Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File:                     HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier:          Ild9geQOmyHpDsVg/YTuNBDXkRErPSXMz+I03nSxFwE=
Subject key identifier:   E6:4D:24:ED:77:71:70:7B:CB:D0:27:82:AE:98:34:72:84:70:A5:EF
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer:       /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial:       019EB9FD06EAA0F2DD729AB1D7F0691181A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number:          0842
Signing time:             Fri 12 Jun 2026 04:00:27 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:27 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:27 +0000
Files and hashes:         1: D8tVqO3BJjchT6NM_HDGczaKws0.roa (hash: fIZsVjJEkijeWKIzd1zHSBv3Dper18loUlNZnU50gPc=)
                          2: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: Vf8PO/Vn3RPIhfEKTKrRnJ2ut5GBj2p+eSNSUnPOvyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:06:ea:a0:f2:dd:72:9a:b1:d7:f0:69:11:81:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
        Validity
            Not Before: Jun 12 04:00:27 2026 GMT
            Not After : Jun 13 04:00:27 2026 GMT
        Subject: CN=e64d24ed7771707bcbd02782ae9834728470a5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:e1:6e:3b:bd:87:f2:9c:5c:6b:49:b3:e6:
                    cf:e9:d4:37:51:49:30:c3:12:44:3c:02:3d:d1:9d:
                    51:73:7f:59:4e:3e:ec:de:61:7e:97:a6:1b:1a:0b:
                    b1:c8:ff:42:d3:a3:56:06:64:62:18:88:ea:75:67:
                    ed:7a:df:7a:c4:00:c5:54:47:1f:d4:2c:dd:31:b5:
                    4b:b5:19:a0:fa:13:69:85:35:8d:e5:ca:c9:28:a2:
                    18:27:1a:1c:1f:1f:46:53:da:3f:49:2b:95:bf:c3:
                    6a:04:75:2e:3e:8d:09:9d:0b:46:d2:b9:10:2c:a6:
                    ff:36:09:0f:8b:8f:7a:e6:44:60:34:ef:ae:29:8c:
                    a6:53:93:ba:75:52:c8:9c:56:57:9e:d7:cf:81:32:
                    fd:86:f3:da:3d:8f:69:ef:04:7f:9d:64:3a:c2:49:
                    4c:7c:f2:d9:02:3d:36:66:2f:c1:fa:2d:b5:a1:e5:
                    a6:f2:07:12:1f:08:72:e5:24:ef:8f:b9:87:32:80:
                    70:a6:7a:b4:55:4c:23:1e:af:f6:6f:85:aa:05:0a:
                    96:d9:75:e8:81:62:8c:da:60:c0:85:d1:8c:6a:30:
                    5d:22:87:9c:6c:05:8d:39:84:ab:09:a9:c9:0d:de:
                    37:4d:15:5e:96:48:01:47:ef:8b:60:68:9d:1f:73:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4D:24:ED:77:71:70:7B:CB:D0:27:82:AE:98:34:72:84:70:A5:EF
            X509v3 Authority Key Identifier:
                keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:09:bc:d9:a9:25:db:51:74:ce:c4:0b:c9:4e:6e:a9:da:b7:
         78:bb:a9:c0:06:eb:ac:73:7e:77:ca:8b:24:fe:96:66:33:59:
         6f:14:09:eb:b6:e7:b6:76:52:a2:48:66:9e:eb:0f:d5:bc:6c:
         4b:e9:2e:e2:a0:12:c2:db:82:e7:a9:3a:90:98:41:14:f6:71:
         ca:d1:26:64:6c:02:db:59:fc:48:91:20:f0:47:3c:08:b6:ef:
         7f:b1:60:f4:99:bb:d1:6a:17:39:f4:70:ff:0f:99:a7:c1:9c:
         26:82:ba:a7:52:63:8b:04:60:92:7b:a2:7a:88:20:c3:6c:de:
         2f:c8:9f:51:ac:78:fc:85:c5:f5:39:d3:12:71:f2:03:2d:11:
         3a:de:ba:ca:cd:08:65:ce:ca:43:c8:01:e1:97:fc:15:39:07:
         31:50:1e:db:89:81:41:49:bf:18:02:00:cf:80:de:7b:5c:27:
         0f:d9:dc:6c:39:e7:b7:cd:98:61:d1:84:2d:a1:de:fb:4c:95:
         17:ba:f5:89:a5:f9:6e:3b:aa:27:77:30:ba:fc:6c:77:0d:9d:
         7a:79:a6:90:40:ef:3c:83:ab:f5:e5:9a:61:34:b7:92:9a:20:
         fb:64:f9:63:57:9c:e4:e6:dd:ee:15:51:0b:33:23:01:3b:20:
         d5:98:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:54:54 2026 by rpki-client