Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
File:                     HoGZCoqMzX6KT0i7do810mmbeLI.mft (raw, json)
Hash identifier:          caSI9K5cVZLGVOSRcnCOMTqEAc/hb5wq/F9ISmtm+lE=
Subject key identifier:   36:E8:DA:7C:BC:59:4A:5B:B7:9E:34:39:AA:CB:BC:DE:7C:97:44:F1
Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
Certificate issuer:       /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Certificate serial:       019D27720D17FF56538D4F26F9742FBC8463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
Manifest number:          0F19
Signing time:             Thu 26 Mar 2026 00:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:18 +0000
Files and hashes:         1: Aj338RhXkgr6UJwL54dYD6EL_uA.roa (hash: L6u8GmvhlsMn8ZhoCBvozLBVpXfmfa9tx+tUqGdETYw=)
                          2: HoGZCoqMzX6KT0i7do810mmbeLI.crl (hash: I7rLBUc0R6oc/egKq9IxxVSkAakrklhfMsBzznjCP1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:0d:17:ff:56:53:8d:4f:26:f9:74:2f:bc:84:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
        Validity
            Not Before: Mar 26 00:01:18 2026 GMT
            Not After : Mar 27 00:01:18 2026 GMT
        Subject: CN=36e8da7cbc594a5bb79e3439aacbbcde7c9744f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:98:d4:a4:11:93:81:50:d1:3a:5a:f9:37:
                    d0:9f:88:38:35:45:eb:aa:b7:3a:3a:fb:7c:70:ec:
                    0d:a7:f5:35:65:2a:1a:45:bb:ad:22:28:35:f3:e3:
                    1e:70:04:c8:56:0b:d1:f2:95:b9:cc:c9:d9:77:30:
                    4a:01:50:39:53:5d:27:10:2f:54:3d:ee:05:48:01:
                    d9:ba:91:0c:c0:94:04:7f:ec:d2:14:b0:af:93:41:
                    33:e6:81:4a:48:fa:8e:aa:fb:e9:7e:8d:dd:28:ab:
                    4b:2f:6c:54:f1:aa:fd:5b:22:44:02:44:d0:0b:94:
                    fd:52:ee:09:1c:0e:a8:71:10:c4:f6:21:32:68:25:
                    46:60:28:36:e3:a5:d5:12:19:69:d5:96:b9:e3:aa:
                    d1:74:21:b9:75:9a:25:e7:58:15:47:6d:d8:c4:f8:
                    8c:2c:fa:8e:d3:c3:ee:b5:bf:69:b0:3e:84:49:a4:
                    8a:7c:08:42:ee:d9:2a:1a:e6:4e:9e:46:9d:32:cc:
                    8c:bf:be:f8:ea:2b:7d:f4:f3:80:b8:6e:d5:45:d4:
                    61:bd:31:67:3d:72:30:69:2a:42:b7:8a:99:17:06:
                    95:da:68:27:3b:b0:ba:06:01:22:db:9d:0a:8a:24:
                    5c:61:3b:ee:b7:70:14:36:b3:ce:ac:2c:c0:12:b2:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E8:DA:7C:BC:59:4A:5B:B7:9E:34:39:AA:CB:BC:DE:7C:97:44:F1
            X509v3 Authority Key Identifier:
                keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:df:88:63:74:1e:bf:02:0a:aa:46:46:cd:5e:75:a6:b3:12:
         0a:ff:a4:78:96:d4:35:15:fa:72:bd:52:23:84:ff:e2:e9:d7:
         3c:36:ca:08:54:10:00:98:96:07:b3:72:46:69:79:34:74:18:
         3c:41:78:e6:38:14:b8:14:35:e5:fd:68:50:d4:c1:3e:96:89:
         cd:11:80:fc:92:2a:4a:4e:66:f9:cb:bd:8f:7a:02:32:f0:33:
         a4:e8:b3:62:0e:a0:d0:37:46:73:7a:ce:7d:66:9a:4d:e1:ae:
         cb:84:57:d2:65:bd:3f:6a:07:dc:5e:99:1d:3e:68:c1:4e:c1:
         de:b6:53:1c:99:82:0b:13:6b:45:81:75:a0:b0:f5:2a:12:ca:
         d3:65:b3:7d:3f:de:fb:db:5a:62:df:f1:f3:cd:3b:52:c6:a0:
         1c:14:0d:f3:2c:e0:0b:25:e7:76:b3:6c:7c:34:74:8e:ef:ff:
         6d:a6:b6:f0:58:88:1f:d3:f5:3f:c6:f1:04:6c:f4:ab:d8:79:
         48:01:de:a9:23:2f:66:8a:8c:d3:b6:f5:76:ea:3e:a9:72:7a:
         84:8d:25:af:1a:f6:97:78:16:a6:ba:3e:48:64:c0:f2:93:1d:
         2f:f2:b6:b6:4e:96:7e:dc:c7:40:1b:59:98:a9:b4:54:e4:8d:
         79:d0:03:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:39 2026 by rpki-client