Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File:                     HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier:          UYF5Dblbn4zFceCxWtfP/Zb1fEXa4lu1cdEbI55cq1U=
Subject key identifier:   9B:E1:81:10:6E:DF:92:C3:EE:03:09:B8:0E:5F:63:6F:DB:A8:93:30
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer:       /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial:       019D3788FFC74C4E1111B2111E253A349EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 03:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:18 +0000
Files and hashes:         1: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: pGFjPiKXKmsMpn5AmmpgC0jjWWzg9tze59QmIkaiJZg=)
                          2: a0cVwY782bVLctNvuUYwvwuDYXc.roa (hash: 3BEBxuA8q6f/xOJc9Z5fI70F8QjqsLEuZxOTHMXzCdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:88:ff:c7:4c:4e:11:11:b2:11:1e:25:3a:34:9e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
        Validity
            Not Before: Mar 29 03:00:18 2026 GMT
            Not After : Mar 30 03:00:18 2026 GMT
        Subject: CN=9be181106edf92c3ee0309b80e5f636fdba89330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:27:2d:9b:5e:5b:df:32:2a:86:b5:b0:02:
                    54:67:01:b9:a9:7a:e8:ba:9a:4f:34:80:53:cc:32:
                    58:3d:c6:a2:be:54:49:9b:b4:f4:41:83:35:8b:09:
                    59:5d:07:fa:32:b3:0e:d8:cf:a5:54:2b:14:bf:65:
                    3b:66:e5:ed:c5:67:bf:2e:b9:ec:7c:2b:c2:bb:c0:
                    89:5e:92:71:f1:db:e8:9f:c3:29:9a:a2:d8:65:d7:
                    65:8a:e8:f6:97:e8:16:0a:29:bf:79:20:04:02:20:
                    11:b8:88:0a:ea:e6:55:40:23:46:45:ce:fc:75:f5:
                    3c:1b:77:3d:52:54:5f:0e:f7:34:1a:c8:4b:1e:89:
                    9f:c6:2f:1b:5e:a1:7f:c3:15:bb:18:39:28:9b:5c:
                    ca:75:10:b3:9b:e3:b9:db:65:aa:b4:04:ed:d8:44:
                    b3:e5:f3:23:bf:75:98:30:d0:e1:62:1a:91:fd:e2:
                    d8:fc:ec:1c:4d:25:4e:4c:c9:94:0c:b7:df:dd:8d:
                    c5:4e:94:62:02:cc:94:0a:57:ee:51:c5:ec:72:44:
                    2f:08:71:09:74:ae:5c:22:b9:4f:75:9d:60:2e:29:
                    ac:ef:a2:63:4f:d5:66:1b:0e:ac:80:ff:79:72:d7:
                    9c:07:f4:3a:9b:e6:6b:f7:7f:54:22:d5:fc:8c:39:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E1:81:10:6E:DF:92:C3:EE:03:09:B8:0E:5F:63:6F:DB:A8:93:30
            X509v3 Authority Key Identifier:
                keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:ac:ba:1d:d1:78:d7:f5:25:1a:70:58:0c:05:11:29:ee:
         24:ee:35:24:2e:35:ad:16:ac:e2:a9:34:03:ff:60:9c:35:98:
         fc:a2:42:ff:9f:73:99:6f:d0:50:c3:f4:91:e0:0d:74:cb:18:
         3e:d1:1d:fc:6f:d9:f8:4e:9c:97:b4:69:4a:ad:60:c7:12:b1:
         6a:aa:42:7e:88:a6:b5:8d:a8:ab:d1:85:4f:5b:d6:3c:91:12:
         dd:78:98:92:95:f4:d7:ca:cb:c8:0f:72:79:78:dd:61:a7:c4:
         90:31:e8:42:33:3f:59:9f:b9:63:c3:97:18:74:77:8e:f3:a7:
         b7:b2:89:5a:20:c7:f6:be:ed:f4:2a:b3:9e:04:1d:6f:25:a8:
         2f:c4:da:0e:a9:05:cc:89:75:43:8f:20:b6:73:fb:0e:6f:74:
         4b:e5:70:ba:b0:03:1f:f3:52:b9:ac:df:bc:c7:b3:52:95:e8:
         28:72:52:f5:80:df:64:4a:a7:ad:99:f3:62:c6:0b:81:15:d8:
         85:99:60:c2:06:35:57:8b:49:b4:8e:81:77:49:b7:63:07:4d:
         3e:0c:a9:33:83:93:60:00:54:32:37:0f:7b:a6:e0:d8:bd:50:
         ce:9e:52:91:c3:1e:61:de:99:62:72:c8:d5:83:c2:2f:2e:4b:
         9b:d2:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:50 2026 by rpki-client