Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File:                     HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier:          fY05/iJoCAq7UzJ3LTwbDvFx5mgYIq1KxolCKhYv78I=
Subject key identifier:   31:46:BD:D1:01:00:3C:97:F7:8F:3E:65:2C:34:96:DB:0B:37:EB:13
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer:       /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial:       019D3A1CB2FD25DBE3779C1EF1567855DC20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number:          13DC
Signing time:             Sun 29 Mar 2026 15:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:52 +0000
Files and hashes:         1: BX-wklLdDD8XzxHJksQRCy4pE1o.roa (hash: uIUm6XT6o4/miIBu0V3ZQSH97iCpXkbo1bhxbJYRoCE=)
                          2: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: fQUdJVZiD1GpAkXr6lhKi9aG+Dh6wo5uoDJq0WU4FNI=)
                          3: il3y8Onxh5fLAIfmtOQN8b7m1WY.roa (hash: ZV1R7FC5O8+fdS5U8RdGxw7AX7F0UkiAYpEfs6LZIkI=)
                          4: p-OtpG7NAZq6sk3lKJLX_TdhJx0.roa (hash: 6ANbLODWbSBjq2JK8gNSvCXV+On0WKNrg0hi8XNLiSM=)
                          5: zqqNdPd2jN90nFzH_xKr7SBp6k0.roa (hash: 4bJ5x444099qNpfBFVyMLNFC0y78xdbHZoBQBCBD0uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:b2:fd:25:db:e3:77:9c:1e:f1:56:78:55:dc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
        Validity
            Not Before: Mar 29 15:00:52 2026 GMT
            Not After : Mar 30 15:00:52 2026 GMT
        Subject: CN=3146bdd101003c97f78f3e652c3496db0b37eb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:1d:1e:1c:8f:af:10:12:63:b3:9a:a3:43:
                    02:3a:ec:05:eb:ef:6e:7d:f2:03:20:66:2d:e2:6f:
                    43:c7:8e:3d:a5:03:16:0a:13:5f:1d:05:35:13:8d:
                    98:1a:73:56:20:83:a2:10:97:e9:bc:71:d2:03:89:
                    67:c0:5e:a7:41:5e:c9:e7:6a:cd:db:c6:1e:8c:fb:
                    d2:da:b8:5a:ff:0e:92:8f:a4:01:76:aa:c1:bd:5c:
                    99:1c:6e:ba:3b:78:c9:64:7c:8d:7c:2d:06:bf:9b:
                    e1:9e:26:38:ed:0b:41:17:f1:81:e4:70:38:96:75:
                    7b:94:e1:e8:e2:69:fc:36:f7:37:7e:4f:10:d9:ca:
                    68:1b:c7:eb:9e:f6:c5:38:5f:2b:af:e3:f0:bf:1c:
                    fb:5f:15:c3:bc:89:90:0a:e1:27:8b:d9:72:9c:16:
                    e3:29:9a:f2:70:ed:ab:bb:e4:7f:17:6f:0f:39:31:
                    11:36:62:fa:32:29:7a:95:f3:7c:1a:18:4a:cd:71:
                    20:fc:c0:be:66:b5:a2:99:39:7b:d4:4e:ec:5c:6f:
                    f7:c8:7e:07:c4:20:81:93:77:f2:df:1d:dd:65:80:
                    ba:eb:f6:ad:dc:04:6d:27:d4:54:d9:58:d6:b4:e6:
                    0b:f5:93:0b:54:7d:87:81:a8:dc:be:9c:b1:c8:27:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:46:BD:D1:01:00:3C:97:F7:8F:3E:65:2C:34:96:DB:0B:37:EB:13
            X509v3 Authority Key Identifier:
                keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:c4:2d:9c:62:02:2f:c0:00:3e:5e:97:f1:a3:0f:33:26:
         b9:1c:25:2f:e5:02:6f:32:15:c9:40:6a:c3:e3:2e:0c:90:45:
         8b:ab:60:3f:f2:15:64:f3:d1:f0:05:fd:47:3c:57:36:d1:ff:
         71:af:b3:d0:54:6b:c0:dd:dd:ae:6c:98:1a:90:bc:d3:a9:4b:
         53:f6:0c:49:8e:96:27:00:a0:58:07:bd:72:14:3f:42:fd:a8:
         68:cb:8a:c5:fa:93:19:a0:2b:0e:86:0a:39:f8:f6:d3:5a:cd:
         0d:34:4e:d1:bc:65:d8:ad:ea:66:7f:73:ea:82:51:d2:20:61:
         fb:13:9f:c2:ba:3d:11:d5:2a:6b:28:d5:87:3d:68:c3:c1:41:
         6b:0f:27:72:99:95:84:9f:eb:7f:a0:71:5a:88:8e:31:f2:e8:
         9c:77:ba:a3:ca:c9:18:c6:84:6e:ca:f0:8b:63:f4:52:6c:55:
         f4:03:98:ba:c3:ac:c0:4c:98:03:b5:87:c1:ef:3e:39:f3:ea:
         76:e8:e7:84:f6:68:d8:5b:fc:4e:f7:d1:6c:b9:34:4d:ca:96:
         75:21:d0:26:6d:73:26:7a:67:e9:2b:4d:f0:41:b6:ca:09:29:
         d3:45:b9:58:9b:20:0c:d6:c4:5b:e5:04:90:35:3d:b7:ac:94:
         eb:45:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:21 2026 by rpki-client