Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File:                     hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier:          rBFP/Db2+YGv/A/h6KGeBuc6YQElrIFL5oXK2dNwtcg=
Subject key identifier:   46:CC:47:45:9D:07:74:58:35:78:4C:D9:D4:0E:E8:38:D4:64:0A:6B
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       019DCFAC53226AD2F8517E7DEF4FF8EAA65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number:          18E5
Signing time:             Mon 27 Apr 2026 16:01:10 +0000
Manifest this update:     Mon 27 Apr 2026 16:01:10 +0000
Manifest next update:     Tue 28 Apr 2026 16:01:10 +0000
Files and hashes:         1: 6-MYWUgNN_QLhajw01TPQypu9qo.roa (hash: u38LNGCNm7hapDrGswDbeJazlaHgAyILiY9j6QwpBsg=)
                          2: E9zZAnLobJdxCJ_CMObNo6B0tg0.roa (hash: gKx/4RJ8SdZlVgi0Sh6XpvjZo+kkGJvfp88hpXTMS3s=)
                          3: Is4ZsOkA4ognMGIQHzhjm6hHarA.roa (hash: EQqUs3Tbbc3EDtczOgdmk5Vx/6Xxwbf61H1i0BVYet0=)
                          4: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: m9J3URT91XYTGwBNrxoyMX4QaKbdExPVLrGelCGPYgU=)
                          5: piqonsXFBrG6rXRd3eemw24RFpc.roa (hash: nKq7t9jFZ72mSjyumQVPsGsNkyCxwxThmoOAWXTbJcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:ac:53:22:6a:d2:f8:51:7e:7d:ef:4f:f8:ea:a6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Apr 27 16:01:10 2026 GMT
            Not After : Apr 28 16:01:10 2026 GMT
        Subject: CN=46cc47459d07745835784cd9d40ee838d4640a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:8d:a7:33:05:1e:94:aa:d5:09:6c:0d:04:
                    cf:c2:15:28:1f:0b:90:75:a0:81:4e:41:91:2a:0d:
                    b8:d7:99:ca:12:d0:a6:96:93:4e:f5:69:80:10:1f:
                    98:33:39:a4:c4:f7:57:9f:09:80:34:67:5e:59:77:
                    06:05:50:fe:06:00:65:f2:44:54:25:f9:f4:b2:a1:
                    d6:11:03:2a:09:0e:5b:2b:51:19:2f:07:f1:fe:44:
                    5d:ae:21:2f:42:48:90:ce:ee:85:d0:e3:7b:40:45:
                    9a:84:e4:aa:65:ec:c9:ba:9c:f2:60:ef:30:f3:64:
                    d2:39:4d:74:a1:93:10:d4:6b:7e:48:9e:83:ee:4b:
                    80:b3:55:75:56:45:b5:6c:87:54:38:06:b8:ea:20:
                    6b:cc:42:e5:7c:58:12:8b:45:45:5b:97:61:84:0e:
                    20:68:0f:4c:b9:a8:68:a6:74:b9:c6:35:20:77:6a:
                    81:80:b5:2b:9a:5f:8c:15:37:50:43:ed:2b:8a:ce:
                    ef:b7:b8:ee:e0:57:53:54:f9:c4:44:12:8e:84:6d:
                    fa:9e:b6:d9:5c:d9:d4:33:dd:50:d9:af:93:be:c6:
                    32:8b:fc:e0:24:d2:ee:56:ea:55:4c:02:ff:70:66:
                    b3:a9:2e:28:67:ce:26:72:1d:07:3b:88:ef:c2:b0:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CC:47:45:9D:07:74:58:35:78:4C:D9:D4:0E:E8:38:D4:64:0A:6B
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:b8:44:96:bf:bd:d8:db:b7:35:e8:4d:4f:49:00:ea:1e:
         dc:5f:9b:f7:8e:6d:6f:8f:91:20:46:8b:ce:01:a7:11:d4:42:
         04:14:82:26:89:d8:52:16:7b:5c:d1:d3:8b:f8:09:b7:0e:b6:
         0f:8c:a9:f6:cb:d1:b8:3f:60:e4:75:f9:3e:3b:d9:b2:78:f1:
         96:6b:15:c9:f9:28:e8:c3:90:c0:4a:c4:0f:00:e1:1c:bd:cb:
         5b:ac:97:cd:60:a0:c1:7b:45:0d:89:29:44:33:68:c2:da:13:
         35:38:d6:1b:aa:7b:9f:92:bd:91:f8:da:f4:8c:db:bb:55:d4:
         dd:b8:10:e7:ad:98:ff:54:19:c0:82:dd:48:b4:73:93:52:79:
         75:60:56:99:f8:50:c5:c3:4e:f9:54:3e:79:28:37:f8:fe:55:
         b3:b9:02:fc:c5:c2:db:9e:d4:d8:c3:4c:c7:fb:94:bd:dc:20:
         f9:9f:1a:ab:18:88:22:48:9e:df:6a:cc:22:ff:b7:de:f8:ad:
         a7:9d:cd:f8:45:4d:57:d3:f3:b6:20:a8:df:e7:2d:d2:1a:3a:
         c8:06:44:8f:a8:3c:b1:56:12:74:69:1b:8d:3e:4a:08:e8:d5:
         2c:4c:55:31:c4:48:0a:c3:6a:b9:19:0b:f9:18:95:06:22:93:
         75:f0:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:39:57 2026 by rpki-client