Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          IHGsKje0LKoHPIoOISU9+rieCv75KAEUcHZiu3bbwvk=
Subject key identifier:   BE:3D:24:B6:E2:0D:4E:80:A3:4C:0E:75:97:A8:2D:E5:BA:7B:C7:F3
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       019D386689B9B59EB1F1B9DAD566386E89A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          14EF
Signing time:             Sun 29 Mar 2026 07:02:17 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:17 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:17 +0000
Files and hashes:         1: Kix4kTPQLQIQBS24-RxgbmJP4uM.roa (hash: IZRFChFiccTGrMi/xaHD/Y4tJtbN4JDWbyxQCJ6ZGnE=)
                          2: PjKNrzs98ZdtJ-2groduxlQr3TI.roa (hash: AGUANunYg5ZMjpAMIYuWSYyo7zh4erXZq7j8d3Oabq8=)
                          3: U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa (hash: nQFt4KKc4aLyiGsSy8KXsL646+IOodr1L6IOWwHG5ek=)
                          4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: KKqbGbRayTMAajs+RX9XJCvdVYerGGIFl24UgJFO9ck=)
                          5: k_1EWr6TT4OeQM7j9nrbpaIqcOA.roa (hash: 2HdlKCer6OR1eYI5oco+zFvSBQWIdH/6nbjqpzGMvtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:89:b9:b5:9e:b1:f1:b9:da:d5:66:38:6e:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Mar 29 07:02:17 2026 GMT
            Not After : Mar 30 07:02:17 2026 GMT
        Subject: CN=be3d24b6e20d4e80a34c0e7597a82de5ba7bc7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:65:17:c7:20:fd:34:27:30:cd:f7:a5:fa:
                    e3:9e:15:9d:8d:37:ed:f6:c8:88:4f:70:c9:68:e1:
                    6f:33:4e:cb:ea:2d:63:60:b6:89:bf:ae:da:da:8a:
                    cc:95:90:2e:9f:67:95:fe:80:a3:d5:fc:c4:bb:e3:
                    9c:16:f4:68:62:2f:55:0c:c1:49:b8:0e:6b:e6:94:
                    63:fd:8a:9b:6c:7f:34:3c:4f:25:b0:ee:3d:44:41:
                    a9:08:4b:7e:8d:36:b5:4b:fa:93:b0:05:6d:21:74:
                    4a:14:b4:a5:be:d8:f5:a1:18:b9:49:81:6d:8c:ce:
                    ba:3b:3e:cc:4f:34:72:35:e7:16:f6:77:ba:8e:b4:
                    45:d8:0a:30:cc:09:3e:c0:27:bf:3c:f3:a6:8c:68:
                    be:ed:eb:8b:ec:05:a9:ae:f3:7c:85:f9:a1:35:2e:
                    bb:02:76:0a:2d:2b:ea:31:98:7a:00:12:5a:af:9c:
                    7d:2b:67:44:33:4e:a8:cf:59:ba:a7:95:d5:37:90:
                    8d:45:3f:ce:c8:1c:1f:71:4c:d6:d0:95:0b:4a:87:
                    f5:5c:e8:c8:7b:2e:f8:ef:e1:53:30:eb:35:dd:3b:
                    3d:48:87:fc:16:46:e1:85:b8:2f:3d:ed:1f:11:90:
                    a7:a0:bd:c5:d1:50:df:ee:49:da:8f:96:1c:ad:c2:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3D:24:B6:E2:0D:4E:80:A3:4C:0E:75:97:A8:2D:E5:BA:7B:C7:F3
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:98:a2:63:72:78:1c:2f:47:34:84:b6:3f:8a:0f:fc:44:7c:
         7f:a0:40:dc:0f:6b:8d:e3:35:d8:1a:ea:ca:42:f8:dd:bc:16:
         00:31:16:7f:99:25:1a:52:05:11:19:fa:bc:1d:21:64:37:9d:
         e2:57:19:9c:5d:3c:2f:ef:02:97:a4:a3:19:d6:9c:5c:03:e8:
         68:85:18:7f:11:93:aa:a0:44:d2:ef:3d:5d:1f:ff:69:54:db:
         f3:5f:8a:fa:0b:69:66:b7:0c:70:dd:11:08:37:9e:d5:1e:39:
         ed:52:a1:7d:49:dd:c9:20:7f:87:19:f5:24:5a:4d:a7:97:e7:
         eb:4b:e6:e7:86:cc:e0:5c:17:45:38:49:0e:1d:4e:5c:f7:12:
         f3:ab:ec:cd:52:dd:fb:e7:0f:e4:30:71:1b:37:d0:c8:39:ea:
         3c:17:f9:2b:bd:1d:0c:70:2c:41:ee:e4:16:32:26:6c:65:4e:
         9a:38:bd:2b:fd:c0:35:f1:57:a1:22:c5:fc:b6:de:dd:bf:14:
         ea:18:e1:45:23:61:4d:75:0b:da:a4:f2:3a:04:26:67:76:af:
         3e:2e:8a:7d:fc:69:d0:42:62:46:d6:06:87:2f:31:b1:9e:15:
         d1:9d:8b:55:7d:df:8d:1c:4c:4e:1e:2b:c8:9f:a8:c3:51:52:
         ce:ea:87:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zom5tZ6x8bna1WY4bomgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YzE3MTAyYjZlOTJlMjkyZWM4YWNhZjY1OWUzYzI5MGE4
ZDBiNjgwHhcNMjYwMzI5MDcwMjE3WhcNMjYwMzMwMDcwMjE3WjAzMTEwLwYDVQQD
EyhiZTNkMjRiNmUyMGQ0ZTgwYTM0YzBlNzU5N2E4MmRlNWJhN2JjN2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRBlF8cg/TQnMM33pfrjnhWdjTft
9siIT3DJaOFvM07L6i1jYLaJv67a2orMlZAun2eV/oCj1fzEu+OcFvRoYi9VDMFJ
uA5r5pRj/YqbbH80PE8lsO49REGpCEt+jTa1S/qTsAVtIXRKFLSlvtj1oRi5SYFt
jM66Oz7MTzRyNecW9ne6jrRF2AowzAk+wCe/PPOmjGi+7euL7AWprvN8hfmhNS67
AnYKLSvqMZh6ABJar5x9K2dEM06oz1m6p5XVN5CNRT/OyBwfcUzW0JULSof1XOjI
ey747+FTMOs13Ts9SIf8FkbhhbgvPe0fEZCnoL3F0VDf7knaj5YcrcKXOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL49JLbiDU6Ao0wOdZeoLeW6e8fzMB8GA1UdIwQY
MBaAFITBcQK26S4pLsisr2WePCkKjQtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTkt
ZDU4M2Y5YTY2ZTNiLzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTktZDU4M2Y5YTY2ZTNi
LzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0piiY3J4
HC9HNIS2P4oP/ER8f6BA3A9rjeM12BrqykL43bwWADEWf5klGlIFERn6vB0hZDed
4lcZnF08L+8Cl6SjGdacXAPoaIUYfxGTqqBE0u89XR//aVTb81+K+gtpZrcMcN0R
CDee1R457VKhfUndySB/hxn1JFpNp5fn60vm54bM4FwXRThJDh1OXPcS86vszVLd
++cP5DBxGzfQyDnqPBf5K70dDHAsQe7kFjImbGVOmji9K/3ANfFXoSLF/Lbe3b8U
6hjhRSNhTXUL2qTyOgQmZ3avPi6Kffxp0EJiRtYGhy8xsZ4V0Z2LVX3fjRxMTh4r
yJ+ow1FSzuqHgA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:34 2026 by rpki-client