Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File:                     HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier:          ijjIDPu033ByPQK23lWTOak2kG39nJWjw8OYPJC/GQM=
Subject key identifier:   5B:C7:E8:99:ED:52:5F:1B:52:A9:54:45:D2:BE:DB:15:0D:1C:62:09
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer:       /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial:       01A1DD94EFFDB7223E5B3D1D66C5C4716F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number:          03CB
Signing time:             Sun 15 Nov 2026 05:01:27 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:27 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:27 +0000
Files and hashes:         1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: YTTBCTgfIScUmjsKcM8lHSAzv9ngbanOEmdgsYnGAwM=)
                          2: X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa (hash: aZEncQf/BAdEF1bttJTpzCCc9CG56JQeD1jy67NOedw=)
                          3: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
                          4: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:ef:fd:b7:22:3e:5b:3d:1d:66:c5:c4:71:6f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
        Validity
            Not Before: Nov 15 05:01:27 2026 GMT
            Not After : Nov 16 05:01:27 2026 GMT
        Subject: CN=5bc7e899ed525f1b52a95445d2bedb150d1c6209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:60:af:0f:2f:52:34:2b:ee:b3:7f:c8:ae:
                    a5:eb:48:f1:cf:95:aa:fd:83:b9:a9:0f:5c:5c:d1:
                    b6:6d:07:b1:db:53:a6:00:e9:d0:d9:3f:13:b9:fd:
                    09:6b:7f:f7:9d:2c:11:69:5b:e1:aa:c6:ae:68:d7:
                    20:f7:cb:7c:e1:44:00:73:c8:46:8e:e0:8c:b6:e7:
                    b9:86:ca:43:95:b3:6b:a8:f7:1b:ac:73:90:69:51:
                    70:81:66:75:b6:81:1e:fb:fa:c6:d8:39:58:97:ba:
                    f3:ff:da:e0:91:e3:99:cc:01:78:34:4f:a4:0a:bb:
                    07:e8:bb:1d:76:8f:50:34:42:58:c3:28:0d:3a:bb:
                    4a:6d:cf:7a:f2:7a:2a:48:f8:cf:b6:b9:eb:df:fd:
                    3a:58:d2:12:2b:1e:c1:e4:2d:fd:a6:f4:b8:a5:60:
                    c8:fe:b6:c3:c6:bb:c4:0b:56:3c:83:44:65:8f:a6:
                    7a:ba:11:29:62:66:3b:f1:18:b4:bc:cb:25:bb:d9:
                    05:f5:36:17:95:3d:86:af:4e:1c:da:d6:4b:10:dd:
                    ae:94:d1:c8:42:bb:e6:b7:1c:ce:05:f2:a1:19:2d:
                    40:03:7a:0f:ed:fe:fe:e7:4b:74:b1:87:52:18:c4:
                    7a:eb:eb:ef:45:22:aa:9f:5e:cb:38:27:96:05:16:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:E8:99:ED:52:5F:1B:52:A9:54:45:D2:BE:DB:15:0D:1C:62:09
            X509v3 Authority Key Identifier:
                keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:16:54:76:dd:3f:22:54:5e:02:ec:5d:bc:8f:11:8a:b9:bd:
         f3:10:3a:a0:40:68:73:9b:5f:c8:4c:d0:6d:6e:c8:d7:5f:9b:
         90:d3:3c:63:27:ba:77:eb:83:40:19:5c:48:d8:d7:bf:0b:27:
         b2:e0:5f:70:e1:33:f7:ce:1e:68:60:1b:42:0e:45:39:7c:3d:
         47:93:6f:82:24:01:98:3d:c4:5e:dd:f0:f0:b4:31:7d:00:dc:
         e5:9a:91:0c:00:ab:c8:30:b1:6a:84:94:02:55:cc:51:56:38:
         e0:01:4d:3a:4d:92:ec:6c:e2:82:2b:4f:81:8c:45:25:de:82:
         45:da:80:1d:ff:e0:e1:68:91:b0:2a:4c:39:78:e2:4b:97:12:
         c1:b4:d8:bc:c0:65:9a:17:cb:6d:c2:dd:84:34:42:f5:fe:47:
         de:04:b1:f8:6c:c6:b4:ff:66:6b:ae:7c:8a:ec:52:0b:df:c8:
         29:60:66:52:82:0d:b1:8b:5b:21:fa:03:44:60:de:66:cc:62:
         5f:8a:fe:5d:20:c6:b4:52:f9:5b:10:9d:79:b6:af:b0:1d:f0:
         32:66:c1:ad:9a:02:04:6a:09:49:39:30:c3:2c:37:bc:2f:40:
         02:82:b3:de:4f:40:c5:c0:c5:18:09:dd:08:6c:2e:e2:97:0b:
         e8:be:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:17:18 2026 by rpki-client