Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          5bXqKGOMXsTGQlM2ScBN568F39BAut2Jbd4Z65XSrMY=
Subject key identifier:   45:8B:A5:08:E4:A6:3F:20:C1:45:EA:EA:29:2A:E4:EE:26:AC:90:CF
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       019E31BC14C480EA8C2EAF866845F215AD4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          1435
Signing time:             Sat 16 May 2026 17:01:09 +0000
Manifest this update:     Sat 16 May 2026 17:01:09 +0000
Manifest next update:     Sun 17 May 2026 17:01:09 +0000
Files and hashes:         1: 2ykxp1RC0SDW_olwDTCv-_MLiXQ.roa (hash: lHkNZLkgWFsMzYreyxJfbV91bR62pQ6AlcQ7rRHMjNM=)
                          2: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: WER/lmerhW4PqSN3pM+/ObNOimn6m5RaZcbfg0YnWWI=)
                          3: Vhg0NY4jLKFZehorU_HupjxbgqM.roa (hash: ZZVk+nzM5sjrEyBiJMYznTGMxJYwAgph6Xy/eIIAOF0=)
                          4: wLlS8Jywk1Z2A3Ni9ePUaXlglZA.roa (hash: HsiaEAzxY6GNFLXp4J8wvPh2SdvP1m/Tm0n/2wRXxXs=)
                          5: zLPd6uaNhEYIigV3kvzlHJIvTH4.roa (hash: tk6Y8DqBSL9/1u7Y9F6ipEsLVlx2f1XyZLdRg6GvQEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:14:c4:80:ea:8c:2e:af:86:68:45:f2:15:ad:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: May 16 17:01:09 2026 GMT
            Not After : May 17 17:01:09 2026 GMT
        Subject: CN=458ba508e4a63f20c145eaea292ae4ee26ac90cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:4c:cf:35:b1:21:35:39:2a:7e:0f:7e:de:
                    23:98:49:a2:e7:5b:57:85:6d:6f:11:e2:67:8b:b7:
                    cd:b6:40:b0:1e:53:fc:83:ee:7f:59:43:bf:2a:cf:
                    f9:2b:1c:fe:c8:9b:5b:23:a1:bc:f1:6b:29:95:cc:
                    1e:89:84:b9:48:ce:ce:12:bb:8e:2c:2c:eb:a8:2f:
                    e9:ca:05:12:3f:3d:38:77:d2:98:cd:31:3e:30:11:
                    35:37:24:8c:a0:9b:1a:d5:96:fc:ed:6b:df:32:70:
                    67:be:91:0d:1c:0d:fc:3f:91:cf:c5:61:7a:39:a6:
                    47:92:f4:d5:fe:0a:05:d2:ec:36:c4:a0:ba:c5:0a:
                    92:93:67:43:c1:9c:37:ff:28:04:02:51:40:c9:33:
                    1a:a8:be:7d:f5:75:0b:49:45:6a:24:cd:b3:77:eb:
                    e1:e9:d8:93:07:ca:05:d5:a2:33:97:a7:a0:3f:0e:
                    77:ce:4a:3d:5b:45:18:dd:f2:1d:92:65:55:6a:e5:
                    46:7f:7c:97:a3:e2:7d:9e:30:e8:0c:d8:14:48:13:
                    7b:3b:07:a8:46:01:31:7f:9e:84:76:f6:7b:66:64:
                    5c:14:76:da:86:c2:6f:50:24:30:2b:72:bb:7b:97:
                    f0:8d:dc:6b:11:99:fd:ad:ec:5b:05:ec:7c:ee:ab:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8B:A5:08:E4:A6:3F:20:C1:45:EA:EA:29:2A:E4:EE:26:AC:90:CF
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:32:bb:01:0d:18:ce:97:d4:b9:a4:16:fe:db:39:72:f9:6a:
         3d:7e:8e:48:86:e8:a8:3f:64:f6:fd:b8:c8:43:0b:69:28:c8:
         a3:83:8d:a7:23:43:17:29:50:ce:86:a5:6d:b2:a9:c1:94:c4:
         b6:16:fb:7b:0f:9d:5d:63:4f:93:a6:80:28:4f:6d:f1:2c:03:
         52:a8:84:26:b4:ef:c9:2a:f4:a0:d6:c1:22:20:28:8c:50:0f:
         78:d2:23:a8:c8:62:e9:05:0b:b8:f1:53:d7:e0:4c:93:6d:6b:
         f9:74:b0:5e:f5:9b:4a:bd:cc:6b:e4:ef:31:43:77:a9:de:11:
         3e:cf:74:ca:b3:41:82:1d:c4:2c:1a:4d:9c:ab:80:23:c8:1d:
         0f:cf:d2:02:a1:47:b9:24:ad:94:50:87:99:f5:5d:13:ac:02:
         d8:bc:85:0b:1f:6f:23:fa:cd:46:a5:bb:a1:f5:83:74:87:31:
         42:61:44:30:fe:c3:f1:65:95:75:b3:8f:ad:c9:4d:95:c4:87:
         5f:b7:47:02:58:8a:26:0a:0d:6b:a4:cd:fe:7c:5a:ed:4d:35:
         8d:db:55:1b:1d:79:6f:82:55:76:5f:d8:04:87:25:72:e8:7f:
         5f:ee:3e:5b:10:ca:71:71:c3:3b:a7:8a:54:5d:b5:0e:e8:80:
         c6:c7:ca:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:49 2026 by rpki-client