Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier:          A10LiwjjmMAhHw37ViflNvWRuSrCkaXsA+azMWco6kQ=
Subject key identifier:   64:B8:8E:65:97:6F:5A:B7:03:A1:4E:1A:E2:26:09:BC:9E:79:45:44
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer:       /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial:       019E26938C6D1F1C9EDC9E85995A14CCEF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number:          189C
Signing time:             Thu 14 May 2026 13:01:04 +0000
Manifest this update:     Thu 14 May 2026 13:01:04 +0000
Manifest next update:     Fri 15 May 2026 13:01:04 +0000
Files and hashes:         1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: 2jhnpZsT1HlpbF6ARCTVpPSkZVqu+7ASnD8V5NJpX3k=)
                          2: jeVYoAlmG_sEvFtGiKgaPSf17pw.roa (hash: 1XW/CIVJ1Xt4kEijZkBhaCtanmPdLXj+hDRhskw3N+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:26:93:8c:6d:1f:1c:9e:dc:9e:85:99:5a:14:cc:ef:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Validity
            Not Before: May 14 13:01:04 2026 GMT
            Not After : May 15 13:01:04 2026 GMT
        Subject: CN=64b88e65976f5ab703a14e1ae22609bc9e794544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:b1:4c:44:6b:40:d1:be:61:43:98:49:29:
                    61:79:60:eb:0c:81:ce:67:0c:be:1f:f0:b7:4f:e1:
                    df:8b:13:3c:5b:bf:3c:87:15:fd:14:a9:4f:fe:b5:
                    17:e3:33:8c:5d:73:ab:04:f1:8a:f1:5c:4e:bf:6b:
                    a0:ad:83:1e:c4:bc:51:ee:e1:a8:c4:35:3e:13:dc:
                    e7:fe:8d:3d:df:3d:29:19:ce:20:24:60:8b:fb:c2:
                    32:af:7d:16:c0:bf:7c:e3:51:e5:6a:87:92:2b:84:
                    59:72:af:50:9e:a4:f6:68:f5:6e:da:e5:ee:59:df:
                    6c:55:0a:61:65:a8:93:da:99:fd:67:3d:95:25:08:
                    77:14:c2:37:8f:8c:92:79:98:5e:2a:ba:62:cb:ce:
                    b8:a9:e1:11:28:16:dc:b2:e6:de:9c:ab:7f:a5:24:
                    3a:65:c7:af:31:06:89:9e:e8:fb:6f:5e:75:5e:ee:
                    07:54:13:3c:36:aa:69:53:4c:23:f6:5e:86:62:89:
                    6c:44:e5:72:06:8f:a0:4c:48:5f:e8:f5:31:dc:50:
                    75:eb:6e:aa:13:9c:97:a9:09:78:02:82:ab:58:db:
                    93:3b:0d:56:1b:a5:98:21:4e:ac:91:3a:0d:f2:c1:
                    fa:e7:82:a8:45:70:ae:1f:67:b3:97:7c:81:14:a4:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B8:8E:65:97:6F:5A:B7:03:A1:4E:1A:E2:26:09:BC:9E:79:45:44
            X509v3 Authority Key Identifier:
                keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:27:53:64:31:6e:e6:f3:92:64:40:a4:e5:71:0c:81:75:
         f6:50:11:a1:ef:b3:f8:2e:c5:5b:e3:3d:a3:2e:b8:d4:be:37:
         d5:e4:1b:19:e2:4d:8a:9a:e1:03:83:bd:84:12:bb:e1:bb:4a:
         cc:00:c4:2c:ba:b2:da:94:f2:06:ea:9a:ee:1f:fa:84:f1:4d:
         17:8d:79:56:c5:d6:99:73:41:df:a0:8c:1b:e0:6a:85:0b:36:
         57:47:e6:f1:eb:3b:a1:41:5f:20:86:22:ed:c3:cb:c1:90:83:
         2d:9a:4d:59:e9:0a:0f:c9:66:ba:3e:c2:10:eb:fc:bb:ed:40:
         90:c6:46:5b:6d:f1:94:87:f2:77:d7:28:2e:21:bd:80:65:a6:
         66:3f:05:5a:aa:31:5d:60:7f:6e:fe:c7:09:c5:ce:04:54:6c:
         90:c5:75:f5:2f:90:6d:71:2c:4f:50:3b:c7:0d:df:ec:93:cf:
         db:bd:77:65:39:2b:2b:d9:d2:39:42:a5:5c:05:db:75:60:4e:
         04:77:e5:a4:ef:ea:91:90:6f:a6:0d:f8:4a:61:91:a7:e0:a1:
         79:c2:d5:29:b9:4c:ff:2d:35:f4:86:36:02:14:9d:f4:92:33:
         e3:70:af:a6:8f:25:e1:51:e8:89:c2:73:05:53:e2:bc:71:12:
         0b:6a:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 15:19:23 2026 by rpki-client