Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File:                     h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier:          EtT0JeflaOLAp09nCAeeUkFC9/YLB9gBlYubkXquzUA=
Subject key identifier:   EE:E1:A2:62:F4:EA:10:D9:26:FA:9F:C8:69:1D:6E:D5:8F:1C:EC:3A
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer:       /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial:       019E3072896187E3781C587F8ED0BAC62371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number:          04DB
Signing time:             Sat 16 May 2026 11:01:13 +0000
Manifest this update:     Sat 16 May 2026 11:01:13 +0000
Manifest next update:     Sun 17 May 2026 11:01:13 +0000
Files and hashes:         1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: GQ2iZlcIjGL92CcR19bcGSZKHa2EN80WNI38vF17cvY=)
                          2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:89:61:87:e3:78:1c:58:7f:8e:d0:ba:c6:23:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
        Validity
            Not Before: May 16 11:01:13 2026 GMT
            Not After : May 17 11:01:13 2026 GMT
        Subject: CN=eee1a262f4ea10d926fa9fc8691d6ed58f1cec3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:29:28:21:09:2f:51:13:d8:e4:07:3c:1a:
                    96:79:16:06:3e:94:70:b3:78:82:34:1e:60:8e:46:
                    ca:08:09:92:80:cc:9e:04:33:6b:63:09:ef:fd:3b:
                    f7:35:20:3d:56:cf:2f:fc:c6:e9:c4:77:26:9a:27:
                    25:c9:ae:8b:99:d0:d6:30:5a:61:e9:38:39:3d:8e:
                    e1:c2:a0:07:f0:f2:ce:68:cd:00:8d:6d:cc:e9:ec:
                    1e:67:b7:77:75:2e:db:67:86:7f:52:19:53:a5:41:
                    57:e8:8f:8c:24:7d:24:71:66:b8:5a:bd:97:bb:62:
                    67:63:0f:d2:00:fc:65:8c:ce:43:81:8c:3c:0b:b2:
                    0a:61:87:c0:ba:78:5b:c2:11:ec:54:2f:c2:1e:09:
                    3d:c8:6a:bb:09:de:6a:c5:65:55:b9:9f:72:7c:3c:
                    67:10:da:06:47:7c:e8:79:78:e0:cb:97:94:3d:5a:
                    08:3b:10:f4:21:55:a0:8a:2b:06:25:a4:ba:ef:c3:
                    ee:57:91:a5:72:6c:42:9a:c3:bf:7c:1e:ed:7e:84:
                    b0:14:96:a3:ec:26:09:d4:af:3f:57:5d:ac:a1:c8:
                    e9:12:3e:0a:cd:0b:14:05:86:e5:ec:b5:ae:23:4e:
                    3c:b8:6a:be:95:40:92:ac:13:76:23:13:27:66:65:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E1:A2:62:F4:EA:10:D9:26:FA:9F:C8:69:1D:6E:D5:8F:1C:EC:3A
            X509v3 Authority Key Identifier:
                keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6d:4f:3c:d8:65:2e:04:23:f6:4a:fe:fb:39:e4:26:ad:e4:
         8f:2f:28:3b:c8:bc:de:b6:3e:09:62:f2:b4:90:9d:5b:cf:47:
         3a:3b:70:0d:a0:ce:73:25:c5:0e:06:8a:52:68:b0:04:e8:4f:
         3b:33:39:b6:c6:eb:05:8e:b2:ac:45:5b:d1:50:e1:4e:2b:c8:
         5b:25:21:0f:9a:63:3a:d6:b9:c7:c0:6e:74:ac:58:5e:aa:c1:
         dd:ce:1f:f6:63:cc:80:8d:34:6b:da:51:3c:1c:8a:d7:b5:2e:
         21:9b:2e:fb:12:f4:bc:f3:59:91:89:35:4e:c1:b4:4a:89:41:
         df:ab:1f:63:98:7d:d8:ee:2d:ee:6e:8a:95:2f:36:4e:50:0b:
         ad:ba:92:5c:ac:11:9f:a0:a1:d4:1d:1b:54:7a:d9:bc:19:05:
         6d:95:c2:52:86:bf:c1:1d:db:0b:64:bc:1c:47:25:49:1a:ee:
         13:37:40:9e:04:d1:b7:cd:9b:78:ce:39:af:9b:ba:d1:fc:31:
         8a:d1:17:c7:ea:de:3b:90:98:9f:f0:64:cd:9d:28:e2:f4:8e:
         f5:3a:49:e2:2a:79:4c:37:de:47:99:4d:4e:ee:6b:e4:f8:be:
         ac:52:3a:82:a5:85:36:1d:60:6e:ce:f9:8c:d4:3e:11:df:a9:
         fa:a9:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:34 2026 by rpki-client