Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
File:                     Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json)
Hash identifier:          57ubfxuvPwE9audX4tyDzOLFNOdIlQ/KRwGrZaEbKyY=
Subject key identifier:   37:F0:75:EB:D1:25:9C:67:98:2C:FF:12:7C:5E:C9:A2:7B:3E:25:82
Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
Certificate issuer:       /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Certificate serial:       019D37C0B763A093F68342B78F604B432222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
Manifest number:          17A1
Signing time:             Sun 29 Mar 2026 04:01:09 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:09 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:09 +0000
Files and hashes:         1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: 8XFRCjKucjZoDk3gSpVbk2lrijIW7TLcKrOD4wqaOsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:b7:63:a0:93:f6:83:42:b7:8f:60:4b:43:22:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
        Validity
            Not Before: Mar 29 04:01:09 2026 GMT
            Not After : Mar 30 04:01:09 2026 GMT
        Subject: CN=37f075ebd1259c67982cff127c5ec9a27b3e2582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:0b:94:73:6f:2e:fa:0a:67:56:5a:c4:c3:
                    0e:1a:de:f1:62:c8:66:52:51:7f:a6:8c:29:2a:8d:
                    8f:eb:b9:4f:09:51:81:19:97:0d:9a:c7:39:d2:20:
                    1f:8e:66:9f:4b:cb:2d:8c:db:3e:3a:76:3f:67:b3:
                    5a:1c:e1:08:eb:2e:f0:c6:9a:8a:e6:ce:f3:bc:4b:
                    3a:0e:86:00:df:37:8b:03:e6:3c:cf:69:92:ac:06:
                    a7:24:88:69:6c:dd:66:f7:5c:a5:62:2c:0d:4f:8e:
                    5c:68:ec:96:4b:36:0e:b0:00:c2:9e:f4:2f:5d:ee:
                    13:3f:02:c1:ac:52:7b:88:c6:4a:19:53:39:9f:0e:
                    dc:db:76:8f:bd:2d:47:91:20:87:12:50:e9:50:cc:
                    46:e0:58:9d:5a:17:31:f0:8a:a0:21:3c:28:b5:26:
                    86:54:a0:aa:89:fa:80:41:f0:97:1e:d3:0b:e4:a8:
                    b4:79:09:46:87:a8:a4:44:cc:13:bf:a9:b4:63:f9:
                    b7:61:3b:d9:cd:3e:24:9b:a2:38:ec:06:84:7b:d5:
                    50:27:bd:a5:bc:e1:cc:ad:60:df:85:d9:6e:77:e8:
                    48:a5:f8:28:c3:93:f8:3e:80:41:87:16:d9:d5:a7:
                    15:0c:46:3b:46:4e:17:80:4f:5c:4c:84:50:88:9e:
                    07:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F0:75:EB:D1:25:9C:67:98:2C:FF:12:7C:5E:C9:A2:7B:3E:25:82
            X509v3 Authority Key Identifier:
                keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2c:03:bf:93:82:f9:0b:f9:bd:94:bd:99:17:db:ae:50:e8:
         15:3d:bd:7a:74:a9:21:47:e2:dd:90:4f:21:ad:a2:36:45:1a:
         63:22:22:a0:91:b0:8d:90:04:47:d5:1c:16:bc:f0:fc:75:9c:
         a7:1c:2c:f9:ca:91:bd:23:f7:10:e4:6d:19:63:8f:f6:47:f8:
         67:a4:57:14:3e:f5:5d:3f:a2:41:36:86:fd:82:50:ce:c3:86:
         6a:ca:99:05:81:fe:1c:91:65:18:26:e8:84:c8:0a:0e:a6:e8:
         96:56:7a:08:30:49:fa:9a:a2:da:7c:31:2d:16:6a:6f:ce:f3:
         45:8d:fc:78:3b:3c:4d:50:02:8c:49:3d:00:41:91:73:69:31:
         b3:f9:c7:ce:61:84:89:f0:49:9b:80:99:c2:12:da:66:2e:3b:
         87:4e:87:d0:6e:a9:e7:2c:f0:1e:a1:95:29:c7:0d:a6:7e:b0:
         f8:58:0a:ba:51:b3:33:9b:10:f4:2c:a2:47:5b:4f:9b:09:19:
         05:b7:d0:7d:cc:ed:c6:3f:09:f3:ad:f8:1a:ab:6d:2f:e0:af:
         2a:a7:b1:0e:e8:c4:a2:70:2a:16:ef:cd:14:23:69:f9:43:bf:
         b2:08:0a:86:74:c4:df:1f:3b:05:a8:f3:aa:26:65:68:88:48:
         48:f0:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:24 2026 by rpki-client