Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File:                     RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier:          hxP96GchNV5j0W8Viptz7xeSBKirCWbGuOeGMTxkfqU=
Subject key identifier:   6D:6E:10:A6:3A:3E:EA:7E:CB:21:51:2D:24:3B:5F:F1:43:BD:6B:C2
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer:       /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial:       019D371B88F20861212E6065F673C40ABB66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number:          1527
Signing time:             Sun 29 Mar 2026 01:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:44 +0000
Files and hashes:         1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: mYekzcAlHTXSsU8Ur6ZCBeMSs7/6Ai58HYoOKJ6GhN4=)
                          2: hZKAqR6QknkFASXf8FpEd_mKZFc.roa (hash: KzMYcZGAhPvDwgQOpxUt3D4xmzyN9ctcfUksHbupIAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:88:f2:08:61:21:2e:60:65:f6:73:c4:0a:bb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
        Validity
            Not Before: Mar 29 01:00:44 2026 GMT
            Not After : Mar 30 01:00:44 2026 GMT
        Subject: CN=6d6e10a63a3eea7ecb21512d243b5ff143bd6bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:19:49:bf:64:7b:83:bb:f8:40:46:14:5c:
                    1a:ee:5e:1a:73:a4:da:42:43:77:e9:c3:e2:e7:1a:
                    43:03:5b:51:01:a8:c4:e2:3d:06:f9:dd:69:19:e6:
                    84:25:90:30:72:e5:e7:a2:bc:a8:ee:bd:3a:0f:00:
                    de:b4:f0:6a:30:c6:c8:88:fa:9c:86:0b:cc:d9:dd:
                    d6:a5:c0:1e:85:1d:29:d5:38:41:b4:9b:12:27:ff:
                    d7:bb:34:82:fc:f0:b9:0f:33:03:08:57:5e:a9:5d:
                    4a:fb:70:13:57:9a:8c:16:38:2c:2c:39:79:7f:26:
                    3b:e4:87:4f:f4:6e:71:48:48:2e:ae:be:02:08:0e:
                    19:5e:39:d4:96:fd:21:d8:f5:d3:10:ed:ab:a0:f3:
                    ef:bb:5d:f0:eb:c0:39:f8:65:ff:75:43:47:ae:fe:
                    e7:d7:9d:51:02:44:ee:0e:c4:b3:06:37:ec:53:73:
                    ee:46:28:b7:8a:1f:df:9a:a8:ca:75:99:10:20:51:
                    5f:15:30:ba:6b:6a:bf:d8:3e:a0:fd:1c:67:37:5e:
                    2b:b2:d8:a8:01:6f:62:a3:1e:f4:71:75:5e:04:d4:
                    9a:03:b9:84:8e:56:74:92:d5:54:17:1d:50:a0:88:
                    bf:b7:d7:0f:3a:ba:86:fc:51:d6:1c:3c:c5:74:4e:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:10:A6:3A:3E:EA:7E:CB:21:51:2D:24:3B:5F:F1:43:BD:6B:C2
            X509v3 Authority Key Identifier:
                keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:76:03:0f:e9:a5:ab:dc:10:2f:8f:9b:41:59:df:ac:77:13:
         cc:3c:78:ea:89:6a:00:49:ec:38:da:f9:14:2b:ce:5c:1b:2e:
         34:26:52:70:bb:a3:ef:61:21:32:c9:93:64:8b:07:f2:54:4a:
         56:1c:22:8c:5e:e2:c6:10:3f:1e:97:4b:f8:b4:50:83:7c:29:
         d3:0a:4f:ff:a6:69:86:55:39:a3:7c:86:7f:9f:73:24:9c:d1:
         f9:7e:e8:ad:16:85:98:24:c4:0e:9f:2f:31:71:97:2f:9c:98:
         2b:77:c2:1b:11:58:d0:a3:a4:29:f8:8d:bf:94:fe:8f:7a:8e:
         b5:f6:18:06:24:d6:66:d7:cc:7b:0f:2e:bd:96:66:0d:d5:81:
         24:cf:bd:79:d2:9e:14:5d:ab:95:ef:3f:22:ba:f8:be:e2:a2:
         7b:ba:fa:a6:d5:4c:f9:1b:a2:04:a8:3b:27:cd:d6:54:9d:47:
         8d:7b:65:5c:f8:e4:dc:db:cb:7e:d9:17:e6:d7:aa:6f:21:da:
         f3:b6:c4:6c:d2:e1:65:e1:0f:ce:4d:0d:1f:b1:c0:b9:71:c9:
         29:bf:a0:fd:27:ed:8a:f0:52:2f:98:5f:94:7c:21:fd:e1:54:
         20:1f:f5:57:a3:26:ed:3b:d8:3d:27:8b:4f:51:8a:f3:93:0d:
         90:03:ab:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G4jyCGEhLmBl9nPECrtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl
MzU1YzUwHhcNMjYwMzI5MDEwMDQ0WhcNMjYwMzMwMDEwMDQ0WjAzMTEwLwYDVQQD
Eyg2ZDZlMTBhNjNhM2VlYTdlY2IyMTUxMmQyNDNiNWZmMTQzYmQ2YmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZwZSb9ke4O7+EBGFFwa7l4ac6Ta
QkN36cPi5xpDA1tRAajE4j0G+d1pGeaEJZAwcuXnoryo7r06DwDetPBqMMbIiPqc
hgvM2d3WpcAehR0p1ThBtJsSJ//XuzSC/PC5DzMDCFdeqV1K+3ATV5qMFjgsLDl5
fyY75IdP9G5xSEgurr4CCA4ZXjnUlv0h2PXTEO2roPPvu13w68A5+GX/dUNHrv7n
151RAkTuDsSzBjfsU3PuRii3ih/fmqjKdZkQIFFfFTC6a2q/2D6g/RxnN14rstio
AW9iox70cXVeBNSaA7mEjlZ0ktVUFx1QoIi/t9cPOrqG/FHWHDzFdE7OnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1uEKY6Pup+yyFRLSQ7X/FDvWvCMB8GA1UdIwQY
MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt
MWM4Y2U3YzMzYWMwLzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw
LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3YDD+ml
q9wQL4+bQVnfrHcTzDx46olqAEnsONr5FCvOXBsuNCZScLuj72EhMsmTZIsH8lRK
VhwijF7ixhA/HpdL+LRQg3wp0wpP/6ZphlU5o3yGf59zJJzR+X7orRaFmCTEDp8v
MXGXL5yYK3fCGxFY0KOkKfiNv5T+j3qOtfYYBiTWZtfMew8uvZZmDdWBJM+9edKe
FF2rle8/Irr4vuKie7r6ptVM+RuiBKg7J83WVJ1HjXtlXPjk3NvLftkX5teqbyHa
87bEbNLhZeEPzk0NH7HAuXHJKb+g/SftivBSL5hflHwh/eFUIB/1V6Mm7TvYPSeL
T1GK85MNkAOr2Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:06 2026 by rpki-client