Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File:                     hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier:          lrik2w5gKbQv3Cbli/xXfpaQtr8/XaebpbW+kOtzCxU=
Subject key identifier:   9B:B4:5C:0A:E4:14:EC:D2:B2:E1:2A:E6:1D:CE:17:7A:5C:9A:86:57
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer:       /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial:       019E28EFEE18806E97C2812D0FBE217B7E29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number:          1435
Signing time:             Fri 15 May 2026 00:01:13 +0000
Manifest this update:     Fri 15 May 2026 00:01:13 +0000
Manifest next update:     Sat 16 May 2026 00:01:13 +0000
Files and hashes:         1: 2E1p8fabJ0AaZVQtK27is72W3zA.roa (hash: seOc2odI/aAB9kmMiUcr+Fn5jR9zKFiFx7mITmVnxdg=)
                          2: hSHIj4UWxpZV5CJ62FEUxANmmx4.roa (hash: DokJgpyiq/4HexdzVhkwpYdCq1bUBWCyEOpnC3xmI30=)
                          3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: F3ELJ8bVrq50493G/UOcRx5qKULxLstdQ/hhtMQQ4pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:ef:ee:18:80:6e:97:c2:81:2d:0f:be:21:7b:7e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
        Validity
            Not Before: May 15 00:01:13 2026 GMT
            Not After : May 16 00:01:13 2026 GMT
        Subject: CN=9bb45c0ae414ecd2b2e12ae61dce177a5c9a8657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:a2:c8:36:c9:6d:4d:cb:f2:49:c9:0c:b7:
                    0b:90:28:f2:82:c7:54:5a:bc:83:52:72:dc:bd:9b:
                    42:34:1e:65:9f:c8:6d:5e:f4:64:5a:bd:ca:05:63:
                    95:94:52:58:59:ff:c9:fd:c4:40:a2:e6:9a:b2:e4:
                    f8:54:47:50:8a:9d:e8:86:0a:d7:71:b9:7e:4a:23:
                    8c:db:c5:6d:f7:53:00:3c:2d:89:81:05:b6:e2:0c:
                    4c:e7:85:d5:5f:9a:52:57:35:3f:f7:6b:5b:02:4f:
                    97:a2:bb:1f:e2:d6:d7:f3:96:33:08:27:0a:93:ab:
                    8f:ab:44:6d:cd:8d:ab:c9:84:28:53:8f:23:76:2c:
                    05:e2:d6:70:e1:e1:7b:b7:80:d7:5c:08:cd:c0:f0:
                    73:eb:38:34:e2:49:35:8e:c3:09:12:66:bb:00:a1:
                    1d:47:c9:3c:b9:ba:6a:ad:98:63:5e:07:d7:f8:b5:
                    3c:3e:7b:b4:16:63:4f:c9:cb:89:13:f7:35:90:b8:
                    ed:2d:78:a3:cd:0a:e3:a4:af:08:59:82:84:22:83:
                    48:18:ce:4b:e0:e4:68:75:48:0c:4f:47:7b:e8:c5:
                    42:9b:7d:87:15:fa:c3:df:fd:96:c0:a9:cd:c8:aa:
                    c0:8d:05:89:13:f2:f9:fd:47:0b:5b:3a:1e:2f:d5:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:5C:0A:E4:14:EC:D2:B2:E1:2A:E6:1D:CE:17:7A:5C:9A:86:57
            X509v3 Authority Key Identifier:
                keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:92:62:24:06:c4:4a:92:8f:3e:b8:dc:25:99:b9:74:c4:31:
         63:cb:8b:50:10:1c:35:cc:25:d8:f3:dc:e7:8b:69:bb:ac:09:
         b6:fd:d9:cd:68:68:c3:d3:c7:00:23:fc:f3:e7:36:a9:25:5e:
         4c:00:00:2c:66:87:0a:b1:b3:bf:f9:23:f0:1f:6c:26:e8:aa:
         82:8d:c3:45:66:28:43:80:8e:28:02:e0:17:0e:19:58:b4:37:
         55:f7:fa:bf:c4:9f:e3:da:5f:9c:51:c2:29:50:bf:61:cc:a0:
         be:b3:c3:7a:eb:ab:fb:2b:c0:63:10:f8:fc:47:b4:f2:1a:7d:
         95:d1:40:a3:2e:60:9d:9d:cb:bb:34:56:fa:31:5b:f6:70:cd:
         c1:b7:54:71:c7:63:19:f9:e0:33:a7:8f:09:78:bf:ae:ea:64:
         51:c2:bd:0e:02:d9:e0:74:ed:00:0b:4e:89:b0:ed:73:f2:a8:
         5e:a9:57:e7:aa:44:d5:3f:c8:be:32:0e:c4:16:24:b2:de:75:
         f9:e4:d5:c0:99:e1:5b:24:b2:a3:3f:90:24:6d:83:bc:87:33:
         5b:e7:f5:66:3f:48:70:0c:41:df:ba:57:d3:11:54:42:44:6e:
         5b:9d:d2:73:86:fa:75:bf:33:f6:fe:98:e7:b6:8a:98:b1:f4:
         68:36:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:07 2026 by rpki-client