Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          EOjQnb1+dKGh0iPZMtDkdckFBpvFaOtz+kUpYnbWxcg=
Subject key identifier:   A4:0B:36:EA:BE:F4:29:42:63:67:BB:73:4E:73:88:5B:AA:A7:91:B8
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       019EB98F408FA2F11463C787B62DFEAD8CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          088D
Signing time:             Fri 12 Jun 2026 02:00:33 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:33 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:33 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: RU8OKk/Owsese6eKEtjDYs4AmCgLII2w6pJbzTJNuGA=)
                          2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:40:8f:a2:f1:14:63:c7:87:b6:2d:fe:ad:8c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Jun 12 02:00:33 2026 GMT
            Not After : Jun 13 02:00:33 2026 GMT
        Subject: CN=a40b36eabef429426367bb734e73885baaa791b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:a2:4d:9e:0f:10:99:1b:66:e1:16:37:81:
                    89:37:df:35:ec:fe:5b:74:68:9d:f2:bc:30:c1:9b:
                    13:23:14:29:b4:c6:1f:50:0f:fe:b9:cd:48:d1:b5:
                    6b:dc:dd:af:e7:b9:3c:a9:0e:7e:53:aa:cf:ce:82:
                    0b:c7:e6:74:d3:68:c1:74:a0:74:7a:17:7a:b8:39:
                    7a:a7:c6:00:86:e8:58:65:62:18:c2:fa:69:e1:4c:
                    17:09:53:f8:63:80:22:6f:a8:6d:f4:64:e5:ab:00:
                    6c:15:6f:34:27:f6:10:de:48:2b:95:8d:a3:41:bc:
                    43:7b:9a:17:13:d0:eb:6f:f9:37:dc:98:b2:40:23:
                    8d:ae:65:df:24:19:a7:99:a0:07:e0:2c:25:ac:44:
                    b2:ed:db:2c:31:f9:c8:f0:62:46:4c:49:9d:6e:ce:
                    24:36:db:b9:48:19:74:bf:93:a1:c2:37:6e:3a:71:
                    10:7c:7c:b6:83:3d:5d:c9:86:f4:e0:99:02:4e:58:
                    2b:61:21:2e:f7:e7:95:3e:ff:d7:7f:85:e9:ef:23:
                    15:c9:d1:7f:84:76:ef:2d:c8:ff:e9:df:52:7b:35:
                    21:e1:7d:23:59:17:cd:70:f0:4e:87:69:a3:e9:a6:
                    48:b2:59:a0:e0:10:90:67:69:8e:d2:be:a5:be:0d:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0B:36:EA:BE:F4:29:42:63:67:BB:73:4E:73:88:5B:AA:A7:91:B8
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c6:83:a0:87:49:5c:8e:f9:4f:b2:f4:13:83:ea:af:bc:a4:
         8b:ad:02:b6:95:7c:ae:3d:44:4f:96:a2:10:f5:ca:84:b7:d1:
         f2:25:a0:9b:c8:6a:8e:b7:39:3e:20:7a:57:29:51:87:b2:63:
         3d:6a:35:e4:3e:4f:21:c9:d1:8a:69:06:8c:0c:1c:cc:8b:9c:
         c6:10:58:03:7b:d6:3f:76:a0:93:87:39:f1:97:c9:0d:64:ab:
         1b:41:bd:2b:f7:ce:9e:0b:4b:c4:62:83:df:92:8f:82:4d:ee:
         f5:6c:40:09:d5:48:cf:4e:fe:38:38:49:8f:75:48:79:c3:9a:
         e6:f0:de:24:21:14:54:04:b2:cc:a5:52:1d:e4:16:05:84:9d:
         87:60:13:91:ab:a4:be:4f:9b:43:d5:3c:38:42:17:33:fb:38:
         14:e9:fd:9a:74:f8:b0:9f:89:4a:e1:06:cc:30:73:1b:c7:f7:
         7d:6d:52:15:7e:34:73:64:66:20:c1:0d:53:b4:c7:b2:35:3a:
         6e:e3:b6:5e:9e:63:72:54:46:9a:8d:0c:84:0d:72:ac:8b:1f:
         62:cb:4f:8b:49:61:d9:ba:f8:eb:c8:4e:11:49:b4:28:24:c6:
         df:f2:5f:01:25:bc:14:19:6c:ad:be:3e:82:8d:dc:55:a9:41:
         e1:e7:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:37:49 2026 by rpki-client