Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File:                     HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier:          w3Za7T3lL7t/KRIanX+Tn2GrwZ3769fChpvNdL9ON7A=
Subject key identifier:   E4:96:26:E8:9B:79:9D:91:A7:9A:C4:58:41:0C:2F:B9:C1:14:05:51
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer:       /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial:       019E20C89589DC28EF85DCF3478D6CF4BAF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number:          09EE
Signing time:             Wed 13 May 2026 10:01:16 +0000
Manifest this update:     Wed 13 May 2026 10:01:16 +0000
Manifest next update:     Thu 14 May 2026 10:01:16 +0000
Files and hashes:         1: 3W6mluySiEpKej6eN1jA5zstxy4.roa (hash: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ=)
                          2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: iD6IWAdxO3E+DvTVwHV/GbvvjhpN1R9Y8eq4XKuUaow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:95:89:dc:28:ef:85:dc:f3:47:8d:6c:f4:ba:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
        Validity
            Not Before: May 13 10:01:16 2026 GMT
            Not After : May 14 10:01:16 2026 GMT
        Subject: CN=e49626e89b799d91a79ac458410c2fb9c1140551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:8d:74:c9:41:9f:a5:7d:93:d1:8d:16:fd:
                    a3:36:10:e0:81:ea:21:3e:8a:c9:e9:7b:f5:59:fc:
                    9c:5e:bd:e1:23:8f:a3:51:52:2f:55:8a:1b:7a:66:
                    0c:15:6d:15:fa:da:f7:f1:1c:ca:ef:35:ce:9a:a6:
                    4f:f6:df:25:02:ff:cd:ba:df:e0:07:46:19:ba:c2:
                    ee:07:39:06:51:aa:da:f5:d5:34:27:83:d1:2e:2f:
                    e2:4e:66:a4:80:6b:37:a8:89:9b:04:20:16:85:af:
                    10:a5:c0:13:33:a6:a3:7d:da:bb:51:9b:75:80:0e:
                    de:1d:06:af:8b:ab:40:56:2b:04:96:54:1b:88:18:
                    3b:ea:87:73:01:1c:f1:f0:3a:43:2f:a5:23:86:eb:
                    f4:b9:74:d2:06:e5:21:40:4c:11:d6:1a:a9:cc:13:
                    b1:c4:c8:80:44:a7:d9:e0:9a:92:ff:82:db:e3:d8:
                    b1:63:48:4b:11:80:c7:61:83:57:d0:8b:f6:d0:87:
                    58:b5:0e:c8:f1:b4:cf:37:d4:77:f2:ce:97:da:e7:
                    16:66:d5:23:7b:24:54:f6:ab:b6:e9:b7:e6:c9:f0:
                    b7:18:8e:05:ba:32:60:58:21:92:d0:72:66:f3:f8:
                    05:dd:47:25:d4:b9:8d:01:25:3f:7c:60:9a:45:48:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:96:26:E8:9B:79:9D:91:A7:9A:C4:58:41:0C:2F:B9:C1:14:05:51
            X509v3 Authority Key Identifier:
                keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6b:d1:fd:b1:97:80:b8:a1:1c:69:e4:6c:99:67:57:6e:f9:
         64:6e:74:fc:be:c2:f5:98:1a:69:cb:7a:b9:24:5b:90:28:9c:
         39:f8:94:66:c7:3a:84:4a:f7:69:d7:4e:db:48:e7:7a:a3:a1:
         35:b5:43:2f:28:ee:c7:28:5b:e9:81:62:0b:41:18:15:cc:03:
         31:45:12:94:19:07:2b:b9:51:d3:e3:04:05:fd:72:23:1d:ef:
         3a:25:17:26:31:6d:f1:5e:8b:d9:ab:c1:2f:46:3b:3f:6e:69:
         07:2d:f8:93:0f:0c:3c:8d:34:73:df:82:e6:e3:d8:b4:38:73:
         7e:fa:64:0e:f9:f0:11:2a:6e:c9:50:02:53:05:01:5d:89:12:
         55:1d:ab:5b:df:7e:87:04:f6:06:b2:05:dd:45:0b:72:aa:0c:
         4b:f4:82:35:30:b9:96:e3:a8:8c:78:4b:72:1a:de:73:83:cd:
         8f:f1:ac:ec:9c:f9:d7:60:c0:f0:b1:70:7c:b1:75:bd:0a:0c:
         fd:c3:8f:f8:21:ad:a6:c5:5d:5b:c7:d8:f0:1b:10:47:cf:89:
         76:80:bf:b9:3d:12:e6:0b:43:ba:41:08:da:bb:e2:4d:90:9d:
         68:a3:9f:f0:f1:98:53:4c:4b:a0:ed:29:8d:77:88:e3:f1:a6:
         b9:ab:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:39 2026 by rpki-client