Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          /R/e9AeGhWVOB3JEZ4//EncXYpWW7XAi4CraAZCj8Zo=
Subject key identifier:   DD:DC:F4:54:EA:0C:48:78:C8:63:87:3D:C5:B7:E2:0D:C4:4D:DA:ED
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       019E062CF5BAE83F26E66FD703404710BF21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          15D4
Signing time:             Fri 08 May 2026 06:01:10 +0000
Manifest this update:     Fri 08 May 2026 06:01:10 +0000
Manifest next update:     Sat 09 May 2026 06:01:10 +0000
Files and hashes:         1: 4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa (hash: TQ6l7XAp2vjcp5JOmsdpz5IqQGsnKehqiFiPx6igx/8=)
                          2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
                          3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
                          4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: gdyGv5J6vUb/boQVlgFjl1H35gwB4xZhN8UCFwMPx2k=)
                          5: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
                          6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
                          7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
                          8: vdZ7NAZKpOOWfxeuOtoKVqSmi9o.roa (hash: nGN4JdghU2JG9U+xki8YfeD2LkJmHUGqq8eet8nt3TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 May 2026 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:06:2c:f5:ba:e8:3f:26:e6:6f:d7:03:40:47:10:bf:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: May  8 06:01:10 2026 GMT
            Not After : May  9 06:01:10 2026 GMT
        Subject: CN=dddcf454ea0c4878c863873dc5b7e20dc44ddaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:87:97:38:57:16:b1:ea:5b:e0:7e:3d:dc:
                    4d:9b:c1:c9:dd:b2:37:98:5f:4f:7c:58:c8:e6:f3:
                    4b:72:a4:bc:e2:04:cb:fb:72:ca:97:03:e6:a8:f9:
                    22:9d:fd:7c:80:d1:1a:33:86:fc:c5:39:71:98:f0:
                    77:05:e1:70:3a:48:b7:9b:0e:e7:6c:b6:9e:4c:09:
                    3d:2b:b2:ed:f8:e8:d1:f7:bb:4c:cd:16:ab:c5:38:
                    28:1f:06:c7:81:62:f8:8a:7c:97:90:ea:4a:51:d7:
                    1b:e2:aa:4f:56:78:ac:f7:02:57:a8:17:6e:07:aa:
                    0a:f7:16:c9:57:6a:80:de:e3:84:0c:f8:25:bd:4a:
                    54:ce:c5:cb:e1:a0:f3:f1:a3:0c:0b:36:f1:6d:52:
                    e3:ce:e3:8c:95:a1:79:a1:04:18:03:65:74:34:93:
                    92:cb:9f:5c:e8:3b:d9:8b:19:ed:f5:c6:c5:62:8d:
                    f9:f5:c8:6e:a0:8e:ec:5f:af:14:ab:04:a5:96:8a:
                    e1:df:35:ac:d4:00:fc:0a:b9:f8:6b:be:26:50:de:
                    d2:8e:e8:a0:9a:3e:64:df:29:64:74:3f:f8:f3:1e:
                    36:2e:d5:b2:27:60:30:41:30:de:c4:4c:12:5e:30:
                    8b:ca:02:6f:02:85:c5:fc:5f:59:39:b1:4e:d5:97:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DC:F4:54:EA:0C:48:78:C8:63:87:3D:C5:B7:E2:0D:C4:4D:DA:ED
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:13:27:42:fd:71:4e:3e:7f:bb:6d:ce:bd:66:dd:f7:79:d2:
         1a:78:46:22:04:0b:a2:d7:57:98:5f:fb:1d:0b:35:2c:28:3c:
         c0:45:ce:bb:31:e8:cc:74:18:58:9b:04:6b:85:86:1a:7d:61:
         4f:5f:8d:4e:08:8b:86:42:87:30:40:8d:0f:62:8b:8a:de:64:
         cf:3d:fe:99:22:4a:d4:e9:2c:96:f4:50:5f:12:ac:2e:26:a3:
         fe:e9:88:98:a8:af:ba:5b:dc:75:7c:f2:8e:65:6b:be:df:85:
         bd:b6:a6:40:99:2d:52:a1:ab:cc:50:f3:ca:68:d5:a7:ab:1a:
         d2:30:75:46:24:31:f5:f8:11:d9:99:bb:78:c0:dc:8a:12:00:
         04:40:12:52:6b:72:51:a4:91:53:67:8f:d5:b1:50:06:f1:3d:
         2a:5b:b6:bd:26:92:9a:98:ce:ea:82:36:9d:ed:40:2d:02:e2:
         91:7a:af:ba:66:f6:df:d7:ee:5f:04:b5:05:4d:14:ff:d7:a4:
         3e:e6:0a:f2:f4:5a:8e:93:a0:b7:93:d4:63:15:73:c3:c6:46:
         42:e5:28:8b:22:e0:56:d8:26:ba:63:e7:56:ca:e0:45:03:82:
         65:6a:61:6c:6d:14:b2:2e:7d:c2:c1:39:2e:44:4a:ca:ef:e5:
         af:8a:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 14:35:16 2026 by rpki-client