Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File:                     HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier:          eWPKWo6Cx0xs/fvJlbNg6RDre+aXmFgJJHn3On0mYJo=
Subject key identifier:   69:F6:7C:E8:5C:78:22:A3:53:0F:01:DB:E8:96:2E:3F:E0:AB:2F:F0
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer:       /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial:       019EB9FD33D56E02A93E79404727B6C3BB06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number:          0917
Signing time:             Fri 12 Jun 2026 04:00:39 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:39 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:39 +0000
Files and hashes:         1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: ldbnC48Nxz/Z9Eu0deJD9eL1AOo53AtOWsMMxAJWeB8=)
                          2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:33:d5:6e:02:a9:3e:79:40:47:27:b6:c3:bb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
        Validity
            Not Before: Jun 12 04:00:39 2026 GMT
            Not After : Jun 13 04:00:39 2026 GMT
        Subject: CN=69f67ce85c7822a3530f01dbe8962e3fe0ab2ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:bc:2c:b0:a0:7c:f7:92:5c:5e:92:22:0e:
                    7e:4f:19:37:b0:e3:45:e0:91:16:c5:0f:c3:22:2a:
                    ed:3b:25:e6:71:f0:de:01:c1:e7:e4:eb:54:f7:ec:
                    fd:58:03:98:f2:3a:10:64:6b:de:53:59:6d:21:60:
                    32:74:43:90:13:9c:c0:5b:03:fc:ba:e3:d2:c3:08:
                    49:b5:5b:1e:65:91:91:09:c7:70:67:b5:01:ad:7e:
                    81:94:f0:85:23:1b:91:a5:02:59:e9:62:35:36:fc:
                    32:1d:63:e2:39:73:d7:5d:49:74:9f:99:1d:8f:1f:
                    20:2b:e7:87:88:40:77:8c:10:ea:fc:47:85:f7:4f:
                    f4:5c:cc:b0:ad:5d:93:d2:a0:a7:82:5c:9d:13:03:
                    2c:b4:6b:af:15:5a:df:45:25:8f:55:cb:39:75:8e:
                    73:61:35:0a:cb:2a:8e:7a:38:ad:54:13:c8:e1:ff:
                    38:15:7c:7a:70:e4:6a:37:8d:93:53:2e:0a:dd:85:
                    4a:32:50:41:7d:e1:86:8d:d1:b8:10:e6:e9:8a:93:
                    1c:7b:d4:b9:e1:a0:f6:18:5c:d8:6c:c2:3f:76:c9:
                    ed:56:78:49:73:b9:8e:bd:9e:b7:0a:c9:2c:e4:d5:
                    6f:25:63:49:9b:72:48:26:0e:64:f3:49:6f:c2:b6:
                    94:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F6:7C:E8:5C:78:22:A3:53:0F:01:DB:E8:96:2E:3F:E0:AB:2F:F0
            X509v3 Authority Key Identifier:
                keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d3:2a:6a:a1:b5:10:d8:cb:19:b1:68:9f:b4:6b:5f:f0:34:
         f1:c7:c8:40:2f:5c:21:e5:cc:da:38:f8:49:29:21:56:1b:df:
         c2:77:d2:02:34:39:18:51:45:17:6a:b5:45:1b:69:c4:d6:05:
         21:20:c0:f1:48:7e:b1:d6:99:ba:1d:03:15:86:a1:c7:61:22:
         f4:20:c5:ae:fc:31:d8:41:93:2d:14:65:78:5b:3f:9b:39:da:
         1e:7e:e5:e4:f2:3a:02:d3:92:f0:d9:16:18:17:bb:73:51:4e:
         80:c4:60:54:bb:e6:36:c7:94:f0:e9:bb:82:90:f9:e8:99:ec:
         3b:72:ab:3f:a5:ac:6f:71:59:da:dc:bc:31:92:9c:c8:76:04:
         b0:33:2f:f1:4b:21:51:70:a0:bd:38:45:23:eb:b5:34:2d:73:
         60:10:44:09:65:fd:f1:a8:13:59:31:c1:e6:5c:dd:aa:e9:46:
         48:75:34:c5:aa:9d:56:98:ef:df:2b:c6:5a:82:90:47:d7:2a:
         0f:92:d6:a5:9d:72:83:86:f8:15:9c:8d:68:b3:0f:79:7d:fa:
         7e:be:27:02:5e:61:43:52:4d:58:c4:47:17:b2:43:1c:36:1f:
         ea:52:22:dd:da:64:f7:47:19:57:40:73:89:0c:f9:dc:e1:c8:
         6d:40:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:57:38 2026 by rpki-client