Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File:                     HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier:          KUNsqNoYGzbhiw07qJ+9mFROE5+62Yib0bikygyEkKQ=
Subject key identifier:   00:BD:73:EF:B4:28:8F:98:D9:56:95:ED:EA:CF:9D:2B:D3:C7:9B:59
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer:       /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial:       019EBB0F7FDDD8E3BFE4F73993144BF2B3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number:          18EA
Signing time:             Fri 12 Jun 2026 09:00:15 +0000
Manifest this update:     Fri 12 Jun 2026 09:00:15 +0000
Manifest next update:     Sat 13 Jun 2026 09:00:15 +0000
Files and hashes:         1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: aUKGZhUNRmD2ja4bpEF4h3KDRsjKH5Q1OO4YdM5aeQg=)
                          2: LtF7nKZF5Eu_SugtCNfVkUGiFHM.roa (hash: DT5yTfPTZI2KTOuvzB4Bd0By5xLBRBjLmkPSrqIV9B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:0f:7f:dd:d8:e3:bf:e4:f7:39:93:14:4b:f2:b3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
        Validity
            Not Before: Jun 12 09:00:15 2026 GMT
            Not After : Jun 13 09:00:15 2026 GMT
        Subject: CN=00bd73efb4288f98d95695edeacf9d2bd3c79b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:9e:56:c0:c5:b0:00:06:b1:41:37:27:5d:
                    cc:ef:61:4b:6e:f4:4c:9d:52:ea:59:b6:e0:20:c4:
                    29:be:d8:14:12:6c:64:2e:b0:f2:28:6b:27:5f:04:
                    88:4b:bc:bc:9c:f7:3a:a5:5e:f3:ad:63:92:df:34:
                    1a:31:93:ea:88:d4:b3:39:31:b0:2c:e0:d6:28:1b:
                    84:b2:18:10:b2:3c:4b:d6:47:e3:be:4e:69:b3:72:
                    bb:fc:1a:e0:d7:24:da:25:4c:5d:a9:0d:a6:22:80:
                    c2:38:e7:93:bc:89:dc:27:c7:fe:f4:ca:98:ab:2b:
                    42:dc:61:5a:eb:0e:d9:74:8f:e5:b4:72:82:e8:20:
                    cd:b2:88:84:62:1b:7a:68:9e:90:c5:a1:d3:c1:ad:
                    97:79:2e:66:03:b7:23:5b:a8:29:d8:f7:35:48:bb:
                    8b:84:6a:82:c1:44:21:d3:79:4d:f3:57:43:ec:bd:
                    36:cf:53:fc:51:8e:5a:77:16:9e:22:0a:e0:3c:bb:
                    83:0b:19:9c:69:f9:7d:c9:14:78:53:e7:32:7f:02:
                    29:e6:da:b3:a1:06:76:8a:ce:5a:43:22:9d:26:06:
                    65:5d:0c:ba:91:7d:2e:d3:e7:65:43:6e:e2:cc:65:
                    fd:2b:54:71:7c:fc:84:48:6f:57:02:71:36:6b:bd:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BD:73:EF:B4:28:8F:98:D9:56:95:ED:EA:CF:9D:2B:D3:C7:9B:59
            X509v3 Authority Key Identifier:
                keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c5:3d:47:84:e0:1f:87:20:2a:96:d2:80:ad:b8:0f:a8:05:
         a8:17:5c:24:68:c2:88:0c:7e:c7:b8:32:93:91:e9:cb:0f:67:
         41:55:c8:b6:c0:8f:b3:32:a9:d6:9c:23:25:e6:fe:bd:87:34:
         49:2b:98:6c:40:3b:51:66:b7:52:6a:1a:3c:e0:f1:17:fa:54:
         68:98:c6:dc:a5:cc:ed:b4:cf:93:5f:48:28:13:6a:ea:06:36:
         85:4b:0a:3a:f3:e5:c3:e0:4c:58:d4:63:f9:88:8c:aa:a3:84:
         08:c3:09:57:74:cf:ec:7a:7d:d7:93:c7:93:d7:71:9d:4f:9b:
         73:6f:28:f8:97:a0:01:ac:a1:7d:2a:1b:c7:17:bc:d2:ad:ea:
         ad:52:27:04:8c:5a:b9:d9:d3:94:ab:c8:d2:ac:d2:a1:f2:e9:
         af:ab:ea:5a:f9:0b:b1:3d:6c:9e:34:60:c7:77:47:22:43:c7:
         33:1f:d6:67:8a:04:63:77:ee:99:70:e4:94:21:22:45:89:3c:
         11:c8:20:3a:ea:50:11:13:f0:21:9c:4f:39:44:0e:44:fe:fe:
         9a:8f:c2:39:bf:15:5e:5d:fc:67:0a:45:93:a7:e0:12:48:46:
         bf:cf:4c:9e:02:cb:5d:9d:6d:30:84:aa:66:00:22:fc:6f:85:
         73:0a:b8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:24:51 2026 by rpki-client