:56:0d:f4:b9:24:35:42:df:ad:6c:8b:
         ae:2a:5d:63:26:2a:92:72:f4:b0:e6:fc:d8:9f:36:0c:d9:dd:
         79:f9:50:f8:d3:ad:3e:d1:71:07:56:65:bd:6c:cc:95:ec:4e:
         eb:d8:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:43 2026 by rpki-client