Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          bGiQ97lStvILarLva8X8Tf7Opt7wt4NzuXQNvXFQxBY=
Subject key identifier:   9B:53:3C:00:AE:6F:4C:D8:62:D0:3F:90:14:94:B4:E3:12:21:18:7D
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       019D27DF5D8F60311D96637D96DE14F01621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          07BD
Signing time:             Thu 26 Mar 2026 02:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:43 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: BejhNNw2pFQjcct6Kmb8afTcRHM62Ww7qFU5NPwULVU=)
                          2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:5d:8f:60:31:1d:96:63:7d:96:de:14:f0:16:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Mar 26 02:00:43 2026 GMT
            Not After : Mar 27 02:00:43 2026 GMT
        Subject: CN=9b533c00ae6f4cd862d03f901494b4e31221187d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:6b:e1:d8:ef:35:da:6e:2f:24:89:63:45:
                    66:4f:f6:d4:65:92:1a:c6:d1:b2:e1:38:d0:97:81:
                    a9:66:15:73:2f:23:e3:27:c8:62:35:84:60:13:fe:
                    6c:44:42:dd:6d:aa:39:07:7e:06:fa:9a:f1:2e:51:
                    1a:26:86:6d:a6:26:ba:40:f4:26:ac:a4:51:27:0a:
                    d2:99:89:8c:9f:ba:85:74:3d:5a:ed:e5:c8:e8:17:
                    3a:b9:bf:4f:48:e4:d0:ce:f9:44:16:94:94:83:78:
                    6b:c0:05:ff:29:5f:ed:55:a5:9e:c8:03:e7:dd:09:
                    35:07:3a:cf:b8:02:6d:f3:1a:df:6c:f3:47:bc:38:
                    dd:9c:2e:39:0a:24:b4:af:64:8d:e6:83:b1:63:38:
                    63:7c:90:89:81:c7:be:44:d2:d9:65:26:78:de:9c:
                    56:37:a2:81:40:de:41:9a:bb:25:00:be:e0:86:93:
                    42:51:76:e8:91:0a:65:26:d8:26:2c:61:08:94:73:
                    98:d2:82:70:83:94:2b:6a:19:22:01:3b:81:7d:2a:
                    e4:7f:f1:0f:94:fc:c3:8d:b8:8e:c4:ec:b6:27:3d:
                    8b:d3:62:00:54:3c:f8:29:ac:6b:47:ad:b4:3d:09:
                    56:8d:05:6b:3a:81:2b:c8:e0:89:d6:50:75:78:d3:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:3C:00:AE:6F:4C:D8:62:D0:3F:90:14:94:B4:E3:12:21:18:7D
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ac:58:50:6c:0f:2f:4e:14:75:86:51:27:ae:b6:50:79:38:
         cc:df:d7:20:60:3b:6f:48:c4:c5:f6:a3:fd:b2:d3:d1:b7:db:
         80:c0:7b:cd:99:25:ba:71:a5:6f:91:3e:9e:cb:3c:a5:79:92:
         1f:c0:af:87:73:5b:26:9b:a6:de:98:c8:b9:0d:ae:9f:4f:76:
         aa:03:81:f9:20:41:7b:3a:71:b5:93:6c:dd:ec:ae:b9:75:e7:
         86:12:ac:94:3f:91:db:c9:98:52:ea:d2:b6:e0:d4:f7:16:d4:
         04:c3:f3:f6:1c:cb:76:be:aa:a1:ce:f7:ac:c6:f0:b1:26:c9:
         34:6b:64:f9:68:4d:2b:08:5a:1e:b4:90:3b:f6:9b:5b:b9:aa:
         bd:23:5f:3b:8b:33:77:f0:3f:12:88:f1:0d:7c:44:c6:25:13:
         dd:2d:1c:67:20:08:0b:72:c4:1f:ee:24:bd:3e:23:db:ed:cf:
         6d:77:a2:cf:be:1c:e9:c6:fe:4f:cf:de:45:d6:ed:15:56:9c:
         50:b2:c0:bf:01:ce:d7:59:eb:9d:6b:1c:bb:2b:3d:66:cd:5e:
         4e:02:d5:f6:dd:a0:3b:5d:1d:98:b6:54:20:a3:94:36:33:a3:
         af:a2:20:1c:72:c6:e3:4d:3c:80:c8:c9:72:41:39:1c:cd:ca:
         5e:ab:b2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:02 2026 by rpki-client