Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File:                     hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier:          Wa6yuIHHPUbZLJ6OACUiM73tJR06jiVt+ez/2zfgVQM=
Subject key identifier:   47:2B:3C:88:1F:AE:5D:31:B2:C8:49:42:3A:93:1B:4D:C9:FC:83:FE
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       019CE4107C9704BA8D067EBE9CA5CA3FC858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number:          186B
Signing time:             Thu 12 Mar 2026 22:00:11 +0000
Manifest this update:     Thu 12 Mar 2026 22:00:11 +0000
Manifest next update:     Fri 13 Mar 2026 22:00:11 +0000
Files and hashes:         1: 6-MYWUgNN_QLhajw01TPQypu9qo.roa (hash: u38LNGCNm7hapDrGswDbeJazlaHgAyILiY9j6QwpBsg=)
                          2: E9zZAnLobJdxCJ_CMObNo6B0tg0.roa (hash: gKx/4RJ8SdZlVgi0Sh6XpvjZo+kkGJvfp88hpXTMS3s=)
                          3: Is4ZsOkA4ognMGIQHzhjm6hHarA.roa (hash: EQqUs3Tbbc3EDtczOgdmk5Vx/6Xxwbf61H1i0BVYet0=)
                          4: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: r75+suXhy46wFoGcsDkGgxUE3fP8rjh5dxsBDxopGPU=)
                          5: piqonsXFBrG6rXRd3eemw24RFpc.roa (hash: nKq7t9jFZ72mSjyumQVPsGsNkyCxwxThmoOAWXTbJcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:10:7c:97:04:ba:8d:06:7e:be:9c:a5:ca:3f:c8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Mar 12 22:00:11 2026 GMT
            Not After : Mar 13 22:00:11 2026 GMT
        Subject: CN=472b3c881fae5d31b2c849423a931b4dc9fc83fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:d1:a7:e8:0c:1e:c0:30:20:65:6c:27:2e:
                    05:f8:8b:01:2c:d2:64:cf:3f:87:6e:70:ef:16:81:
                    08:4a:d4:8d:b8:00:81:c8:49:fd:aa:e7:04:e7:21:
                    5e:8a:99:61:d1:b9:d6:f9:0a:c9:8d:e7:d4:14:f3:
                    11:f9:5e:c1:e4:0a:12:6d:18:16:1f:b6:a4:24:6d:
                    7b:47:f8:10:8b:1e:f5:f9:d0:49:9e:01:49:0f:6f:
                    89:08:d1:20:7b:02:ac:d9:2b:76:a2:9c:7f:33:f8:
                    6a:65:3d:7f:a0:6d:fc:dd:c8:d0:2c:2d:d1:08:3b:
                    45:20:42:9c:dd:93:22:da:53:b6:88:48:de:d5:dc:
                    85:58:36:0f:53:7a:cf:d3:37:f0:a7:eb:4d:e5:46:
                    7b:c2:0c:e6:79:7b:f0:7b:df:16:a6:b9:3e:ea:32:
                    ab:9b:73:e6:ca:3f:c6:5b:2c:9d:f0:52:31:4b:ab:
                    98:ea:83:71:a4:ef:0a:4d:81:f6:d1:2d:47:a1:5e:
                    a0:16:c6:4f:de:b3:d1:8f:78:3f:aa:c3:22:8b:05:
                    61:21:ce:7d:8f:20:66:33:ee:50:aa:82:be:ed:01:
                    e5:c2:4d:9c:b7:39:94:f4:8a:ea:68:48:f8:6d:3c:
                    54:06:59:1a:0e:3b:26:d1:e1:df:2a:ac:41:b2:8f:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2B:3C:88:1F:AE:5D:31:B2:C8:49:42:3A:93:1B:4D:C9:FC:83:FE
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:22:c2:a4:f7:7a:55:41:dd:6e:53:68:b9:bf:a6:71:aa:e6:
         a3:f7:87:b3:33:b1:94:5d:f2:9d:d5:75:8b:9a:f2:5b:13:7d:
         75:86:e0:54:99:87:01:04:bf:c4:d3:38:c7:90:c4:24:2e:59:
         3b:fb:62:b6:99:5a:4d:07:34:f7:0a:74:1f:35:cb:09:c5:ec:
         99:a5:8c:b7:d3:77:1e:c1:4d:30:68:22:f2:b4:57:5e:6f:70:
         76:35:4c:6c:cd:fb:bb:b9:69:f8:f9:18:a0:91:71:47:48:36:
         b3:e2:83:ea:87:58:32:21:ac:39:bc:db:d9:6d:06:33:71:6c:
         63:4f:d0:98:f9:49:aa:52:df:72:3e:c9:10:07:4e:69:64:14:
         24:f4:95:11:8e:ef:74:32:49:34:34:17:9d:35:00:4b:e1:80:
         bf:e3:28:a4:63:fe:ae:8a:0d:4a:b5:4f:5b:68:92:4c:49:24:
         d4:88:34:81:e0:0a:d0:ff:99:76:6d:ef:2c:4f:2d:b5:81:d0:
         a1:67:5c:09:9a:f7:96:76:60:4c:42:2d:f5:52:34:5b:5a:c5:
         cc:a2:cc:b4:d3:dd:09:52:72:9d:89:3c:f7:bd:4d:c1:fd:aa:
         fe:bc:c6:4c:39:db:d1:c7:39:be:00:71:ff:f4:68:97:66:98:
         5c:fc:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:33:31 2026 by rpki-client