Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File:                     HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier:          3etopZ/pv+yRAOXGtGPB1GOmM+BxHZbPyJqUx9+nFAY=
Subject key identifier:   06:4A:1A:3B:07:6B:B8:E9:CA:7A:49:4C:C8:17:D1:DD:74:3F:39:2D
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer:       /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial:       019EB8B3DE69644F307C88D76928667555AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number:          0835
Signing time:             Thu 11 Jun 2026 22:00:56 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:56 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:56 +0000
Files and hashes:         1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: cSF9TVa/ZbOyeotZrLWqkdjvo/Qpn7QXeWp8tB/4iR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:de:69:64:4f:30:7c:88:d7:69:28:66:75:55:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
        Validity
            Not Before: Jun 11 22:00:56 2026 GMT
            Not After : Jun 12 22:00:56 2026 GMT
        Subject: CN=064a1a3b076bb8e9ca7a494cc817d1dd743f392d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:ca:34:87:c9:ab:3c:94:6c:c5:45:24:84:
                    ef:e0:7b:b6:6f:07:3b:1b:3b:e6:f6:ca:62:85:56:
                    4e:ee:2a:1e:4e:15:36:dd:15:36:62:11:9c:1e:67:
                    29:25:c5:d8:bf:00:04:2f:d5:fb:89:b7:6f:34:db:
                    e1:0e:3d:e5:65:96:a5:1d:27:79:b4:a0:00:e5:14:
                    cb:09:0e:42:b8:c5:e8:41:7a:1c:ef:78:e6:d9:6b:
                    f0:47:f9:61:72:b4:33:da:1b:e4:0b:e1:e3:de:9e:
                    18:5f:ee:e4:34:c3:b8:a3:b7:a9:68:cb:7d:b5:da:
                    06:7a:0e:98:72:62:57:c8:e5:81:7b:fa:e0:37:c4:
                    9e:bf:72:8f:d9:28:f6:30:21:34:50:08:30:8e:74:
                    16:87:c4:80:d2:9e:52:37:d2:46:a5:a3:44:ed:0c:
                    3e:96:f0:73:b8:80:e9:d2:15:58:f5:88:37:3f:c5:
                    b7:e0:9b:ef:9d:94:0e:65:f7:d3:8a:60:f8:b9:df:
                    f7:fa:07:33:f6:d4:74:f8:88:60:4c:0f:02:04:d9:
                    93:2a:2b:55:62:35:f1:20:45:20:2f:06:43:43:71:
                    d2:1f:76:d6:d9:da:96:6b:33:dd:d9:0c:d4:89:b4:
                    48:8e:c5:80:ff:47:9f:39:f4:3f:fc:41:9f:f6:c8:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4A:1A:3B:07:6B:B8:E9:CA:7A:49:4C:C8:17:D1:DD:74:3F:39:2D
            X509v3 Authority Key Identifier:
                keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:31:1d:4e:55:ea:48:39:82:0b:a5:1c:91:ed:14:65:56:99:
         d5:27:44:d4:d9:33:67:99:98:65:a0:7d:d8:e5:f7:d1:b9:aa:
         43:3a:94:f7:06:6b:aa:8e:7c:57:c4:c9:ef:b7:81:89:ca:fa:
         96:4e:33:2d:61:71:9f:11:69:7e:4a:85:18:52:f4:d6:89:5f:
         0c:21:fa:85:a3:5b:5d:46:37:4c:90:1e:7f:69:43:fd:63:a5:
         a2:66:69:14:58:a4:ec:8f:cd:82:43:98:21:61:91:69:c9:c8:
         25:1d:43:ed:33:94:c8:13:5d:2e:f2:da:19:bd:e0:7a:62:cd:
         af:af:26:a8:b6:58:8c:f9:55:74:76:0c:d0:9a:82:61:19:f0:
         9a:3b:51:8a:df:cb:59:82:d3:a2:ea:8c:9b:ad:c9:73:fd:8e:
         f5:81:7a:75:ca:3e:e7:90:3d:ff:49:60:d8:c2:03:b6:da:b4:
         54:31:71:bb:75:7b:c2:47:3f:a9:12:74:24:b1:40:ec:87:20:
         d9:d2:ad:54:c3:ac:6e:29:e0:a5:9a:a3:41:10:14:fe:3a:06:
         f2:92:e0:35:c7:af:f2:60:b0:60:70:2d:09:fb:d4:16:06:32:
         d7:e5:1e:cd:60:6e:64:41:c3:a3:c8:47:e6:fc:e1:4d:fd:d8:
         7f:5b:0d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64s95pZE8wfIjXaShmdVWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzI1NTVjNjFkM2QyMjllMmM0YTIzMzdkNzVmYTUzZjZm
MmIyYmMwHhcNMjYwNjExMjIwMDU2WhcNMjYwNjEyMjIwMDU2WjAzMTEwLwYDVQQD
EygwNjRhMWEzYjA3NmJiOGU5Y2E3YTQ5NGNjODE3ZDFkZDc0M2YzOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCTKNIfJqzyUbMVFJITv4Hu2bwc7
Gzvm9spihVZO7ioeThU23RU2YhGcHmcpJcXYvwAEL9X7ibdvNNvhDj3lZZalHSd5
tKAA5RTLCQ5CuMXoQXoc73jm2WvwR/lhcrQz2hvkC+Hj3p4YX+7kNMO4o7epaMt9
tdoGeg6YcmJXyOWBe/rgN8Sev3KP2Sj2MCE0UAgwjnQWh8SA0p5SN9JGpaNE7Qw+
lvBzuIDp0hVY9Yg3P8W34JvvnZQOZffTimD4ud/3+gcz9tR0+IhgTA8CBNmTKitV
YjXxIEUgLwZDQ3HSH3bW2dqWazPd2QzUibRIjsWA/0efOfQ//EGf9sgu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZKGjsHa7jpynpJTMgX0d10PzktMB8GA1UdIwQY
MBaAFB0yVVxh09Ip4sSiM311+lP28rK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAt
YTc5ZjlmZWVmMDBhLzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAtYTc5ZjlmZWVmMDBh
LzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTEdTlXq
SDmCC6Ucke0UZVaZ1SdE1NkzZ5mYZaB92OX30bmqQzqU9wZrqo58V8TJ77eBicr6
lk4zLWFxnxFpfkqFGFL01olfDCH6haNbXUY3TJAef2lD/WOlomZpFFik7I/NgkOY
IWGRacnIJR1D7TOUyBNdLvLaGb3gemLNr68mqLZYjPlVdHYM0JqCYRnwmjtRit/L
WYLTouqMm63Jc/2O9YF6dco+55A9/0lg2MIDttq0VDFxu3V7wkc/qRJ0JLFA7Icg
2dKtVMOsbingpZqjQRAU/joG8pLgNcev8mCwYHAtCfvUFgYy1+UezWBuZEHDo8hH
5vzhTf3Yf1sNnA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:50:29 2026 by rpki-client