Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          VDjwgnmikEANBa9M+FPT4fIEfR2714G48L+1OX3QYa8=
Subject key identifier:   EE:90:C2:3D:FC:84:A4:D7:82:87:73:35:CC:67:49:9D:4F:EA:16:94
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       019D3375B064585D725CAB7A57048FFC0080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          02D2
Signing time:             Sat 28 Mar 2026 08:00:43 +0000
Manifest this update:     Sat 28 Mar 2026 08:00:43 +0000
Manifest next update:     Sun 29 Mar 2026 08:00:43 +0000
Files and hashes:         1: 0HI-hYUQzf4SnFU50ilapMC-N0M.roa (hash: OXBTJCBE8s4VmNGyaynb87VbRk7167Q44yiSXd1oMkw=)
                          2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: evzPQvE1MaRqFbW3MBBv3FF2SvTpAcZw19vYl9oD6DM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:75:b0:64:58:5d:72:5c:ab:7a:57:04:8f:fc:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Mar 28 08:00:43 2026 GMT
            Not After : Mar 29 08:00:43 2026 GMT
        Subject: CN=ee90c23dfc84a4d782877335cc67499d4fea1694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:e8:21:79:16:a5:86:7d:5c:47:07:b2:28:
                    78:a9:5b:90:25:5b:8c:96:d5:f1:aa:5f:98:6a:df:
                    17:c0:88:5b:cd:4a:4e:e2:8c:ff:35:d0:aa:bf:b2:
                    14:fa:3f:1e:ab:c6:72:e6:e4:9c:61:94:0b:a3:43:
                    33:23:a2:cc:c2:e2:a9:c2:91:39:be:bc:32:78:af:
                    8c:c3:c4:30:e9:70:bf:3e:34:ee:85:76:b5:9f:ee:
                    f5:15:8b:16:69:3a:94:e0:97:e4:71:7c:ce:0b:0a:
                    65:ea:16:2a:0e:36:eb:f2:e5:35:92:ca:bd:73:29:
                    92:90:9b:38:33:7f:8e:2b:25:09:b9:59:dd:66:be:
                    a0:14:f8:a2:b2:1d:43:b0:79:67:2f:97:49:b6:3a:
                    90:b7:b7:7d:2a:cc:b2:86:fc:84:b9:15:38:d5:b3:
                    e3:13:97:6f:e4:65:9d:bb:bb:df:cb:80:f0:c6:19:
                    c5:5c:97:71:8b:09:45:94:df:57:e3:24:6a:67:42:
                    18:83:b3:5b:cd:96:c4:06:04:95:d7:23:ac:c3:05:
                    06:70:8a:f8:d6:99:41:5d:6f:25:ae:6e:fb:a9:a9:
                    8c:84:68:41:fa:50:be:8f:1b:bc:fd:a1:0b:62:ba:
                    4d:8e:29:b3:78:19:34:27:a1:2f:0b:4e:8e:f8:8b:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:90:C2:3D:FC:84:A4:D7:82:87:73:35:CC:67:49:9D:4F:EA:16:94
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a4:b9:47:5a:c6:fd:cc:08:ed:4b:5c:84:b8:7e:bd:60:66:
         fa:ac:f5:6c:9a:45:a6:a3:f6:78:25:b4:0d:99:04:ca:1c:66:
         e5:bf:c8:aa:74:62:06:d0:f4:e9:a9:d1:bb:e1:cf:b3:bd:1a:
         b2:cf:09:39:1f:34:fa:cf:db:63:b1:6e:d1:31:0e:2f:8c:09:
         7f:cf:31:51:63:69:ec:0a:d6:40:08:d8:ef:b9:d5:05:45:ca:
         fa:4f:0b:01:4c:c1:28:a8:82:3c:a7:aa:84:6e:f6:65:24:51:
         40:81:2e:de:1b:27:9b:58:48:5b:96:f0:36:17:2a:3b:58:94:
         02:f0:35:96:b3:ef:ca:2c:83:5a:a2:7e:d7:ad:89:28:b8:7d:
         8b:3b:55:3a:1c:5e:f3:11:7f:53:f4:55:5f:8c:bf:33:88:c1:
         59:f3:09:b2:d3:a1:5d:9c:df:01:eb:9b:06:1c:46:8a:30:04:
         43:80:1e:81:4f:6a:74:fd:7f:ef:c8:c1:de:68:60:eb:2c:85:
         13:4f:81:88:9f:fc:c2:f2:3e:06:42:72:72:0d:25:59:ad:77:
         05:d2:a6:1c:54:c8:8a:b6:30:cb:1c:6b:00:93:fc:38:91:55:
         dc:04:53:d6:5a:46:2a:db:ad:07:2a:9c:58:ca:28:c3:c0:eb:
         7b:27:05:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:39 2026 by rpki-client