Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File:                     Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier:          +jH/wsEPClgMTY23VAIjGD96O+nSi6rQepuhbjW1GPE=
Subject key identifier:   2A:D0:62:07:DA:DB:D8:62:0E:2A:94:0C:24:ED:5F:6C:7D:58:D6:A3
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer:       /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial:       019DA2D319FF8D9353A05EFF7CFABE1D3887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number:          10E4
Signing time:             Sat 18 Apr 2026 23:00:36 +0000
Manifest this update:     Sat 18 Apr 2026 23:00:36 +0000
Manifest next update:     Sun 19 Apr 2026 23:00:36 +0000
Files and hashes:         1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: uXiMnUHH69ELl/YmUHieT5ueM6z13UGbIUHW9HPilbM=)
                          2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:19:ff:8d:93:53:a0:5e:ff:7c:fa:be:1d:38:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
        Validity
            Not Before: Apr 18 23:00:36 2026 GMT
            Not After : Apr 19 23:00:36 2026 GMT
        Subject: CN=2ad06207dadbd8620e2a940c24ed5f6c7d58d6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:ac:29:17:d1:a1:f3:ac:b8:5e:66:11:6e:
                    b3:b0:20:b4:67:7b:29:98:a8:cd:52:7a:9d:37:56:
                    f0:a3:4e:0d:92:ae:15:4a:32:74:3e:17:bb:a2:29:
                    09:be:c2:15:84:12:10:27:bc:d0:39:1b:8e:10:43:
                    f1:81:b3:9a:7c:0b:84:ee:c6:60:59:96:5d:ad:2a:
                    22:3e:95:9d:4d:dd:7a:a1:49:2c:23:40:7a:13:5f:
                    d2:21:bf:2b:9b:34:f6:b7:00:4e:bf:19:57:c0:34:
                    07:6b:d6:e1:75:6a:72:da:04:eb:dd:23:b4:64:a6:
                    99:fa:f0:98:e9:80:6f:32:32:1f:a2:de:8e:36:94:
                    4f:17:7b:e2:6b:d2:5f:c2:d2:fe:45:dc:88:ba:a9:
                    f0:8c:25:49:bf:35:f2:ac:43:c3:f5:81:ee:c8:5a:
                    ae:0d:f5:37:f0:41:1e:2e:69:c8:d7:f5:95:76:5e:
                    ef:d3:c1:2e:89:14:80:97:8f:38:f4:5b:18:9f:60:
                    02:bc:b7:ee:0b:a7:dd:18:14:95:2a:92:8d:d0:e2:
                    23:32:b5:b2:a8:02:50:fe:b1:ed:ac:7f:1d:fc:10:
                    96:ca:fa:1f:c0:1c:51:bb:a3:82:bc:35:5d:6d:59:
                    39:92:21:e6:bd:6b:58:45:52:d7:86:02:7f:06:db:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D0:62:07:DA:DB:D8:62:0E:2A:94:0C:24:ED:5F:6C:7D:58:D6:A3
            X509v3 Authority Key Identifier:
                keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:f8:d7:ea:62:81:de:43:5e:d1:97:af:7b:bb:b1:29:98:
         1e:3d:4e:42:61:a7:89:ee:d5:4f:06:d8:b4:b2:f3:ef:19:99:
         b9:2b:04:d6:d2:49:35:4d:ed:6d:4e:cc:7b:20:1c:da:63:4f:
         0f:33:b6:6b:ce:4c:64:03:03:bc:3c:08:29:a8:30:57:27:de:
         11:6b:f1:ce:ed:21:ca:3a:09:74:78:85:55:93:33:f6:e6:a9:
         20:94:73:16:3c:8c:c7:f2:b5:a2:f0:bf:c7:7a:5c:c3:42:5b:
         bb:82:91:c2:53:39:39:84:8d:66:44:91:4b:dd:7b:45:e8:6b:
         c5:a7:f1:f7:dc:f1:da:b5:cb:3a:72:33:58:48:52:2e:cf:92:
         41:e9:d5:d5:26:51:c7:ed:b6:f5:50:3c:88:a0:0f:70:c6:a9:
         ba:51:f8:5b:f0:12:b0:d1:20:05:45:da:de:11:94:50:14:78:
         7f:fc:28:f3:4a:b9:fa:c8:96:58:d2:77:3e:15:30:ab:17:40:
         9f:2f:03:5f:09:f1:d1:d1:2c:ee:3f:48:c8:88:fd:62:2f:c9:
         48:96:39:d6:ed:5f:15:60:73:8c:98:07:59:fe:7f:e0:bd:02:
         a3:d0:74:b2:b0:0c:23:bd:93:ed:0c:ec:f5:0f:6c:08:9e:2f:
         f0:80:ba:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i0xn/jZNToF7/fPq+HTiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi
ZjZhZjQwHhcNMjYwNDE4MjMwMDM2WhcNMjYwNDE5MjMwMDM2WjAzMTEwLwYDVQQD
EygyYWQwNjIwN2RhZGJkODYyMGUyYTk0MGMyNGVkNWY2YzdkNThkNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIysKRfRofOsuF5mEW6zsCC0Z3sp
mKjNUnqdN1bwo04Nkq4VSjJ0Phe7oikJvsIVhBIQJ7zQORuOEEPxgbOafAuE7sZg
WZZdrSoiPpWdTd16oUksI0B6E1/SIb8rmzT2twBOvxlXwDQHa9bhdWpy2gTr3SO0
ZKaZ+vCY6YBvMjIfot6ONpRPF3via9JfwtL+RdyIuqnwjCVJvzXyrEPD9YHuyFqu
DfU38EEeLmnI1/WVdl7v08EuiRSAl4849FsYn2ACvLfuC6fdGBSVKpKN0OIjMrWy
qAJQ/rHtrH8d/BCWyvofwBxRu6OCvDVdbVk5kiHmvWtYRVLXhgJ/BtsIqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrQYgfa29hiDiqUDCTtX2x9WNajMB8GA1UdIwQY
MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et
MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2
LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFj41+pi
gd5DXtGXr3u7sSmYHj1OQmGnie7VTwbYtLLz7xmZuSsE1tJJNU3tbU7MeyAc2mNP
DzO2a85MZAMDvDwIKagwVyfeEWvxzu0hyjoJdHiFVZMz9uapIJRzFjyMx/K1ovC/
x3pcw0Jbu4KRwlM5OYSNZkSRS917Rehrxafx99zx2rXLOnIzWEhSLs+SQenV1SZR
x+229VA8iKAPcMapulH4W/ASsNEgBUXa3hGUUBR4f/wo80q5+siWWNJ3PhUwqxdA
ny8DXwnx0dEs7j9IyIj9Yi/JSJY51u1fFWBzjJgHWf5/4L0Co9B0srAMI72T7Qzs
9Q9sCJ4v8IC66Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 06:57:32 2026 by rpki-client