Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier:          Zfb9tl2Y5pcH16ENhIMSw8XbEFjxEEgkQIomWjUcSDk=
Subject key identifier:   0E:52:C4:4F:DA:BE:AF:B8:99:CD:1C:5C:1C:66:9B:10:3E:6D:BC:15
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer:       /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial:       019D27A93580ED87170F7C65C4219E1F6736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 01:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:33 +0000
Files and hashes:         1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: EwB2vCo8Ja66OXmQMB1n3nS3ji7MR8lu7PLuzZWtL6g=)
                          2: jeVYoAlmG_sEvFtGiKgaPSf17pw.roa (hash: 1XW/CIVJ1Xt4kEijZkBhaCtanmPdLXj+hDRhskw3N+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:35:80:ed:87:17:0f:7c:65:c4:21:9e:1f:67:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Validity
            Not Before: Mar 26 01:01:33 2026 GMT
            Not After : Mar 27 01:01:33 2026 GMT
        Subject: CN=0e52c44fdabeafb899cd1c5c1c669b103e6dbc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:55:d8:84:50:1f:d7:5c:5d:bb:cb:a1:9a:
                    24:35:6c:de:6f:6a:2f:dc:50:ed:18:49:52:0d:be:
                    2d:45:6d:8e:53:2e:30:ee:31:59:11:93:b6:c9:51:
                    6a:72:34:85:da:83:6f:8e:c2:d2:4d:62:e2:80:2f:
                    ba:d0:a5:3b:2f:ed:91:92:36:e8:50:e9:91:0c:3a:
                    91:38:29:e4:16:81:b8:18:bd:0e:b4:60:02:25:fb:
                    e1:51:13:3c:bf:bf:24:3f:f7:07:80:23:03:7e:7c:
                    2b:84:d6:bf:8e:33:21:95:c1:f9:11:0b:c6:3f:ac:
                    8f:4a:59:a7:cf:6c:20:40:b5:35:f2:91:51:96:ea:
                    02:7d:dd:13:b2:ec:07:03:4b:7b:e8:c9:85:6c:ef:
                    8a:89:aa:fd:1b:f3:c9:73:55:1a:78:5b:7e:8d:db:
                    3a:26:82:72:cb:e4:b4:af:07:a5:ae:e0:2a:21:cc:
                    45:f7:6c:f7:36:10:11:14:71:7d:55:01:51:9a:77:
                    e9:79:0a:66:53:ff:0a:74:d0:9d:c8:96:32:46:24:
                    f8:80:13:3f:46:4a:2a:59:ca:cd:49:1d:fe:4e:8e:
                    17:21:58:a4:e2:12:d2:c3:26:dc:e0:c1:48:e5:f1:
                    3f:6e:d1:54:04:c3:83:62:89:78:1a:c6:f9:b2:80:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:52:C4:4F:DA:BE:AF:B8:99:CD:1C:5C:1C:66:9B:10:3E:6D:BC:15
            X509v3 Authority Key Identifier:
                keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:40:1e:06:5c:92:8f:96:94:a9:8c:ac:1d:00:67:07:9e:a9:
         72:24:fb:15:76:9f:d3:e4:d4:e2:6b:88:6e:25:90:ce:81:68:
         b3:d8:7c:95:86:6b:19:5a:c3:42:b0:0a:d5:06:82:45:0a:3a:
         32:82:ab:d1:3b:e9:a2:25:92:e9:32:78:f2:4f:b0:aa:16:29:
         5b:b3:df:b4:5d:10:02:84:f2:55:5d:31:b7:bb:67:6c:b1:70:
         d6:11:f3:b9:36:2b:c0:2c:c7:32:97:ec:3b:d9:d9:33:51:65:
         bb:5e:82:02:8e:b4:ca:f1:95:10:6a:7a:5a:78:01:4a:84:39:
         fa:5d:f4:f3:7c:56:fb:18:64:e2:21:54:75:57:2e:f2:99:f5:
         b5:39:30:59:d4:d2:21:ed:c4:4e:13:85:ea:47:66:9f:84:67:
         87:b3:8a:f1:c1:0b:c8:f8:c8:6b:a0:c3:61:96:6c:6f:17:30:
         84:95:36:ac:11:b4:a0:62:9e:9c:00:27:1f:99:93:6d:ae:6c:
         b6:8d:f1:ea:d3:b8:e7:06:2c:c5:1e:99:76:97:95:09:74:79:
         1d:27:5d:0b:4b:9f:53:96:ab:59:6b:17:06:ed:a5:79:90:9c:
         ae:0b:a8:86:cc:eb:ab:e3:6c:1e:7b:07:45:13:42:f8:84:02:
         f3:dc:13:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqTWA7YcXD3xlxCGeH2c2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDZhZjE4ZjcwNzhhYWMwMGMyZmNkMmNhNjdmOTMyODAy
MTdlMTUwHhcNMjYwMzI2MDEwMTMzWhcNMjYwMzI3MDEwMTMzWjAzMTEwLwYDVQQD
EygwZTUyYzQ0ZmRhYmVhZmI4OTljZDFjNWMxYzY2OWIxMDNlNmRiYzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/VV2IRQH9dcXbvLoZokNWzeb2ov
3FDtGElSDb4tRW2OUy4w7jFZEZO2yVFqcjSF2oNvjsLSTWLigC+60KU7L+2Rkjbo
UOmRDDqROCnkFoG4GL0OtGACJfvhURM8v78kP/cHgCMDfnwrhNa/jjMhlcH5EQvG
P6yPSlmnz2wgQLU18pFRluoCfd0TsuwHA0t76MmFbO+Kiar9G/PJc1UaeFt+jds6
JoJyy+S0rwelruAqIcxF92z3NhARFHF9VQFRmnfpeQpmU/8KdNCdyJYyRiT4gBM/
RkoqWcrNSR3+To4XIVik4hLSwybc4MFI5fE/btFUBMODYol4Gsb5soBccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5SxE/avq+4mc0cXBxmmxA+bbwVMB8GA1UdIwQY
MBaAFIVGrxj3B4qsAML80spn+TKAIX4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUt
NmJlYWVlNWI1OGEzLzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUtNmJlYWVlNWI1OGEz
LzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0AeBlyS
j5aUqYysHQBnB56pciT7FXaf0+TU4muIbiWQzoFos9h8lYZrGVrDQrAK1QaCRQo6
MoKr0TvpoiWS6TJ48k+wqhYpW7PftF0QAoTyVV0xt7tnbLFw1hHzuTYrwCzHMpfs
O9nZM1Flu16CAo60yvGVEGp6WngBSoQ5+l3083xW+xhk4iFUdVcu8pn1tTkwWdTS
Ie3EThOF6kdmn4Rnh7OK8cELyPjIa6DDYZZsbxcwhJU2rBG0oGKenAAnH5mTba5s
to3x6tO45wYsxR6ZdpeVCXR5HSddC0ufU5arWWsXBu2leZCcrguohszrq+NsHnsH
RRNC+IQC89wTZw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:45 2026 by rpki-client