Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File:                     hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier:          EIu59tfqbHV2TOCThBZ/14j+TvVmeY3Gc6evLoQoOjc=
Subject key identifier:   6F:8D:74:11:94:8E:A9:99:73:E8:E0:27:8D:F6:E5:E5:BF:CC:5D:6E
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer:       /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial:       019E1E6C47F4BA854DC35CDED0CB21877AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 23:01:13 +0000
Manifest this update:     Tue 12 May 2026 23:01:13 +0000
Manifest next update:     Wed 13 May 2026 23:01:13 +0000
Files and hashes:         1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: AIZOWNGCBCh32hzI5Z8G9QEHkgvskAVh2QIbhlxbCGs=)
                          2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:47:f4:ba:85:4d:c3:5c:de:d0:cb:21:87:7a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
        Validity
            Not Before: May 12 23:01:13 2026 GMT
            Not After : May 13 23:01:13 2026 GMT
        Subject: CN=6f8d7411948ea99973e8e0278df6e5e5bfcc5d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:f9:2f:39:7f:c7:c4:cb:7c:53:95:f3:da:
                    38:df:25:38:61:a7:6f:45:aa:40:83:01:3f:c9:a6:
                    48:11:8d:34:20:c7:da:8b:39:b4:1d:2a:1c:3e:5d:
                    b4:8d:5f:6b:04:d5:a6:41:5a:ea:9f:6f:e3:5c:ea:
                    b0:88:7d:bd:8d:45:04:1d:b5:1e:f8:c0:47:9e:10:
                    9c:28:a5:f5:78:bb:ed:4b:e8:bd:05:9c:90:65:74:
                    25:07:5e:71:c5:79:a3:5d:78:a4:ca:db:0c:31:b8:
                    0a:4a:9b:15:a7:c5:66:b4:7a:b9:44:56:0a:24:88:
                    48:50:d1:7c:b3:6b:e2:20:25:9d:f7:a3:11:12:b3:
                    16:c6:2a:7b:fe:db:2a:60:27:68:b7:85:54:0a:e6:
                    1b:6a:d8:ef:dc:a5:f5:8b:b7:ba:9a:78:db:ce:2f:
                    a7:e8:9f:94:18:20:54:f9:47:22:6b:12:72:5c:7a:
                    86:44:69:13:0d:81:8a:09:91:70:2f:00:59:00:42:
                    00:fb:0d:b2:bc:c5:9b:4a:4f:dc:06:70:a3:02:ee:
                    33:b4:d6:5e:b0:7d:b3:07:49:3f:c3:2e:54:0f:57:
                    12:38:62:75:b2:b9:fb:fb:52:f6:be:02:78:5c:87:
                    83:37:9c:7e:e8:7a:2e:a6:26:90:49:63:ad:e6:dd:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:74:11:94:8E:A9:99:73:E8:E0:27:8D:F6:E5:E5:BF:CC:5D:6E
            X509v3 Authority Key Identifier:
                keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:11:da:8d:d3:55:b8:01:f9:84:bb:9c:40:1d:4f:4b:9f:
         72:96:95:33:44:dc:3c:5f:64:54:5f:1d:ae:61:a0:18:7e:05:
         3c:c6:ac:89:fd:d0:4c:e8:5c:92:e0:04:b1:da:2a:0f:68:a7:
         09:29:40:87:8b:20:86:fc:44:35:bc:fc:e5:08:15:84:2f:e9:
         c2:b7:3f:0c:11:de:5c:ca:a7:fb:75:0e:bf:f1:97:09:6a:a7:
         fa:fd:70:67:c8:20:35:56:d0:f3:41:9d:bf:22:cc:e8:e8:20:
         16:d7:a4:f9:19:6d:a0:04:d7:c1:a6:96:df:23:a9:1e:f4:6b:
         2a:30:98:99:97:07:8b:73:84:8e:57:dd:fc:4a:91:db:91:7e:
         d2:bc:70:e9:ab:58:13:9c:17:03:4a:f2:10:27:ed:cb:c3:c1:
         d2:6b:8d:aa:ed:ab:f4:2a:17:ad:93:77:84:62:40:15:30:6a:
         bd:73:fa:39:6f:b8:90:a6:17:90:4b:a5:e8:3d:32:44:e6:1d:
         77:45:8d:c8:88:f8:89:39:7b:d8:14:5c:01:ea:85:d7:61:ae:
         eb:88:de:81:53:1b:79:7f:7c:6e:52:a3:ae:e1:cb:0b:b2:9a:
         cc:3a:5e:4a:83:9d:57:44:8a:42:4d:69:47:ee:d8:ab:a3:73:
         f8:8a:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:18 2026 by rpki-client