Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/S_Hsmlta7aoRFj3oWDQYgfTGpNQ.mft
File:                     S_Hsmlta7aoRFj3oWDQYgfTGpNQ.mft (raw, json)
Hash identifier:          +p5+hxYGRY0cj0GRt44gaaN/a1TklXpvSHa2nPbkXHs=
Subject key identifier:   37:34:7E:DC:44:D5:6F:91:3A:07:B5:6C:34:C9:60:79:FE:9F:9E:2F
Authority key identifier: 4B:F1:EC:9A:5B:5A:ED:AA:11:16:3D:E8:58:34:18:81:F4:C6:A4:D4
Certificate issuer:       /CN=4bf1ec9a5b5aedaa11163de858341881f4c6a4d4
Certificate serial:       019EFC83DFB61567234FEBA5F55503AF5858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_Hsmlta7aoRFj3oWDQYgfTGpNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/S_Hsmlta7aoRFj3oWDQYgfTGpNQ.mft
Manifest number:          54
Signing time:             Thu 25 Jun 2026 02:02:41 +0000
Manifest this update:     Thu 25 Jun 2026 02:02:41 +0000
Manifest next update:     Fri 26 Jun 2026 02:02:41 +0000
Files and hashes:         1: S_Hsmlta7aoRFj3oWDQYgfTGpNQ.crl (hash: xuXBj0QV5WDWGYQuBpLRHGT0k8luNcau4Hl6hH3WRsQ=)
                          2: _kuiA8pDR8u44gJGjBi5wP2Kabs.asa (hash: yNohfbYZtF2ZGA1xVqpa1ZQQkf31K3/Q527eELXIQxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/S_Hsmlta7aoRFj3oWDQYgfTGpNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/S_Hsmlta7aoRFj3oWDQYgfTGpNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S_Hsmlta7aoRFj3oWDQYgfTGpNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:83:df:b6:15:67:23:4f:eb:a5:f5:55:03:af:58:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf1ec9a5b5aedaa11163de858341881f4c6a4d4
        Validity
            Not Before: Jun 25 02:02:41 2026 GMT
            Not After : Jun 26 02:02:41 2026 GMT
        Subject: CN=37347edc44d56f913a07b56c34c96079fe9f9e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:81:9d:d8:47:ac:3c:50:6a:19:3f:3a:95:
                    6c:ff:2e:d1:82:0a:53:1d:4a:f7:cf:97:a8:ef:e1:
                    88:aa:c0:3d:aa:43:97:c3:20:24:17:35:79:4d:ce:
                    ee:60:d0:02:20:79:43:03:16:03:11:5a:c9:ac:cc:
                    27:a0:34:7e:6f:62:82:ce:30:6e:ca:5e:95:fb:46:
                    0e:34:37:fa:c9:50:4a:cf:bf:b2:ee:e9:48:1c:9e:
                    16:e1:ee:6c:c3:00:d8:38:07:74:6b:fc:85:99:4c:
                    cd:fa:b2:35:16:b2:ac:22:80:d1:28:a3:a0:0e:b0:
                    4e:8d:6b:5d:3d:f7:db:e5:19:33:68:a1:71:ef:46:
                    35:fa:46:e3:a4:76:3a:8a:11:a3:f5:62:e1:1b:be:
                    ea:0b:2b:c9:d0:e4:1a:9d:21:c0:ec:8d:51:71:60:
                    dc:90:04:54:55:1e:f1:bf:7a:68:69:37:74:fb:88:
                    db:d7:b4:bd:f9:9d:23:31:a8:71:a6:d0:22:ea:06:
                    b2:1c:50:fd:ae:01:d5:96:ff:bf:88:a5:d2:4b:9a:
                    34:8b:c5:69:1d:a4:2e:44:31:3b:31:81:3b:ec:cb:
                    0e:3f:9c:ed:48:83:ba:8e:d8:3c:a6:49:19:e6:3f:
                    12:47:e8:a6:b6:52:f6:2e:5c:f5:16:69:07:bc:7d:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:34:7E:DC:44:D5:6F:91:3A:07:B5:6C:34:C9:60:79:FE:9F:9E:2F
            X509v3 Authority Key Identifier:
                keyid:4B:F1:EC:9A:5B:5A:ED:AA:11:16:3D:E8:58:34:18:81:F4:C6:A4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_Hsmlta7aoRFj3oWDQYgfTGpNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/S_Hsmlta7aoRFj3oWDQYgfTGpNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/S_Hsmlta7aoRFj3oWDQYgfTGpNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7a:63:fb:14:7d:98:6a:92:1b:9c:dc:44:72:ca:ad:a4:66:
         1e:99:7f:4e:da:63:13:4f:b1:2b:b4:84:0e:0b:ac:cd:aa:2e:
         7b:39:44:6f:3e:2c:73:9e:5d:55:e9:5b:e4:6e:f1:0f:fa:5a:
         27:f0:7f:23:63:1d:90:14:16:de:19:f3:41:77:31:d1:da:93:
         f8:28:d7:21:3e:df:bf:1c:55:70:df:8a:1f:a0:18:ac:ce:4f:
         0e:0c:e9:ae:52:63:5e:27:11:fe:0f:09:cc:fa:75:a7:84:17:
         e7:66:52:f0:54:72:13:ef:88:ed:72:b6:97:22:74:37:9b:17:
         62:34:6e:d8:38:91:11:6a:71:31:ac:5a:10:ae:65:5b:ef:c1:
         e6:3b:5f:09:62:69:ae:71:86:cb:ec:e6:08:9c:51:73:48:4d:
         31:40:e8:f4:00:0c:08:a5:50:a1:43:32:07:8b:6d:26:4d:fe:
         6c:db:a3:fa:4d:16:93:79:eb:54:b2:ea:e3:a7:51:ae:1c:fc:
         3c:2d:d3:8a:e5:17:49:f4:e8:b0:85:c5:8c:5d:dc:1e:5d:6a:
         3a:e3:87:f8:90:3c:66:80:a1:ec:c0:b0:a1:2d:ad:dd:30:0f:
         38:b7:e1:59:b7:6d:96:dc:c4:8e:99:46:0d:e0:56:49:b9:0b:
         66:87:de:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78g9+2FWcjT+ul9VUDr1hYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjFlYzlhNWI1YWVkYWExMTE2M2RlODU4MzQxODgxZjRj
NmE0ZDQwHhcNMjYwNjI1MDIwMjQxWhcNMjYwNjI2MDIwMjQxWjAzMTEwLwYDVQQD
EygzNzM0N2VkYzQ0ZDU2ZjkxM2EwN2I1NmMzNGM5NjA3OWZlOWY5ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd2BndhHrDxQahk/OpVs/y7RggpT
HUr3z5eo7+GIqsA9qkOXwyAkFzV5Tc7uYNACIHlDAxYDEVrJrMwnoDR+b2KCzjBu
yl6V+0YONDf6yVBKz7+y7ulIHJ4W4e5swwDYOAd0a/yFmUzN+rI1FrKsIoDRKKOg
DrBOjWtdPffb5RkzaKFx70Y1+kbjpHY6ihGj9WLhG77qCyvJ0OQanSHA7I1RcWDc
kARUVR7xv3poaTd0+4jb17S9+Z0jMahxptAi6gayHFD9rgHVlv+/iKXSS5o0i8Vp
HaQuRDE7MYE77MsOP5ztSIO6jtg8pkkZ5j8SR+imtlL2Llz1FmkHvH1KAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc0ftxE1W+ROge1bDTJYHn+n54vMB8GA1UdIwQY
MBaAFEvx7JpbWu2qERY96Fg0GIH0xqTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19Ic21sdGE3YW9SRmozb1dEUVlnZlRHcE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYzQxNTMtYjhjOS00Njg1LWE1NjYt
ZmFlZjJlMTg0NDYyLzEvU19Ic21sdGE3YW9SRmozb1dEUVlnZlRHcE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xYzQxNTMtYjhjOS00Njg1LWE1NjYtZmFlZjJlMTg0NDYy
LzEvU19Ic21sdGE3YW9SRmozb1dEUVlnZlRHcE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnpj+xR9
mGqSG5zcRHLKraRmHpl/TtpjE0+xK7SEDguszaouezlEbz4sc55dVelb5G7xD/pa
J/B/I2MdkBQW3hnzQXcx0dqT+CjXIT7fvxxVcN+KH6AYrM5PDgzprlJjXicR/g8J
zPp1p4QX52ZS8FRyE++I7XK2lyJ0N5sXYjRu2DiREWpxMaxaEK5lW+/B5jtfCWJp
rnGGy+zmCJxRc0hNMUDo9AAMCKVQoUMyB4ttJk3+bNuj+k0Wk3nrVLLq46dRrhz8
PC3TiuUXSfTosIXFjF3cHl1qOuOH+JA8ZoCh7MCwoS2t3TAPOLfhWbdtltzEjplG
DeBWSbkLZofenA==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:34:32 2026 by rpki-client