Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          1qW8ei2kX6FWj3w+h+4jC57Zdxex233J8vASxBzkDwY=
Subject key identifier:   0E:AB:6E:B6:3F:8F:EF:40:4C:07:94:26:36:F7:FF:6A:0B:87:7D:93
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       019D3752A42E2FBB493240B0C79FC2D20C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          07C5
Signing time:             Sun 29 Mar 2026 02:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:55 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: z9OJAh/YnVtaPwPEvWwVKW/otah6GBdfvZCs8GLxakg=)
                          2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:a4:2e:2f:bb:49:32:40:b0:c7:9f:c2:d2:0c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Mar 29 02:00:55 2026 GMT
            Not After : Mar 30 02:00:55 2026 GMT
        Subject: CN=0eab6eb63f8fef404c07942636f7ff6a0b877d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:7a:84:21:07:59:07:16:85:c8:7c:d4:49:
                    9e:b0:91:73:fd:38:9e:70:ff:4a:dd:fb:44:21:17:
                    7f:d8:15:40:ad:37:6a:f1:b4:df:a6:eb:41:88:7b:
                    53:22:1e:17:6c:69:12:fb:e3:bb:88:f5:c0:c1:10:
                    bb:09:d8:15:03:36:c2:ce:df:ec:91:81:e9:25:68:
                    b2:a3:23:1b:29:6e:ff:29:44:2d:f5:9b:5c:20:8f:
                    41:81:7f:f2:46:fe:2b:9e:fa:65:0c:5e:90:76:b0:
                    b3:bb:18:c4:c6:b6:51:84:04:20:a9:a2:86:22:5b:
                    ec:e0:6c:6f:3c:07:d6:d1:01:a5:3a:bd:90:fd:a0:
                    f7:0c:61:f1:6f:57:02:31:8a:67:11:07:af:50:58:
                    0a:66:64:5a:9d:1f:fc:be:22:af:19:fe:4d:61:23:
                    d1:61:de:8f:4a:ae:56:f3:09:48:e0:f3:a2:96:da:
                    a5:02:f2:f0:87:47:61:6c:4e:4e:33:be:3f:76:67:
                    96:4b:38:bf:45:b5:42:e5:1d:93:4e:b9:35:f9:87:
                    d8:78:d3:35:fd:0e:2b:5a:38:88:30:8f:1e:1a:8b:
                    a3:3f:7e:58:45:a2:02:82:a0:bb:f5:ab:dc:bf:c0:
                    9f:84:35:7a:34:a0:9b:3f:9b:32:00:44:44:27:fd:
                    6b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AB:6E:B6:3F:8F:EF:40:4C:07:94:26:36:F7:FF:6A:0B:87:7D:93
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:b3:62:23:66:88:e9:b8:24:16:43:6c:4a:21:ec:f3:ad:
         b4:ce:a3:3b:5a:80:53:a9:44:9e:7a:65:5d:71:8d:65:7d:aa:
         ed:e7:7f:83:05:7e:5c:f1:a8:37:5c:2c:04:56:44:c3:c1:68:
         16:e6:80:53:b2:5f:f7:be:ac:08:0b:36:9c:87:0c:9b:44:e6:
         4a:76:dd:28:48:58:5d:47:e9:44:d5:2f:30:d2:bf:66:c3:b3:
         a7:8a:f0:2a:e4:6e:de:82:8d:48:51:d4:e7:f1:66:30:f1:83:
         e7:50:bd:09:5c:87:cc:01:56:8c:c0:a9:db:50:46:e3:ff:5e:
         ca:15:f5:5f:77:92:bb:b5:fa:88:4d:97:c2:5f:44:3f:21:9b:
         1c:bc:75:8d:e4:0a:51:e6:59:6d:d0:a9:9c:98:8f:94:a1:66:
         6a:07:5d:cc:ce:8e:54:89:b0:96:19:8c:60:f0:a5:ba:b4:e7:
         5f:2d:06:18:7b:69:87:e1:88:d0:a3:c4:3b:87:a1:d2:ca:f5:
         09:78:9b:f9:df:18:b4:2c:bf:d2:80:06:42:86:f3:2f:fd:4a:
         e3:0d:66:bd:3e:a1:8a:11:b8:6b:ea:2d:94:14:7c:d2:78:37:
         71:13:11:78:3f:31:69:dc:d9:37:79:d9:5d:89:7a:13:6d:09:
         18:03:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:09 2026 by rpki-client