Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          uEk7ZmKDjmhavJ46GEHdWf/nsKb24jjPlQVirjn9dhw=
Subject key identifier:   C0:1A:80:C5:D5:4C:F5:16:55:E5:5B:1C:F5:95:4B:45:02:ED:09:68
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       019D3977DED22132E9686439FC15E03349E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          18A3
Signing time:             Sun 29 Mar 2026 12:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:50 +0000
Files and hashes:         1: 1LwTV0768J6dRk8qC5hDLpAsU28.roa (hash: Tt7Jvp1n+IhGVJo847shEW7XeQAdzKOGRJPvl8SARHA=)
                          2: GzoYbPuA6zt92uMBOAiHk0i8fMs.roa (hash: BhU8n2AYRLl+UcY3HBoFElDvFC16XHDPo9Q/sW3CcM0=)
                          3: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: YtBCmceHMWYyJR/9paH2p0ilxJ+to+oWUL6Qdh6Ee30=)
                          4: LNyRIOVIdfmnv0KT3cEWY7LrXtw.roa (hash: /wQ+VdP6JQWiEZ1exV0bWo3UXW0mDc5tG2r3uhT7BTk=)
                          5: WlWWJjt9Bx1oCkJxTpZbHaU11Q8.roa (hash: 7iCn7aA9/98SqHuf3K5vlRI49Df9JrqkSps0IfUPR0c=)
                          6: eYckRRAAYmoN3pcOogHxes-vOrw.roa (hash: sEdE6YfuDwcouFcKiDjVDbeso/Z6HkL2HDH+Kt655HM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:de:d2:21:32:e9:68:64:39:fc:15:e0:33:49:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Mar 29 12:00:50 2026 GMT
            Not After : Mar 30 12:00:50 2026 GMT
        Subject: CN=c01a80c5d54cf51655e55b1cf5954b4502ed0968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:e1:67:54:a3:c7:22:55:6d:a1:39:94:3a:
                    3b:74:ba:81:63:a5:dd:a5:c5:06:bc:21:aa:cc:7d:
                    f7:70:d9:15:67:bf:d6:68:97:ad:3d:df:1f:f9:c2:
                    f4:e9:a5:bd:0d:dc:80:cb:33:de:ac:bf:ef:2f:71:
                    72:fb:fa:71:c8:b7:76:6a:a3:2f:98:65:d5:3c:01:
                    73:56:04:25:a7:8e:97:2a:81:dc:ad:a9:84:5c:36:
                    97:ca:b1:64:da:5c:e0:6e:7d:7c:ce:e0:b1:1c:a8:
                    a8:d8:e7:64:cc:f7:10:fe:b3:7a:70:76:00:66:45:
                    89:d2:01:bf:d4:5f:4a:3c:bb:8d:b5:0e:b9:74:8d:
                    9d:2d:38:db:32:75:4b:ce:c0:35:7b:a8:18:ed:93:
                    e6:98:91:c7:70:30:da:7c:4f:02:40:fc:79:27:72:
                    6d:5c:be:ac:3d:33:3f:6c:42:62:b5:b7:9f:e6:6a:
                    84:a2:b1:96:0f:22:08:29:24:a5:74:c2:86:f0:47:
                    b2:6d:ca:ba:ae:22:35:07:2c:65:67:f9:a5:f4:13:
                    b3:04:e5:87:c8:e1:05:e0:f0:64:6c:3e:1a:11:26:
                    93:7e:08:6a:a7:4c:2b:8c:23:9d:b8:cf:8b:e2:07:
                    e0:1f:99:59:f3:8e:9b:f1:90:f5:72:af:20:79:ce:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1A:80:C5:D5:4C:F5:16:55:E5:5B:1C:F5:95:4B:45:02:ED:09:68
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:45:6a:d0:22:02:70:ef:ed:e9:2a:fb:83:54:ed:c7:ac:
         57:af:8c:87:a9:fd:78:d6:a2:c2:c5:27:5f:32:4b:10:f8:0d:
         88:34:cd:34:30:86:73:8a:c3:02:40:22:3c:00:3b:6a:e4:25:
         c8:85:20:53:2e:5d:78:08:b1:21:dc:f3:4d:1c:a8:7c:76:40:
         d0:9f:81:ef:eb:22:da:c6:16:4e:b7:15:f8:87:13:3d:39:02:
         4d:bc:2d:6d:20:dd:8c:d2:cf:12:2b:da:c4:ad:4c:4d:5e:69:
         93:1c:58:5e:1c:6d:2e:75:28:af:8a:e8:ec:2b:ea:d3:34:ea:
         8d:f6:dd:43:4d:13:78:7e:76:32:f0:00:6d:26:44:3f:40:44:
         f2:88:b6:db:d2:c8:dd:8a:93:a5:93:b7:56:37:07:93:8c:ae:
         f0:eb:5e:13:24:3a:13:c9:85:92:04:9d:80:df:28:77:ca:35:
         74:48:67:7d:28:7c:f3:08:1d:4c:87:8e:e5:21:2a:3d:fd:42:
         bb:d5:46:0a:1c:9d:a6:cf:4e:cf:9c:ac:44:50:00:ac:51:ef:
         61:85:22:3e:b6:d4:79:4d:d8:08:b6:e0:1e:50:4a:7d:0c:56:
         5d:6d:ad:8b:ee:c8:e9:fe:cc:ff:22:4e:10:82:b4:b1:25:21:
         9e:37:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:20 2026 by rpki-client