Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          cFk5yK/ofudB2cqBJwx5OSPYmIqeCfwPIjtKBs9mGsI=
Subject key identifier:   2D:78:FD:7C:A5:02:FB:5A:5C:BA:69:24:50:AD:27:7C:91:F0:17:89
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       019D29CE5DD9CC3D8317BE173B4133A40904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          07BE
Signing time:             Thu 26 Mar 2026 11:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:23 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: r3459sU4LbkPIX7JkHOPSdSXCtAQ7p2Flan1QxlK714=)
                          2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:5d:d9:cc:3d:83:17:be:17:3b:41:33:a4:09:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Mar 26 11:01:23 2026 GMT
            Not After : Mar 27 11:01:23 2026 GMT
        Subject: CN=2d78fd7ca502fb5a5cba692450ad277c91f01789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:bf:03:4b:a2:6f:af:fd:a8:b8:42:01:6f:
                    bb:47:56:8e:9e:39:24:f5:ea:e9:5b:7f:c6:fd:18:
                    33:c5:b8:2d:31:49:32:4f:b6:a7:0c:75:ca:be:a1:
                    6c:c3:32:c8:b5:73:57:0b:16:ba:ad:c3:49:ae:e7:
                    7d:3f:79:5e:18:22:5f:15:7a:7e:80:1d:3a:35:de:
                    9d:c3:9d:58:af:28:00:e0:13:09:62:06:40:b6:15:
                    13:37:63:4a:22:35:c1:48:7f:9c:78:7f:0d:c1:f1:
                    66:49:c3:50:a8:f5:4d:9a:e9:99:48:d6:17:ed:da:
                    cb:af:64:82:da:06:b0:1c:56:b0:10:31:45:5e:ba:
                    24:03:be:25:64:12:61:c3:a4:ab:8e:bb:c7:ff:38:
                    c0:5a:9f:39:aa:1e:4b:c5:8b:2e:6f:c1:41:f1:e6:
                    47:c8:d5:7c:a9:7b:6b:a2:eb:a4:ef:2d:78:e9:25:
                    74:cc:c0:a9:12:98:3c:84:59:02:9f:2d:2d:06:54:
                    2a:95:88:55:3d:54:86:96:9b:88:ba:aa:57:66:b1:
                    38:96:69:cd:70:12:0d:38:7a:7d:b6:6d:a6:c2:8a:
                    b4:60:90:64:66:b1:6f:87:e6:22:c1:2e:d7:41:f9:
                    bb:1e:93:73:e9:bb:67:19:74:56:f3:9e:42:98:f3:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:78:FD:7C:A5:02:FB:5A:5C:BA:69:24:50:AD:27:7C:91:F0:17:89
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:77:36:77:41:f4:08:7c:3e:21:ca:bb:5a:6a:87:62:b2:41:
         d9:f9:2c:67:0e:08:01:54:e8:e6:7b:28:38:8f:1d:d9:aa:83:
         ef:d5:83:c7:1f:0f:bf:62:bb:ea:fc:d7:b4:23:3e:72:5c:7f:
         0d:94:e7:38:4a:21:85:06:aa:6b:20:42:ba:13:f2:d9:98:0b:
         36:17:fc:e1:8f:51:da:d1:fc:af:65:dc:c8:1e:70:68:31:c5:
         4b:1a:18:99:a8:19:f3:68:a3:94:a8:dd:fc:9c:f4:b1:35:ef:
         e7:ca:e1:ae:67:1a:13:e9:17:d4:87:46:09:f8:ae:27:ca:0a:
         57:33:82:b2:3d:57:0f:1e:4d:0b:72:db:28:c0:1f:c3:c8:c5:
         92:8a:1b:0d:e4:3f:cd:33:87:74:05:3f:10:e4:cb:60:fb:3a:
         9a:2a:0a:5d:a0:2d:28:8d:02:c8:f1:81:1b:8f:f3:ee:e6:9e:
         41:69:4d:da:f1:32:94:c5:a8:73:4b:12:be:30:5e:58:dc:2d:
         b9:10:95:7b:58:5c:2f:f0:c5:f7:55:16:10:d7:cd:82:5e:e5:
         9b:29:0d:e8:17:7c:b1:25:e4:9a:22:f0:34:25:aa:52:f6:90:
         51:d2:50:da:c5:ad:f9:59:b6:1f:43:41:20:ad:b9:0a:47:f9:
         7d:06:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:11 2026 by rpki-client