Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File:                     lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier:          niFNXT3WZT5VV9HriJj3bh7pkGeJjPeu3lvmbgcZTsI=
Subject key identifier:   17:76:58:CC:CD:EA:9B:6C:1A:B2:60:26:9C:B1:61:35:E2:02:24:BC
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer:       /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial:       019E770B698AB76E8AB23B6A36D69E8AF9E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number:          0446
Signing time:             Sat 30 May 2026 04:01:37 +0000
Manifest this update:     Sat 30 May 2026 04:01:37 +0000
Manifest next update:     Sun 31 May 2026 04:01:37 +0000
Files and hashes:         1: 7lwx1zJrY0F3LdoEn_iJXa3pM84.asa (hash: Q0oQMweHsmrfdfYTRFNKYhoRxahIkowVFvNwfkroZB4=)
                          2: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
                          3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: qMf4D9voG6f9b9a9pl+E3Z6hQAXC3W9whhXxjKoH7ng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 31 May 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:77:0b:69:8a:b7:6e:8a:b2:3b:6a:36:d6:9e:8a:f9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
        Validity
            Not Before: May 30 04:01:37 2026 GMT
            Not After : May 31 04:01:37 2026 GMT
        Subject: CN=177658cccdea9b6c1ab260269cb16135e20224bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:3b:a3:a6:1c:fe:0e:ba:78:89:36:48:21:
                    de:5b:be:b0:9d:b7:d2:ce:9d:10:58:ec:1b:f4:4b:
                    9c:1b:af:a4:d3:70:6d:3b:da:d8:36:2b:94:24:d0:
                    6e:c9:b3:47:9a:82:a7:2d:39:5a:6d:66:cb:5e:b4:
                    b7:72:aa:1f:6c:04:d0:d5:66:7e:8c:30:56:40:d7:
                    fc:b2:5d:cd:c6:6c:33:e9:8c:e4:d6:fa:d2:34:8f:
                    da:bb:06:c7:33:c9:1f:48:a8:c6:24:96:01:64:9a:
                    7d:da:ce:ee:9f:12:a3:c4:54:52:fb:48:45:7b:c0:
                    58:4d:2c:7c:bb:9e:d0:b4:75:4e:e8:10:ad:f3:9b:
                    d0:f8:44:d1:e2:5a:ee:f9:37:37:33:81:22:e0:4e:
                    52:3e:15:07:00:39:72:36:42:54:b4:85:42:56:15:
                    14:36:e1:ea:6d:f8:6f:21:de:30:74:c8:ee:4f:8c:
                    77:26:52:f3:29:ca:98:65:8d:42:ef:81:ae:63:32:
                    d1:5b:d9:d8:8d:bb:01:24:aa:59:5e:75:e8:cc:c3:
                    b4:99:06:d7:d7:1b:d6:92:6f:c4:05:4e:40:97:90:
                    48:f6:23:e5:82:ad:3a:ba:db:11:2b:97:ac:d2:f8:
                    4d:15:d5:3f:eb:00:fc:3e:d2:bb:40:ad:31:44:a0:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:76:58:CC:CD:EA:9B:6C:1A:B2:60:26:9C:B1:61:35:E2:02:24:BC
            X509v3 Authority Key Identifier:
                keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:92:b8:8f:76:63:a9:5d:c0:0d:0d:5d:d8:d2:dc:95:b5:9c:
         ed:f2:2d:5c:87:50:93:09:16:0b:08:36:2a:89:cd:79:62:69:
         bf:8c:dd:e4:69:8e:ed:69:e3:f3:46:d7:fd:26:f2:52:9e:b1:
         68:11:77:3f:1c:de:1a:12:1e:a8:f1:36:8e:34:2f:17:d3:3d:
         0c:9f:32:18:9e:99:e0:be:88:11:19:df:3c:6f:36:9d:91:12:
         da:7d:20:12:7d:56:97:95:c1:08:d9:a4:56:59:28:c2:1e:e5:
         1c:fb:42:18:5d:28:ea:cd:0b:70:9f:cc:66:62:4b:42:a5:dd:
         ca:ae:b3:0f:f7:96:3c:55:28:16:11:58:85:48:40:e3:71:a3:
         2a:9b:d0:d3:54:e0:ca:1c:6e:9e:51:e0:bb:25:8e:99:72:a0:
         22:ed:5a:fa:a7:13:e2:41:7b:f5:21:2d:d9:19:f3:a6:f6:ab:
         84:e6:f0:31:a9:ca:47:79:2b:a8:c8:ec:04:25:98:a7:c3:27:
         ae:a1:52:eb:1a:0e:78:06:a7:23:01:20:c1:77:5f:0c:b0:bd:
         41:ec:a0:17:6f:cc:04:33:c4:bd:d4:4e:f0:70:22:fa:37:dc:
         5f:6d:9e:7b:8f:44:17:ff:05:5d:8d:83:82:21:4f:1c:e8:f9:
         4d:90:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 09:52:57 2026 by rpki-client