Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          UJVW5hAIQ9rf59hhK0CqZ+1+VVrGVX1xCR4koYPOCYg=
Subject key identifier:   18:D1:42:CE:8C:DF:38:CC:62:D0:46:C3:67:19:61:CB:99:90:9A:2E
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       019EB6C599EED6B6BDC2CB63451D529C6BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          0F03
Signing time:             Thu 11 Jun 2026 13:01:03 +0000
Manifest this update:     Thu 11 Jun 2026 13:01:03 +0000
Manifest next update:     Fri 12 Jun 2026 13:01:03 +0000
Files and hashes:         1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
                          2: CrcpLmJ84yQmAm5rRisNfFSLOxo.roa (hash: 9YMbM0zSHIdNV6iTUAZlLpno7hi9RZRYkPuNQ/IQ8Rg=)
                          3: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: OLpDsPRFdLv0q6EUPY05btzbsXwGok5pSK22VrARMkw=)
                          4: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
                          5: NJ8Bqk8L3wqRQ3l0n0_fV41iH7Q.roa (hash: f6+Uh14KUYXnW7P9IoilQ4rcGTPzTyNRQ6v1ZlIA1QU=)
                          6: NyVt7USxMdVWumVZIuI6fFoU-nM.roa (hash: JrTDs0Alcy6xh02FG8/osf7yxdPgrgUMAPjrFSJhhv0=)
                          7: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
                          8: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
                          9: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:99:ee:d6:b6:bd:c2:cb:63:45:1d:52:9c:6b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Jun 11 13:01:03 2026 GMT
            Not After : Jun 12 13:01:03 2026 GMT
        Subject: CN=18d142ce8cdf38cc62d046c3671961cb99909a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:20:c6:0e:6c:22:77:16:06:88:16:f0:d9:
                    1e:7c:b5:3f:71:b2:4b:c3:6b:ff:bf:1f:ce:8b:c8:
                    c2:2b:5d:c5:c6:c8:d1:cb:25:2f:6e:01:bd:ba:0d:
                    f1:93:44:bf:14:ac:0e:85:69:86:5e:91:21:80:78:
                    b9:ae:5b:98:3d:eb:d5:85:1e:b4:24:5b:2a:8d:4d:
                    12:40:8b:bd:08:4a:90:f1:22:f9:d5:6e:23:d4:02:
                    ea:dc:46:8a:4f:24:48:db:c0:a1:fc:0d:fe:b7:d7:
                    60:13:f6:19:7f:7f:ed:25:64:6d:e9:a5:eb:40:8c:
                    2a:eb:7e:df:20:de:b8:bb:3f:30:a2:ae:9e:93:12:
                    52:6e:c1:e3:8f:d6:05:b4:48:95:0a:45:8b:d7:73:
                    d3:fa:f5:9e:c6:52:2f:6a:d3:78:14:cb:a3:d2:69:
                    c0:47:10:db:7c:53:66:b9:54:cd:43:94:de:28:a0:
                    85:83:7f:6f:51:e8:65:7a:68:89:75:1d:76:c6:b9:
                    bf:84:16:3e:40:e1:4f:87:66:4c:a4:07:f2:18:95:
                    68:62:6e:41:61:45:a3:23:74:b2:17:de:d4:d5:c0:
                    eb:5e:cb:5e:be:dc:3a:43:b4:2e:87:7e:43:03:64:
                    20:99:cc:5f:9c:a1:81:45:f1:d0:8d:6f:5e:98:23:
                    1c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D1:42:CE:8C:DF:38:CC:62:D0:46:C3:67:19:61:CB:99:90:9A:2E
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:74:c2:b9:40:82:ce:1b:59:f3:e0:f6:cc:d0:04:f3:58:28:
         43:f5:b3:dc:a9:63:0e:c0:ad:74:bd:a3:b2:05:ca:19:c4:6b:
         1c:bc:e7:b4:f9:07:4e:eb:86:76:53:b2:c5:b2:66:26:4c:41:
         bb:2a:18:07:9c:52:98:68:8f:99:a2:6d:48:e1:17:68:a4:c2:
         a4:70:5e:a2:af:59:b7:c6:43:49:e3:c6:98:fc:d3:d7:bb:68:
         a4:83:13:e0:e6:b5:5a:12:1a:ad:4c:fb:8e:27:a2:ee:72:49:
         c0:1f:72:25:8d:3d:1f:3c:fd:a8:91:9f:2d:45:9c:bd:b0:23:
         22:35:cb:2b:83:65:4e:2d:14:ff:20:d8:d6:aa:7c:8c:87:68:
         0c:10:f2:68:f4:3e:d2:7b:1c:80:65:9c:cd:78:dd:32:5e:2f:
         24:c3:86:66:10:e7:eb:20:e4:cf:12:6b:ee:b2:ec:70:c4:f6:
         ee:d9:bc:ef:19:85:24:f6:bd:41:d2:8b:51:f9:2c:ef:78:95:
         56:1d:d9:ba:80:51:16:7e:8c:b3:1b:89:c5:27:36:9a:85:81:
         5e:d1:0e:15:93:46:32:96:d6:45:f0:b2:5f:e2:ca:54:bb:e6:
         55:86:a9:a2:cc:ab:a2:37:89:c7:ee:75:64:07:08:4b:88:ac:
         65:8e:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:02 2026 by rpki-client