Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File:                     HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier:          puhG/112Zt499cOxYwcDRGyqImoHQCBzxVD34/z+qmY=
Subject key identifier:   57:6D:E3:CB:89:DD:0A:B7:EB:ED:AF:3C:16:84:5D:F3:3A:AC:3E:55
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer:       /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial:       019D38D3036235E58B6C353B575F9339727B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 09:00:46 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:46 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:46 +0000
Files and hashes:         1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: qgesCh4885hex6AQf1BbmozP2JWs0Eve6js8d+SvDsw=)
                          2: khbk2O6uaJwQ02xod7VfRqroSH8.roa (hash: JHGyb709uPLZ2YerR1cXSu892JXCz6N62IZ5FMhPQdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:03:62:35:e5:8b:6c:35:3b:57:5f:93:39:72:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
        Validity
            Not Before: Mar 29 09:00:46 2026 GMT
            Not After : Mar 30 09:00:46 2026 GMT
        Subject: CN=576de3cb89dd0ab7ebedaf3c16845df33aac3e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:fa:06:10:38:55:e0:30:2d:07:31:1e:31:
                    01:8c:30:3a:02:8f:6c:f3:89:97:bf:da:7d:2c:1a:
                    9a:35:8e:ea:d4:7b:c0:19:7e:39:2f:60:41:8e:68:
                    c2:15:b5:93:56:30:1d:80:e5:0b:93:14:c5:a5:2e:
                    07:7c:90:d4:da:f0:9b:11:e1:6d:eb:c4:05:aa:0e:
                    2f:9e:90:f1:b2:6b:c5:f7:6f:2c:ae:fb:b8:78:e3:
                    90:f6:c8:f3:12:6b:98:fc:90:05:26:25:b5:ee:76:
                    d6:d5:7a:5a:13:44:c9:e1:0e:00:80:b2:fe:62:64:
                    ff:ab:74:0e:38:6e:f3:30:8a:9c:e0:7d:4f:ed:f1:
                    57:ca:60:65:51:46:2b:ad:29:8a:c1:5e:43:aa:4c:
                    96:51:8b:76:76:2a:1d:57:a2:0e:28:fd:9a:b7:65:
                    bb:cf:de:08:ef:36:4f:1b:f8:ac:57:84:74:ad:6a:
                    7f:76:bf:f1:1b:ff:41:cd:80:89:ee:e2:7a:45:6f:
                    7f:e0:86:b0:99:ab:d8:d9:78:c0:3c:76:35:79:cc:
                    82:92:94:7f:6c:80:91:86:63:d8:ee:e4:03:73:54:
                    97:25:9a:45:7d:2f:6b:5a:bf:7d:8f:81:c5:89:c2:
                    eb:e5:1c:b4:45:c8:7d:7a:49:f4:5d:82:e4:a8:e7:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6D:E3:CB:89:DD:0A:B7:EB:ED:AF:3C:16:84:5D:F3:3A:AC:3E:55
            X509v3 Authority Key Identifier:
                keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:54:e5:39:58:55:24:fa:28:2c:d8:5c:c9:c8:34:7c:9d:
         55:c0:a9:19:37:96:2c:7e:de:26:42:4d:b3:1a:45:03:37:e9:
         27:10:35:95:33:a1:c6:20:51:9b:48:85:e1:33:d3:bb:b6:b1:
         68:a4:84:11:44:e8:74:0a:5d:fc:33:05:86:82:dd:f0:57:3e:
         0c:f8:a1:90:41:ef:f5:a3:1a:dc:7d:1d:9b:ee:86:73:91:98:
         bc:36:a1:33:ae:76:b4:d7:1e:f4:c8:09:b2:06:d1:c0:47:da:
         11:54:f6:c7:75:ed:59:2e:58:a9:37:66:c9:c9:66:1c:bd:8f:
         ae:3e:f1:3d:5e:51:3a:44:75:d2:96:8a:cc:86:1f:2c:1f:b3:
         e0:8a:5c:a3:73:02:61:1f:c9:4f:e9:5d:a1:63:11:69:96:4a:
         6d:df:51:c2:65:3b:5a:37:8c:35:9b:f3:68:b3:cc:83:8f:49:
         31:0e:8e:64:f9:27:1a:e0:15:9c:c5:8b:e1:64:9e:be:0c:83:
         e0:da:88:de:43:ef:d9:6c:98:7a:31:0b:3a:87:d6:a9:22:5d:
         ed:94:eb:0e:c7:d2:d7:ee:05:e7:f4:25:3c:c9:9b:b8:4a:a3:
         ad:76:a1:64:86:38:49:51:3d:8e:e6:73:38:ed:aa:e0:1c:04:
         40:71:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:53 2026 by rpki-client