Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
File:                     H_HOmuJWMQK_jqcqieBhUu9wWLI.mft (raw, json)
Hash identifier:          YR6TV2uuxxP9C14gBbsrb+5wS8IXcTWXXOJ0TJEr8Eo=
Subject key identifier:   64:C1:26:89:9C:69:25:AC:AC:5E:C1:4B:B0:C5:B3:71:FE:28:C5:88
Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
Certificate issuer:       /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Certificate serial:       019D37C09573BA78677586EB43546CBDFE9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
Manifest number:          0BDC
Signing time:             Sun 29 Mar 2026 04:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:01 +0000
Files and hashes:         1: H_HOmuJWMQK_jqcqieBhUu9wWLI.crl (hash: 3CvM83mRiHQmrge/rRYXW5xE5nKlWkA0YZIOOmAuJ5g=)
                          2: p0ufMcpYNwVQWNab88QT5yQavFU.roa (hash: mL3XJ5t6SmhWhL4iXobgkQwIefMZwzLnCnAYR2ZqxCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:95:73:ba:78:67:75:86:eb:43:54:6c:bd:fe:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
        Validity
            Not Before: Mar 29 04:01:01 2026 GMT
            Not After : Mar 30 04:01:01 2026 GMT
        Subject: CN=64c126899c6925acac5ec14bb0c5b371fe28c588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:2c:89:ad:c4:bc:f8:f2:b1:c6:55:0d:37:
                    3b:d8:0f:d8:87:f6:9d:24:d9:5b:66:1d:69:dc:a4:
                    27:29:f4:26:dc:d3:3c:17:7e:e0:ae:e0:fd:8f:fc:
                    7f:07:6a:54:9a:7d:ee:0c:83:93:1e:f3:0e:35:4e:
                    69:fe:0e:82:a6:18:77:4d:45:8a:45:97:01:89:5c:
                    54:fc:06:78:2a:c7:44:11:d1:a6:9c:b2:c1:80:a2:
                    d5:78:a2:55:df:9c:15:9a:ce:dd:43:29:85:23:7c:
                    dc:f6:f7:ba:2f:4b:0d:80:70:ff:5b:49:7c:1a:b0:
                    94:d0:76:76:ed:ee:47:c0:05:47:8c:0b:9f:33:2e:
                    d4:61:6d:1a:91:72:58:6f:6e:97:03:30:8c:db:19:
                    00:38:eb:1c:b6:c7:f6:9f:24:aa:23:0e:64:9c:69:
                    f5:ff:92:54:da:86:a0:21:47:d2:a0:2e:df:4e:4b:
                    7c:ab:36:af:78:e8:91:b8:1e:59:14:3d:1a:55:4c:
                    8b:da:24:73:38:c3:2d:90:81:17:4f:7f:d6:1f:bc:
                    37:8b:bd:4e:5e:a8:4c:04:c7:db:18:f2:32:f1:09:
                    c9:df:33:c0:b5:be:1e:80:c2:3d:05:2f:38:64:11:
                    5b:35:11:ea:a8:04:ac:24:8a:bc:38:e1:89:12:5d:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C1:26:89:9C:69:25:AC:AC:5E:C1:4B:B0:C5:B3:71:FE:28:C5:88
            X509v3 Authority Key Identifier:
                keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:56:fc:f0:13:5c:b6:d9:72:db:78:bc:c7:fe:b4:5d:7b:77:
         ba:9d:38:06:e4:c7:80:31:d1:36:c3:ac:51:35:ef:ea:e0:a8:
         07:a0:e0:bb:bb:3c:77:e5:6c:ac:d7:8f:a3:c2:bd:9a:5d:77:
         2b:00:90:df:27:f3:e2:ed:37:39:f2:77:a1:72:6d:46:0f:8b:
         35:b0:da:f5:05:99:f8:69:89:af:2e:79:8b:85:9f:be:02:8b:
         d9:7d:69:9b:44:87:57:ac:26:6d:0a:ac:43:c0:33:5c:58:5f:
         ba:43:3a:ec:55:d9:7f:98:16:ad:33:af:cb:90:ec:72:15:96:
         db:7c:6e:90:79:c6:47:97:f5:77:49:a3:ea:7c:c6:74:b1:31:
         2b:55:30:97:6c:d3:99:21:bb:75:79:4f:45:1e:8f:6b:8e:b2:
         3a:4a:b7:b9:80:53:6f:0a:b2:0b:48:60:e7:8e:a0:32:c4:72:
         76:c7:4f:f6:60:8f:fa:a8:6b:55:a7:6f:7f:cc:16:50:5b:84:
         58:cc:79:e0:35:b0:c7:0c:cd:4b:49:0e:69:9e:3b:3c:54:2c:
         11:96:e0:fa:08:a2:34:ea:45:25:9a:d7:82:7a:c6:e3:2d:0c:
         bf:ab:47:cc:78:e9:08:c3:5e:d1:dd:18:d4:02:97:a4:24:8a:
         4b:5e:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:18 2026 by rpki-client