Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File:                     HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier:          b0tBVaRxLt1dtJ6rZMxMV7mk6yKZWWy/WOA4Cn4Bh2I=
Subject key identifier:   E7:B0:88:22:E5:D2:4F:8A:50:65:15:0B:2E:BF:37:3C:D1:FE:0E:AE
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer:       /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial:       019CE55A356355E9C093C9290A141F35F179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number:          0AB4
Signing time:             Fri 13 Mar 2026 04:00:20 +0000
Manifest this update:     Fri 13 Mar 2026 04:00:20 +0000
Manifest next update:     Sat 14 Mar 2026 04:00:20 +0000
Files and hashes:         1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: fU5gAbyBWB3jP5YHmx3DvArGj8EPqbhCY//PB9C1AMw=)
                          2: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (hash: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA=)
                          3: ehIM4r7y0MNk_6X7PPB_Xq7ctEo.roa (hash: x9UHBy6St0JPZwyF+fAa8ymLClmistFAKiLBfqM/Jyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5a:35:63:55:e9:c0:93:c9:29:0a:14:1f:35:f1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
        Validity
            Not Before: Mar 13 04:00:20 2026 GMT
            Not After : Mar 14 04:00:20 2026 GMT
        Subject: CN=e7b08822e5d24f8a5065150b2ebf373cd1fe0eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:e2:bf:95:5f:94:a4:25:2a:af:54:69:c0:
                    f3:ef:a6:06:c4:b1:d6:8d:49:9e:72:6b:74:2b:e2:
                    f8:e5:75:1f:3e:89:4f:47:b7:97:ff:e5:4d:6c:ec:
                    2b:87:39:f3:35:21:a6:78:c2:76:10:43:b8:f9:24:
                    d0:73:66:c5:2e:0d:c6:d4:c1:22:e3:0e:1b:fb:eb:
                    8f:ba:7f:93:91:74:52:eb:d8:73:e5:1b:56:4c:f9:
                    4a:f4:03:83:27:85:1b:e3:ab:ce:b0:49:7c:a2:6c:
                    0c:a2:c7:4d:cd:8b:0a:92:82:b0:da:8c:89:a3:33:
                    e0:86:1a:8d:7e:e9:77:4b:b7:4e:e7:f0:01:1c:a6:
                    07:31:74:0a:d5:65:a0:51:6f:6c:5f:26:18:4f:d4:
                    8f:e6:66:07:24:a9:13:0d:f2:bd:87:19:71:34:03:
                    81:bc:8a:6a:74:a6:83:84:7b:70:90:2d:65:0d:76:
                    30:2d:4a:e9:26:73:d8:b8:8b:66:b5:25:0f:67:c7:
                    8f:68:62:23:0a:99:72:23:37:85:46:77:08:d8:c5:
                    36:cb:ea:24:93:09:e0:92:4a:d5:2d:9b:58:9d:ea:
                    63:bd:4d:cd:2b:d3:6d:4d:68:ea:18:76:a2:fc:0b:
                    72:13:4d:ea:5f:e4:c0:77:8e:20:f3:a3:2b:ee:a9:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B0:88:22:E5:D2:4F:8A:50:65:15:0B:2E:BF:37:3C:D1:FE:0E:AE
            X509v3 Authority Key Identifier:
                keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c8:4d:8a:19:df:ea:f7:b5:5c:48:0d:95:01:c0:bb:07:7e:
         40:2c:10:7c:a5:7e:2b:4d:d1:70:0d:d1:65:d8:0e:44:6c:d5:
         b8:b3:7d:2f:f3:e5:e2:2b:09:1f:f6:2f:4b:ef:47:9d:d1:b8:
         72:43:75:59:42:ec:cf:ba:b2:7f:75:19:e2:e5:58:c1:8d:35:
         27:be:8b:ba:e2:62:74:03:57:5b:04:83:1e:2f:d7:d6:ff:53:
         3b:62:66:24:bb:7a:9b:a5:e3:b7:77:f8:17:4f:43:d6:4c:0d:
         c1:af:f0:b7:16:90:0c:a3:e5:4c:37:26:d2:8e:e9:ad:a5:0a:
         e2:ba:93:ed:59:86:32:6c:c8:2f:c5:46:81:43:32:3c:19:d5:
         c1:b5:c0:b8:db:9d:75:21:c9:26:3d:9a:42:60:0c:26:14:24:
         29:94:95:e9:a4:83:0c:0e:40:45:69:b5:e4:a7:ff:a1:38:7a:
         df:13:fb:1a:c2:1b:2a:a6:1a:2a:d4:b5:e1:db:46:1f:17:b8:
         51:9f:38:53:05:cb:03:16:b1:e4:44:a3:21:38:72:0b:f7:53:
         ba:56:c5:dc:f2:84:7f:86:5c:ea:cc:76:4e:6c:83:4b:e3:c0:
         00:14:36:b2:31:2e:c7:b9:fa:60:ac:10:4c:ad:fe:a7:cf:83:
         4c:17:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:58:18 2026 by rpki-client