Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File:                     hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier:          dHcPv41xgzJrnQJUEnf28mvQ4x87oilwdl9oEV012FE=
Subject key identifier:   67:69:7C:20:8D:8A:09:39:1C:39:D4:B9:79:5D:41:7F:63:7D:C1:52
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer:       /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial:       019EB5E99C0B8C5D422FE958428377C726C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number:          1959
Signing time:             Thu 11 Jun 2026 09:00:46 +0000
Manifest this update:     Thu 11 Jun 2026 09:00:46 +0000
Manifest next update:     Fri 12 Jun 2026 09:00:46 +0000
Files and hashes:         1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=)
                          2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: rlhf81P4UfWkxVHPT1uamz4+gG7VMWpz0f2tUJcoEPs=)
                          3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=)
                          4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=)
                          5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:e9:9c:0b:8c:5d:42:2f:e9:58:42:83:77:c7:26:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
        Validity
            Not Before: Jun 11 09:00:46 2026 GMT
            Not After : Jun 12 09:00:46 2026 GMT
        Subject: CN=67697c208d8a09391c39d4b9795d417f637dc152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:d0:ce:22:c2:1f:28:84:94:72:db:5a:8e:
                    84:16:8c:5a:f0:dd:35:8a:dc:55:c8:dc:3c:61:74:
                    07:ca:b1:72:7f:68:01:ac:ca:7a:a5:02:81:b2:f3:
                    18:76:5a:32:90:1a:bc:c5:c3:65:3c:6a:42:64:7c:
                    9d:ce:ee:e7:55:2b:c3:7a:6d:74:ee:b1:76:54:ad:
                    18:a5:8d:91:fe:37:46:a2:77:d7:0d:fe:96:69:9e:
                    49:36:20:69:ba:8a:95:3f:9f:d2:5a:e3:ca:a3:3a:
                    1a:d2:ad:2c:68:b4:a5:90:74:59:1f:48:ef:fa:71:
                    7d:72:30:02:f1:68:f1:1c:ee:ab:5d:2d:dc:6b:2f:
                    04:87:6e:19:7c:fb:27:11:92:69:78:65:af:2a:cd:
                    4b:34:5b:23:79:3c:23:b1:1d:39:34:b1:0b:7b:10:
                    86:69:2c:1f:e7:14:b9:b6:84:35:7a:98:f3:f2:d3:
                    f6:a8:d1:59:cd:c7:3a:a5:7f:86:b2:8e:a6:2d:2b:
                    fb:34:9e:80:75:04:39:24:b6:e7:7e:6a:98:01:4b:
                    cc:2f:d2:28:58:9d:dc:7b:99:64:ef:2a:2e:b1:4d:
                    ca:d4:2e:c1:cf:10:30:c0:d1:dc:7b:3e:d6:e1:2a:
                    bd:1c:fa:00:b5:f3:03:88:3e:bd:44:b0:08:c0:9b:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:69:7C:20:8D:8A:09:39:1C:39:D4:B9:79:5D:41:7F:63:7D:C1:52
            X509v3 Authority Key Identifier:
                keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:58:b6:da:5e:a6:27:8d:02:62:ad:06:5f:8a:f7:62:8c:57:
         5b:d8:15:a7:e3:16:35:f6:b8:42:83:0b:5a:f4:ac:f0:f2:46:
         64:1d:d3:c0:ed:45:8a:0d:6b:22:82:79:44:bc:59:f5:a3:3b:
         f0:70:62:03:87:ce:75:0a:87:a6:39:b9:22:a0:86:c0:50:9d:
         bd:d9:78:b0:3c:ec:2e:1e:85:58:9d:2c:49:01:4f:92:14:73:
         80:e0:61:55:6d:bb:7f:4d:24:39:bf:82:db:d0:be:0e:fc:1a:
         4b:3f:53:e9:af:54:fa:51:bc:50:35:02:93:1a:ea:33:14:ee:
         9c:c1:28:5f:44:3e:43:16:d6:c5:0a:07:af:bf:26:b8:e4:5e:
         69:25:75:43:0e:b3:3f:0c:99:6c:da:a5:64:3f:ae:61:13:e5:
         d3:a5:e8:ee:75:f6:0d:61:50:72:0a:0d:1c:3d:ae:c5:69:da:
         01:b1:1c:e2:e5:21:58:62:b8:d3:f1:8f:cc:9b:1e:51:02:c5:
         b7:d7:d3:fe:c8:56:28:79:1b:0f:9f:ae:3f:2b:83:e8:0c:e3:
         fa:92:d2:74:43:1b:b7:f0:5e:ab:d8:49:f8:9e:cd:6a:f0:98:
         09:d2:1e:dc:b2:0f:3d:40:62:19:87:d8:01:a2:4b:bc:90:9b:
         bc:28:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:51:13 2026 by rpki-client