Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File:                     HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier:          2tMDq3SQ+ro9b7RP2iKWvV1mpU+8M6IDj2bxVRLagvc=
Subject key identifier:   C3:60:65:EC:61:53:A7:82:E0:2F:4F:2E:13:68:3C:15:01:FB:81:7F
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer:       /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial:       019E1DFE6EA9039080BBB78716861B93DEB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number:          1951
Signing time:             Tue 12 May 2026 21:01:14 +0000
Manifest this update:     Tue 12 May 2026 21:01:14 +0000
Manifest next update:     Wed 13 May 2026 21:01:14 +0000
Files and hashes:         1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: VWtGrc5x2L3urC/jTrdI2OGvR4pBNSnITqXFeLQYkJk=)
                          2: gSeQdDXn3ygO_8pxNsOKtvz--Sw.roa (hash: a6EzKVma5/2ncxKjHy/KGoWOM1fh0VyLYME9lKewGmk=)
                          3: iX4GSDAKgDO8XApKKPZNl8rlRpM.roa (hash: R6eZBAlVK/N/5iGCZRyVlBAXsKn4rccdhUvB5Vtct50=)
                          4: jnambI_i1Pq9WfSXzTyJxwNqXTw.roa (hash: AT3Vk6O1Rxzzj5x8tTjuoggjZ3puukVm8amtuMG/2yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:6e:a9:03:90:80:bb:b7:87:16:86:1b:93:de:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
        Validity
            Not Before: May 12 21:01:14 2026 GMT
            Not After : May 13 21:01:14 2026 GMT
        Subject: CN=c36065ec6153a782e02f4f2e13683c1501fb817f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:04:fa:b0:cb:fd:77:03:17:75:ae:16:16:
                    3a:4a:a4:35:ff:bb:19:b2:54:1b:a4:62:1f:3b:4b:
                    3f:a5:d7:14:30:42:b4:53:aa:3e:da:85:5d:b1:0d:
                    fc:c6:b5:c8:aa:8e:eb:32:dd:cf:27:9e:e6:9a:64:
                    1c:92:02:dc:cb:39:7d:42:6a:d8:6a:5c:3f:94:aa:
                    59:ac:6f:bf:89:9c:3f:f2:9e:29:0d:a4:04:af:f6:
                    e4:0e:a9:0c:26:91:e5:8a:ae:1e:bb:1f:49:06:3a:
                    67:84:5c:43:72:a3:2a:1d:30:45:95:6e:ca:4f:5b:
                    72:62:64:ac:8d:8e:66:57:db:c4:82:ae:cc:63:a0:
                    6e:95:c6:a6:f5:f8:c1:34:6d:13:81:ee:09:1e:68:
                    20:e8:4e:dd:0a:f5:47:ac:1a:3f:d6:58:a6:1e:b9:
                    44:8b:d0:1e:c9:06:9e:1d:70:ae:3b:70:9f:40:51:
                    5a:b1:1b:2c:2b:78:f5:72:0e:30:40:56:15:ac:cd:
                    56:24:31:17:01:d1:e1:c7:6f:5b:1a:27:50:0c:b8:
                    63:83:e2:32:65:63:b9:ee:40:d9:cd:ac:88:8b:5e:
                    13:c2:9d:d1:74:c8:2d:ec:46:35:ed:d8:cc:c7:a1:
                    87:3e:42:1f:4f:f5:db:02:c1:61:1e:7b:8b:dc:5d:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:60:65:EC:61:53:A7:82:E0:2F:4F:2E:13:68:3C:15:01:FB:81:7F
            X509v3 Authority Key Identifier:
                keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:e3:69:99:25:a1:09:c0:a6:18:b1:5e:b0:4d:80:24:78:
         ac:98:9e:5a:a3:72:ab:36:66:7c:65:bb:8c:c8:6b:0c:89:f0:
         3f:e9:d3:a4:58:c5:07:8f:01:89:f0:4d:4d:de:93:d6:a5:2d:
         c7:48:17:5f:35:47:cb:56:e3:97:b2:9f:d9:7b:38:3b:5c:22:
         86:30:77:a8:47:80:0c:bd:8c:3f:73:81:a1:39:4c:0d:d8:9d:
         1e:3b:60:4b:7f:0d:bb:8d:39:e5:bf:40:0f:62:43:7f:10:a6:
         c3:c4:e1:f5:51:cf:b5:2f:e7:f9:7c:6c:3d:54:7f:55:81:c7:
         56:6f:f0:32:d4:8f:83:99:2c:14:20:9e:06:b9:8c:d4:ba:3a:
         10:12:3d:3c:fe:7a:9b:df:cc:d7:ca:b6:7c:c5:b0:9a:65:c3:
         0e:16:cf:60:84:9e:9e:ef:4a:7c:27:e0:f1:0e:3d:4e:d4:ef:
         07:65:64:51:cf:33:75:cf:05:ae:75:d7:eb:96:da:4c:0e:7c:
         bf:bb:d8:ba:2f:1d:36:f6:2a:fd:6d:5e:8c:10:42:77:22:07:
         e9:6a:ff:82:b0:2f:e9:5a:d9:ce:ec:ba:3d:3e:d7:25:84:1b:
         a1:55:e5:e7:a5:17:10:9f:7d:16:3c:7d:80:fd:5f:54:9a:46:
         b8:97:d6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:49 2026 by rpki-client