Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File:                     1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier:          jnSP1u0iJr6Dk9XhsXcPeGUi1wgkDupFkbeZuKS2/U0=
Subject key identifier:   4E:AD:15:9E:81:08:C7:FC:75:CA:78:75:DD:82:73:BF:E2:3D:F0:06
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer:       /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial:       019E1DFE7279B20E2AE945CEAFEC957FEC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number:          0A30
Signing time:             Tue 12 May 2026 21:01:15 +0000
Manifest this update:     Tue 12 May 2026 21:01:15 +0000
Manifest next update:     Wed 13 May 2026 21:01:15 +0000
Files and hashes:         1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: tKehzM9k2m74AbiW/uoUj19IFYJHIQBe3v5+4GBEkVY=)
                          2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
                          3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
                          4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:72:79:b2:0e:2a:e9:45:ce:af:ec:95:7f:ec:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
        Validity
            Not Before: May 12 21:01:15 2026 GMT
            Not After : May 13 21:01:15 2026 GMT
        Subject: CN=4ead159e8108c7fc75ca7875dd8273bfe23df006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:63:10:68:b1:92:07:75:77:14:5a:ee:59:
                    c0:cb:6a:81:f5:59:d2:96:65:4b:7c:85:b2:d6:81:
                    30:59:b0:c6:f0:75:54:3d:46:9d:5a:57:29:44:59:
                    26:a9:07:4a:5f:b5:3c:02:14:31:9d:ca:17:a5:54:
                    ec:b2:40:27:f3:5b:6b:6a:31:dc:e7:02:c8:d4:ce:
                    d7:f7:4d:3a:a7:24:fa:e3:e4:1c:c7:05:80:1b:5f:
                    0c:b2:cf:72:50:b1:cd:9e:04:4d:6f:0c:4a:32:63:
                    20:68:09:2b:87:be:c2:7a:b9:27:a5:46:bf:17:a2:
                    2b:92:9c:4c:bb:2a:1f:46:ef:b2:6e:71:f1:10:6d:
                    25:60:53:9e:a9:1c:17:f3:41:bb:21:ae:25:21:d9:
                    6d:3a:26:46:bf:9e:95:67:a2:32:65:54:ba:cd:43:
                    df:d5:ea:7c:93:0a:de:bb:ac:61:b9:82:ed:7b:a1:
                    fd:98:11:14:10:a4:89:3d:a4:48:5a:af:29:4b:78:
                    3a:16:f8:41:af:89:44:d2:e7:bc:00:7c:36:34:77:
                    67:2b:7e:4b:e1:9e:d5:bc:9c:79:48:47:7e:be:23:
                    18:83:07:1c:f1:ec:99:bf:60:51:fd:1c:f6:38:06:
                    25:56:14:70:14:27:02:e0:d1:bb:99:b1:89:fe:ca:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AD:15:9E:81:08:C7:FC:75:CA:78:75:DD:82:73:BF:E2:3D:F0:06
            X509v3 Authority Key Identifier:
                keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:4c:52:91:02:be:09:31:68:f5:0e:85:5a:b0:0b:be:84:
         c4:af:6a:df:92:58:43:2a:94:9a:81:33:6e:08:99:90:b7:6a:
         c7:63:51:cf:7e:48:50:52:d4:51:da:6c:e6:fb:56:85:bd:3c:
         e7:4a:1d:c5:c1:2a:97:ec:eb:9a:37:3d:5f:72:43:53:e4:8a:
         05:7f:ae:f1:58:a9:dd:c8:ee:f0:df:91:21:5a:fe:03:38:4c:
         24:22:c1:63:1f:95:91:28:fc:f2:34:70:ab:ec:cc:78:97:7b:
         9d:cf:f0:79:b6:70:46:f1:39:47:f1:c6:40:3c:11:e6:41:c0:
         a7:7c:7a:f5:da:e8:24:39:2b:05:a8:2f:ea:58:08:c0:ab:c9:
         b1:47:b1:a8:85:52:d2:95:d6:3c:4c:00:02:e1:65:b7:28:af:
         e8:34:6d:9d:d5:e5:30:dc:6e:cd:96:01:8d:f9:cf:39:57:44:
         a9:3a:47:2a:50:51:a9:1d:10:2d:1b:71:7e:ff:9a:61:40:58:
         7a:c6:4f:90:96:ae:5e:35:b7:48:b9:64:35:b9:1c:25:ff:b3:
         5d:61:38:48:79:79:b2:f2:63:42:78:35:46:88:45:f7:43:fd:
         b0:0d:af:6c:f1:ad:69:64:38:66:d4:da:26:bf:d7:98:c8:eb:
         21:00:bc:37
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4d/nJ5sg4q6UXOr+yVf+wOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWIyNDc4ZGZlMGYzM2EyNzhiMTNmNDJkZDMxOTYwMWQ2
Mzc4YTgwHhcNMjYwNTEyMjEwMTE1WhcNMjYwNTEzMjEwMTE1WjAzMTEwLwYDVQQD
Eyg0ZWFkMTU5ZTgxMDhjN2ZjNzVjYTc4NzVkZDgyNzNiZmUyM2RmMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA5jEGixkgd1dxRa7lnAy2qB9VnS
lmVLfIWy1oEwWbDG8HVUPUadWlcpRFkmqQdKX7U8AhQxncoXpVTsskAn81trajHc
5wLI1M7X9006pyT64+QcxwWAG18Mss9yULHNngRNbwxKMmMgaAkrh77CerknpUa/
F6IrkpxMuyofRu+ybnHxEG0lYFOeqRwX80G7Ia4lIdltOiZGv56VZ6IyZVS6zUPf
1ep8kwreu6xhuYLte6H9mBEUEKSJPaRIWq8pS3g6FvhBr4lE0ue8AHw2NHdnK35L
4Z7VvJx5SEd+viMYgwcc8eyZv2BR/Rz2OAYlVhRwFCcC4NG7mbGJ/spHfwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE6tFZ6BCMf8dcp4dd2Cc7/iPfAGMB8GA1UdIwQY
MBaAFPobJHjf4PM6J4sT9C3TGWAdY3ioMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oc2tlTl9nOHpvbml4UDBMZE1aWUIxamVLZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgy
LTJhMWNjZTdkMmM2NS8xLzEtaHNrZU5fZzh6b25peFAwTGRNWllCMWplS2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FmLzA4YTljOC00YmUzLTQ2ODItYWY4Mi0yYTFjY2U3ZDJj
NjUvMS8xLWhza2VOX2c4em9uaXhQMExkTVpZQjFqZUtnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIxM
UpECvgkxaPUOhVqwC76ExK9q35JYQyqUmoEzbgiZkLdqx2NRz35IUFLUUdps5vtW
hb0850odxcEql+zrmjc9X3JDU+SKBX+u8Vip3cju8N+RIVr+AzhMJCLBYx+VkSj8
8jRwq+zMeJd7nc/webZwRvE5R/HGQDwR5kHAp3x69droJDkrBagv6lgIwKvJsUex
qIVS0pXWPEwAAuFltyiv6DRtndXlMNxuzZYBjfnPOVdEqTpHKlBRqR0QLRtxfv+a
YUBYesZPkJauXjW3SLlkNbkcJf+zXWE4SHl5svJjQng1RohF90P9sA2vbPGtaWQ4
ZtTaJr/XmMjrIQC8Nw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:52:48 2026 by rpki-client