Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
File:                     HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json)
Hash identifier:          diVX+6SUkn76iE4cxEJmljaCUeUruwd3lhENr2wMsqk=
Subject key identifier:   1C:83:9C:F7:69:33:54:68:C1:44:55:A0:18:F1:4D:E3:52:0E:C6:64
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Certificate issuer:       /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial:       019D25BA8890E122A36A47DC9BE5D085A611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 16:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:14 +0000
Files and hashes:         1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: 1KGLZVwc4WV//E9xxodphVoExAsVI4CLIyI8qzKlIt0=)
                          2: s0dYC6-RVRGw5a-WyYT4vShlFiY.roa (hash: f/X4gwVN0rJwSCQpT33krgHJNAGm21o5YhKb8UpMGx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:88:90:e1:22:a3:6a:47:dc:9b:e5:d0:85:a6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
        Validity
            Not Before: Mar 25 16:01:14 2026 GMT
            Not After : Mar 26 16:01:14 2026 GMT
        Subject: CN=1c839cf769335468c14455a018f14de3520ec664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:f1:fc:73:dc:9b:b3:7c:d2:25:e3:bf:26:
                    5b:fd:80:70:c8:36:5c:4a:71:bd:d4:59:27:67:4d:
                    81:79:8d:3e:0a:ae:de:85:a0:e9:30:5e:60:3d:f2:
                    9f:3e:cc:08:e9:06:57:94:da:62:f5:8b:a7:65:67:
                    06:bb:b1:44:79:83:6a:69:57:27:c9:b0:99:a1:bd:
                    31:55:92:2d:24:f5:5c:9f:43:3b:f2:16:63:b4:80:
                    14:ac:e1:41:5b:6d:31:dc:99:8c:7b:93:1e:61:c7:
                    8b:ee:85:d9:16:8d:a3:d0:84:12:d6:7a:3c:30:51:
                    ad:5c:e7:30:0e:c8:5c:b0:6e:28:8b:01:f7:48:97:
                    0c:55:80:89:14:4f:a7:ab:c1:42:4d:a2:2a:a5:04:
                    ac:43:a8:31:a6:74:a7:13:e5:72:e3:15:62:84:41:
                    75:b7:96:7a:40:99:ee:36:ca:7a:39:76:9b:00:56:
                    b3:f3:ae:6d:22:d7:55:68:54:24:3c:37:1b:ab:62:
                    03:07:39:15:49:8b:c6:1b:14:de:b9:a3:23:e0:57:
                    6b:6a:6e:9e:3f:02:8b:92:56:f6:02:c7:9b:c4:70:
                    e5:b6:54:68:54:9a:32:78:a7:55:ff:91:b5:9f:4e:
                    53:1e:4c:68:69:d8:a2:42:eb:14:ca:d7:d5:6d:45:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:83:9C:F7:69:33:54:68:C1:44:55:A0:18:F1:4D:E3:52:0E:C6:64
            X509v3 Authority Key Identifier:
                keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:90:c7:56:78:1e:d1:97:6d:5e:be:89:b2:4c:35:b2:93:
         84:f4:79:39:b6:61:cc:cb:c9:ea:9c:d5:b9:81:d0:c1:9f:6f:
         5b:e7:07:64:c3:d4:84:a6:7a:0e:c1:4a:4f:68:af:d5:4f:53:
         17:d5:26:47:79:a0:e6:b5:7b:ad:40:c8:6b:f5:68:8f:57:26:
         14:2c:fa:11:e9:2f:41:24:c5:7e:af:01:9b:0b:8e:62:41:b3:
         e5:54:a3:4a:50:01:2e:0a:58:ea:e5:4a:e3:fc:36:80:9c:10:
         42:2a:40:2d:1d:32:53:22:e2:cc:86:2f:f1:ff:58:e7:1d:16:
         60:87:18:00:52:39:53:5b:2f:ec:e2:78:fe:fb:a8:55:42:29:
         3e:39:bc:48:f1:9f:8d:de:b3:cf:1a:77:3f:95:21:ef:ed:69:
         bb:a9:b9:a8:3f:c3:12:19:63:17:d0:ac:41:f0:7d:ba:db:bd:
         4a:72:8a:c4:58:d5:40:b1:23:54:4f:b7:dd:46:95:97:14:98:
         10:e6:35:01:cf:8c:79:9c:60:be:2c:31:6b:76:2d:20:7b:7d:
         f4:87:79:d9:2b:a6:40:f8:f6:4d:b9:2e:96:31:b6:55:3e:1c:
         65:91:27:6b:33:76:fa:f3:42:79:81:30:97:39:42:fc:c8:80:
         a0:3f:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:07 2026 by rpki-client