Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/HyjPVI_x3xEPgiaVJuYpOPP1cmM.mft
File:                     HyjPVI_x3xEPgiaVJuYpOPP1cmM.mft (raw, json)
Hash identifier:          x/fRLmBByrsA//YKWn2IliGABbJEfjvbtMRxBD6pitE=
Subject key identifier:   F3:0C:31:55:6E:36:24:69:07:7A:4B:8A:59:54:43:DF:90:D0:6D:94
Authority key identifier: 1F:28:CF:54:8F:F1:DF:11:0F:82:26:95:26:E6:29:38:F3:F5:72:63
Certificate issuer:       /CN=1f28cf548ff1df110f82269526e62938f3f57263
Certificate serial:       019E7DB13972D5E612FC2116306891A235D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyjPVI_x3xEPgiaVJuYpOPP1cmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/HyjPVI_x3xEPgiaVJuYpOPP1cmM.mft
Manifest number:          28
Signing time:             Sun 31 May 2026 11:00:27 +0000
Manifest this update:     Sun 31 May 2026 11:00:27 +0000
Manifest next update:     Mon 01 Jun 2026 11:00:27 +0000
Files and hashes:         1: HyjPVI_x3xEPgiaVJuYpOPP1cmM.crl (hash: zhv3sOgD2jHwaRFamsz4cFSx+eyXdeWweguw7OjM3Hw=)
                          2: NybaecP9BfQQL0WJhzHkc-8rYgY.roa (hash: gW2thXluA7zwV2igYS/50lCxFzJ3ympAkH/mIHLC8u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/HyjPVI_x3xEPgiaVJuYpOPP1cmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/HyjPVI_x3xEPgiaVJuYpOPP1cmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HyjPVI_x3xEPgiaVJuYpOPP1cmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7d:b1:39:72:d5:e6:12:fc:21:16:30:68:91:a2:35:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f28cf548ff1df110f82269526e62938f3f57263
        Validity
            Not Before: May 31 11:00:27 2026 GMT
            Not After : Jun  1 11:00:27 2026 GMT
        Subject: CN=f30c31556e362469077a4b8a595443df90d06d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:97:68:39:50:0c:97:2c:6c:2d:02:0a:d2:
                    d2:68:4b:e8:03:2b:1e:c8:f0:3a:22:7e:54:e6:b9:
                    58:73:c9:e0:02:e8:d8:a0:86:72:c0:3f:64:58:11:
                    27:31:5c:8e:de:9f:e9:64:89:6e:53:ca:97:f1:77:
                    df:9a:1f:98:4a:03:5f:25:82:d2:45:80:06:a9:20:
                    28:47:07:be:b2:c3:89:b9:99:7d:6f:34:2f:8f:46:
                    a8:d3:72:0f:25:57:7d:8c:ae:ad:95:fb:e3:08:2b:
                    c5:95:85:3c:34:18:57:20:57:85:c2:6c:0f:34:ce:
                    fe:8c:62:6f:07:2a:9d:14:34:76:c4:2b:3b:ce:36:
                    e9:fb:db:85:29:39:48:f1:33:23:2c:7f:1d:38:e5:
                    e5:4f:12:9f:76:24:98:3a:9d:9a:b7:95:99:2a:26:
                    2d:13:c3:f2:f2:6d:51:b5:51:cc:4a:05:b2:78:53:
                    d5:68:c2:66:44:9f:e0:78:e8:be:14:2b:21:1d:5b:
                    8d:0d:f2:2e:ae:2b:2c:39:6f:c0:b4:95:9c:01:3d:
                    42:42:36:c2:6c:d2:60:f4:4f:81:6d:a1:51:3f:38:
                    b9:d9:78:cd:85:94:7b:3b:de:76:b7:14:6d:7b:24:
                    3c:6c:ba:5a:11:c8:56:65:cd:ad:33:c2:d4:c6:a0:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0C:31:55:6E:36:24:69:07:7A:4B:8A:59:54:43:DF:90:D0:6D:94
            X509v3 Authority Key Identifier:
                keyid:1F:28:CF:54:8F:F1:DF:11:0F:82:26:95:26:E6:29:38:F3:F5:72:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyjPVI_x3xEPgiaVJuYpOPP1cmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/HyjPVI_x3xEPgiaVJuYpOPP1cmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/452459-fd03-44a1-a656-72567e28bc72/1/HyjPVI_x3xEPgiaVJuYpOPP1cmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:22:6d:24:3e:54:8c:60:0f:cc:5d:91:85:fa:c0:d9:a4:93:
         28:a6:8e:cf:35:fd:d1:46:94:3a:bd:44:07:7d:b4:20:2d:46:
         38:8d:c7:1b:36:ef:5f:08:8d:83:86:05:ff:e6:46:32:70:24:
         f3:ed:19:5e:99:92:d5:67:a6:e3:9c:e2:63:0d:83:4a:b3:c4:
         05:b5:bb:9b:09:4a:c0:7d:b3:83:8a:ce:cc:0c:4b:8b:54:21:
         ae:5f:8f:7e:eb:6d:23:5b:72:c0:49:e4:42:12:52:17:2c:85:
         be:b1:af:b0:9f:18:80:15:69:1a:23:04:4c:4a:9e:52:74:6b:
         e6:f3:31:65:04:01:6b:2c:2b:12:54:75:a8:56:07:6f:6a:9e:
         66:ac:5a:23:a7:6b:bc:3c:11:f4:a5:e1:9f:56:34:8b:1f:50:
         d6:43:86:cd:11:7f:7d:fe:e6:42:d7:da:ea:a1:7f:63:b2:eb:
         e4:b5:d9:36:76:db:c0:e8:d1:3f:15:55:d5:75:91:cf:08:55:
         51:21:e8:9e:ef:d6:ac:3c:5b:76:e7:ce:89:0e:3d:d7:89:44:
         75:f4:ac:7b:d4:be:a4:5d:72:01:69:18:b9:ba:18:7a:08:82:
         bf:8a:48:74:0c:9c:35:55:87:a2:1a:b6:e0:f3:60:0b:52:c6:
         c0:fc:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 18:51:41 2026 by rpki-client