Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File:                     ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier:          F5BQrW99BVNR0+erTVrKvtaAXs51K2XqCobGtu7LNVI=
Subject key identifier:   15:B1:FF:E7:73:02:5D:AD:B1:08:0A:DE:FD:69:50:69:E8:8F:B9:A4
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer:       /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial:       019E1EDA6DF15378C2928FBE8C4AAAB3E752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number:          1614
Signing time:             Wed 13 May 2026 01:01:31 +0000
Manifest this update:     Wed 13 May 2026 01:01:31 +0000
Manifest next update:     Thu 14 May 2026 01:01:31 +0000
Files and hashes:         1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: /jQfLrFce3N9NbWBLtNwyuwL6c8H4TVSxoPvRqAR4ac=)
                          2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:6d:f1:53:78:c2:92:8f:be:8c:4a:aa:b3:e7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
        Validity
            Not Before: May 13 01:01:31 2026 GMT
            Not After : May 14 01:01:31 2026 GMT
        Subject: CN=15b1ffe773025dadb1080adefd695069e88fb9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:38:c4:90:bf:a3:d3:67:5d:36:77:99:bb:
                    ff:fa:1b:df:5c:11:d3:96:3b:1b:de:9c:10:44:b8:
                    c6:e0:da:a6:d4:27:e3:0c:4f:3d:e0:a4:65:d6:b6:
                    45:d9:64:a2:1b:ad:1f:1e:3a:60:7b:b8:26:3d:87:
                    5b:8c:cc:2e:22:79:5c:5f:04:34:82:b3:f3:8c:7f:
                    99:17:db:a3:7b:33:9d:88:96:87:bd:aa:2f:74:3f:
                    3d:38:5b:e1:5b:68:f5:d0:b9:fc:b3:ec:28:f0:02:
                    9a:22:d8:49:92:b0:f4:10:f7:29:02:a9:d0:60:b6:
                    e2:c8:82:ec:ef:b4:39:34:88:33:fd:53:03:28:a1:
                    69:7d:ed:47:01:8c:b4:61:fd:44:2e:6f:46:ff:d0:
                    f5:a7:66:eb:0d:27:3a:31:ce:e4:02:0c:67:33:85:
                    d0:ea:fd:b5:c1:6b:0c:de:bc:8a:56:ae:58:83:23:
                    22:13:dd:c3:e7:4e:29:47:a7:00:46:59:52:26:99:
                    9f:96:25:ed:61:71:36:06:76:b1:93:67:51:fc:9d:
                    87:e7:75:a5:d9:c9:a1:d9:2e:89:88:ba:f1:c5:b7:
                    39:61:d6:58:55:c2:f0:c5:99:0c:71:d1:4c:39:df:
                    b4:f6:b3:02:fb:c1:e1:6b:ab:e9:1d:5c:13:bb:58:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:FF:E7:73:02:5D:AD:B1:08:0A:DE:FD:69:50:69:E8:8F:B9:A4
            X509v3 Authority Key Identifier:
                keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e6:8b:51:bd:06:61:2d:74:22:c2:22:35:99:df:f8:be:c0:
         d1:07:2c:f1:ab:a8:db:f0:77:7a:a0:0e:5a:98:63:a8:76:43:
         f9:0f:46:ed:b8:41:d8:da:b0:11:bb:3e:d3:cf:aa:50:eb:b0:
         2a:ee:39:dc:94:fe:97:8f:60:ce:84:f2:11:28:b2:a9:f9:38:
         15:8a:d9:76:76:4c:ea:7e:15:3c:72:4d:ab:a6:a5:86:d9:db:
         12:bf:91:d3:30:3c:77:25:3c:42:63:44:f6:64:a2:38:3c:d0:
         37:10:9b:79:a8:90:c6:26:7f:7c:ec:42:f6:da:89:3a:7a:d4:
         f1:87:36:f7:40:9b:b8:bd:80:ab:27:39:b1:f7:9d:10:59:59:
         50:82:8d:ce:ee:51:f0:ed:b2:14:13:0b:d3:22:bf:75:95:dd:
         2b:fd:a1:fa:c9:05:27:02:3c:58:0a:86:bf:63:28:e7:f6:6b:
         4b:ae:e3:3b:50:dd:2f:71:30:02:70:d4:31:33:9e:03:e7:7d:
         27:26:e6:ba:68:0e:68:b4:a0:5b:82:ae:a4:d0:e2:f9:41:93:
         16:42:75:99:9e:c1:a6:9c:a9:cd:ac:49:a6:46:c2:79:d5:aa:
         12:68:0d:c4:4a:56:09:67:13:35:f5:a0:a8:06:35:73:f2:97:
         e9:25:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:53 2026 by rpki-client