Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
File:                     HSXQyIRbeYhsGZNFuJD16KzVFtg.mft (raw, json)
Hash identifier:          uL+5W42mJ3cS28TVsAVwDnuZJeYLxcCZNI+yekzTxxo=
Subject key identifier:   D0:4B:31:FF:47:31:C6:7A:09:1B:D6:15:D5:1D:FA:D2:40:BB:F1:29
Authority key identifier: 1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
Certificate issuer:       /CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Certificate serial:       019F15035391EC415D2F2B7131E3A79113FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
Manifest number:          1983
Signing time:             Mon 29 Jun 2026 20:12:47 +0000
Manifest this update:     Mon 29 Jun 2026 20:12:47 +0000
Manifest next update:     Tue 30 Jun 2026 20:12:47 +0000
Files and hashes:         1: ACAlli7g0O4SaAuBMEG33oqVDNg.roa (hash: LR3cThLmPZU74WiY2Hs/Bqsbtxc4sKTKodU0FrsSnhI=)
                          2: HSXQyIRbeYhsGZNFuJD16KzVFtg.crl (hash: +DP0UurOPb28zZgCfDXJ3c6cTk6nPsuWnUjVPTsYTPI=)
                          3: fn4zzf2P7WlF_T3nuMRC7T2bgIM.roa (hash: 7qSjgY4PIPvMkUzYF/SCHnCfOJSbqzIxeuFxHsWJbOo=)
                          4: rGcSVw4JD2TsggxvzCf49t06ktI.roa (hash: N2TX307/s4VGRh8knONcDQ4y4hYb3c4Kd8kYYSngeNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 20:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:15:03:53:91:ec:41:5d:2f:2b:71:31:e3:a7:91:13:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d25d0c8845b79886c199345b890f5e8acd516d8
        Validity
            Not Before: Jun 29 20:12:47 2026 GMT
            Not After : Jun 30 20:12:47 2026 GMT
        Subject: CN=d04b31ff4731c67a091bd615d51dfad240bbf129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:c4:ab:0c:21:e4:05:78:e1:29:85:2c:c9:
                    dc:29:9f:2f:91:e0:b9:44:9b:42:41:7e:a4:84:8b:
                    78:3a:48:4c:5e:f2:9a:ed:d0:7e:39:45:19:ea:2a:
                    05:1c:5b:aa:99:fc:e7:8b:46:59:e9:1b:ae:15:70:
                    d9:04:9e:32:fc:e0:0c:cd:39:1f:82:dd:85:4b:6d:
                    dc:5b:26:ea:2e:42:a5:69:41:b8:80:d2:80:7e:1e:
                    f4:2d:11:7c:3b:04:6f:77:bd:be:58:17:9f:23:18:
                    25:e6:77:b6:c7:79:4f:ec:1a:bc:af:d5:9d:7a:c9:
                    a8:bf:b1:50:b3:9d:0d:1c:f7:cd:a6:19:4e:20:99:
                    19:1c:1f:5c:24:20:e8:99:0f:54:f9:e9:b3:69:bd:
                    99:c5:e0:70:ce:e1:c8:b9:8f:cd:7c:32:3d:bf:c1:
                    dd:dc:a4:f9:94:f6:cf:85:98:d9:59:b4:1d:4c:30:
                    96:3e:bc:09:2e:50:5d:82:25:51:10:e2:ec:df:88:
                    7d:45:24:5b:da:f7:b6:0d:75:62:c4:7d:cb:9b:bf:
                    23:70:74:87:93:5f:6e:b3:4e:21:08:98:d6:8d:d4:
                    54:8e:48:63:92:4d:87:99:31:a8:45:18:44:12:7d:
                    22:9f:4f:25:23:e6:51:b8:a8:34:62:66:63:4f:e9:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4B:31:FF:47:31:C6:7A:09:1B:D6:15:D5:1D:FA:D2:40:BB:F1:29
            X509v3 Authority Key Identifier:
                keyid:1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3c:bb:6e:90:6d:84:25:e3:7c:79:a2:74:84:70:ca:9c:92:
         4f:97:d8:57:83:ba:1e:ad:c6:3b:74:d7:34:e9:e5:ad:6d:d5:
         d3:56:69:2b:86:23:c7:f9:20:7d:7c:09:92:df:62:c9:56:59:
         eb:5b:53:a8:63:b6:f2:fb:f5:e3:9f:d7:24:af:a8:b3:0f:2f:
         10:41:f0:8f:97:b3:b8:9c:a1:1a:af:cf:a2:16:70:0d:4e:f5:
         90:1a:bb:f0:a6:a7:8e:4e:a4:c1:b0:82:22:78:aa:d6:14:c6:
         51:e8:91:24:2e:a5:1d:91:fc:84:88:3c:48:cc:ac:99:9a:a9:
         4e:2c:e5:ee:c9:e4:26:10:76:7a:e0:d7:eb:ab:5b:51:d1:2b:
         c8:d2:c5:0f:70:ae:d5:41:ba:85:44:fa:8a:8d:a2:8d:20:63:
         3c:69:eb:65:b8:e0:2b:ed:b7:33:69:04:eb:bc:05:ef:1c:7f:
         de:70:eb:bf:34:33:70:92:27:8a:e5:b0:5a:30:56:cc:47:7e:
         61:b1:96:9e:4b:ad:49:fb:af:6c:eb:ca:d0:63:58:e9:67:b5:
         c7:09:0b:7d:2f:a5:2d:83:1f:55:0e:fd:15:4e:d1:8d:be:0c:
         7e:6f:42:d0:5c:02:69:04:af:f8:ad:38:d1:74:9b:c1:46:f4:
         f4:38:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:19:56 2026 by rpki-client