Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File:                     HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier:          R82rHqPWhL2sWSKFdfRDK8yK83+/ZXLUre5NqNiUmGA=
Subject key identifier:   6E:4C:EC:5D:70:B8:5B:B2:7F:C5:9B:86:BC:FE:D5:70:64:0B:74:E8
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer:       /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial:       019E1D5975AC7124ACA31465831D541E6E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number:          01D9
Signing time:             Tue 12 May 2026 18:01:02 +0000
Manifest this update:     Tue 12 May 2026 18:01:02 +0000
Manifest next update:     Wed 13 May 2026 18:01:02 +0000
Files and hashes:         1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: FQx68DVrev/AfTFvfblS0+GiYYKkPqzZ0X39wyJOObs=)
                          2: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
                          3: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
                          4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:75:ac:71:24:ac:a3:14:65:83:1d:54:1e:6e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
        Validity
            Not Before: May 12 18:01:02 2026 GMT
            Not After : May 13 18:01:02 2026 GMT
        Subject: CN=6e4cec5d70b85bb27fc59b86bcfed570640b74e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:ca:c0:67:c1:13:d1:93:77:78:7c:61:d3:
                    b1:11:d5:57:67:be:bf:31:31:2e:7e:04:13:79:82:
                    96:e1:6f:d2:e9:89:1d:4b:13:5a:59:2d:53:0a:65:
                    2d:38:df:50:47:05:21:11:e4:78:a3:24:f3:75:73:
                    1f:09:d1:d8:e0:d4:d9:98:4b:3a:ad:33:e9:0b:57:
                    60:98:5d:20:1d:f4:78:ad:b6:a2:fa:23:da:d1:c9:
                    e6:61:41:21:bd:0e:c2:63:fb:d2:c7:77:fd:67:74:
                    f8:e1:ea:6e:06:a9:e6:4a:db:c0:30:c2:0f:25:ea:
                    20:2b:7e:a5:77:3e:65:99:66:60:f7:f0:3f:c6:d6:
                    d4:41:f9:be:6e:8a:9b:ee:c3:8c:33:57:6a:d8:bd:
                    f3:e9:8c:ca:43:42:09:dd:04:49:36:f9:1c:6c:ae:
                    96:20:12:cf:53:37:c1:2d:3e:9a:1b:84:73:56:5e:
                    33:8f:0f:39:2f:ed:db:4e:d7:97:66:7a:7e:46:dd:
                    4f:25:4b:ae:06:1e:2d:52:fa:ee:e0:c4:49:b7:58:
                    6e:13:69:57:8c:c2:46:32:ec:10:d1:e4:88:c4:f4:
                    36:9e:cc:d6:ba:79:ca:58:3e:b0:76:03:3a:17:85:
                    98:94:87:d3:fc:9d:13:8f:af:03:6d:5a:52:6d:26:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4C:EC:5D:70:B8:5B:B2:7F:C5:9B:86:BC:FE:D5:70:64:0B:74:E8
            X509v3 Authority Key Identifier:
                keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b9:dd:0d:1e:c1:78:1e:f9:a7:74:80:b1:86:b9:8e:b7:0b:
         4b:89:45:63:47:57:15:56:5d:d7:38:30:29:f7:0c:fd:92:f0:
         52:a5:8f:9b:3c:1b:ac:56:f9:72:b8:a7:6c:90:1a:37:90:cd:
         ab:e9:cf:a8:f2:88:fe:3d:cd:83:b1:f0:6a:03:d0:e7:03:fe:
         60:27:ac:f7:44:d7:7e:41:11:27:a5:2c:2b:01:f5:fb:fc:d6:
         3f:f5:32:bb:eb:53:56:a8:93:3f:a3:b5:cc:23:c6:5f:e5:19:
         d3:26:0c:2c:28:3a:8a:80:ad:28:e5:fb:2d:80:19:ad:fa:7a:
         a7:93:33:5c:c5:a8:29:de:fe:f9:a7:77:44:46:db:5d:a2:ae:
         98:41:4e:a6:65:8a:28:12:0c:7a:37:df:4e:12:48:82:c1:3b:
         6c:d4:a2:71:6d:30:e4:b3:e1:fb:41:f0:fa:1c:ad:c7:31:f7:
         e5:6c:56:85:9d:c3:04:3d:64:ba:fd:21:c2:4d:83:c3:01:6b:
         8e:06:90:8a:a0:c1:14:87:2d:ce:37:c5:96:13:a8:43:45:23:
         42:08:42:c7:62:71:87:88:f0:8f:47:fc:95:ce:3c:04:c0:87:
         2f:88:5c:5b:49:a1:81:34:2b:7f:8b:d2:fc:de:60:3e:48:1a:
         5c:60:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:50 2026 by rpki-client