Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
File:                     Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json)
Hash identifier:          +i7Kh2bOKQs2xj/V7NbKmebxXXTVwChHby+BYnXzpT0=
Subject key identifier:   24:60:C3:13:4C:08:F3:09:2B:8D:BC:1A:74:57:95:4D:DD:3E:41:20
Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Certificate issuer:       /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Certificate serial:       019D2101CC74D519E96B087A8515FAADDC5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
Manifest number:          1815
Signing time:             Tue 24 Mar 2026 18:00:59 +0000
Manifest this update:     Tue 24 Mar 2026 18:00:59 +0000
Manifest next update:     Wed 25 Mar 2026 18:00:59 +0000
Files and hashes:         1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: /mRmJJUFvLSGtuamdhSSAm5az6rweVVmiQUQspM7oow=)
                          2: idejEcxXsr16g2wp9V8Tc_3IUpE.roa (hash: 2R6v+WJgumF5jKo8h1riFb9sUElHbeJIrHYFIS833YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:21:01:cc:74:d5:19:e9:6b:08:7a:85:15:fa:ad:dc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
        Validity
            Not Before: Mar 24 18:00:59 2026 GMT
            Not After : Mar 25 18:00:59 2026 GMT
        Subject: CN=2460c3134c08f3092b8dbc1a7457954ddd3e4120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:97:c6:03:b0:ab:db:0b:cb:ae:2b:f0:1b:
                    a4:9e:9a:c0:61:6a:63:fd:0e:ab:3e:ce:2f:05:c1:
                    56:a2:9b:d9:73:c0:db:53:f0:06:3a:58:e3:55:21:
                    d2:e7:bd:c4:6f:4f:9f:3b:8a:ed:13:2f:be:c0:e2:
                    fc:a8:7e:b4:16:c5:50:83:15:24:3c:46:ba:63:25:
                    c6:47:26:a3:59:4f:78:da:8f:ca:33:a7:77:23:98:
                    bc:3f:4e:3a:ca:24:ca:e5:2d:0f:bc:17:2f:9f:8a:
                    06:94:9d:08:8c:d6:f9:35:5c:59:81:d8:e6:b7:ff:
                    30:a3:2c:e1:ab:05:3d:8f:b9:b9:58:7e:10:bd:8f:
                    4a:cc:26:0f:15:74:e5:16:ab:bc:01:ec:88:7a:60:
                    7c:78:9e:a0:2f:bc:3d:60:e3:87:12:f5:bc:82:b9:
                    a6:7b:0f:62:eb:aa:fd:82:e5:0c:2b:07:e7:c5:8d:
                    72:76:08:78:d4:9b:7c:5b:63:b2:a5:b7:c7:33:ef:
                    eb:06:83:54:c2:20:d2:8a:73:b8:18:82:a7:3c:ea:
                    15:c0:26:c2:ac:6b:c6:b4:c7:8e:4d:a5:21:49:fa:
                    22:d0:bb:8b:9e:60:7c:2f:37:ce:24:3d:17:57:9d:
                    43:a3:ec:93:45:ae:b1:a6:d3:9d:60:6f:47:b2:f4:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:60:C3:13:4C:08:F3:09:2B:8D:BC:1A:74:57:95:4D:DD:3E:41:20
            X509v3 Authority Key Identifier:
                keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:e0:b7:14:d3:bc:5d:cf:04:99:5a:4c:94:09:88:8e:11:
         ce:c8:0d:27:46:a4:d7:6d:14:2d:ee:35:a4:63:c4:5d:6a:c3:
         a3:46:74:0f:69:ae:7f:80:50:cb:ad:67:30:ef:be:28:dd:7e:
         d0:b3:cb:6d:04:d1:ab:db:c1:a9:73:cc:b8:a5:74:f0:e1:5f:
         0c:46:1a:72:6d:95:51:f7:68:b7:36:06:90:24:d3:01:71:a2:
         fa:e6:fa:b2:df:6f:4f:44:b7:13:8c:6b:d4:b3:3f:65:28:6d:
         e0:0c:b4:d0:75:64:fe:80:7b:15:0b:8b:31:3c:bd:32:f3:9f:
         5d:b8:25:74:4b:91:74:19:d7:c2:44:44:6c:f7:4d:cb:c2:4a:
         07:6d:46:26:11:f2:b1:ea:12:61:63:f9:64:02:af:2b:0b:f5:
         a0:76:da:6c:93:7d:5a:2f:91:b7:75:d4:2a:e7:af:8b:88:85:
         ab:fd:71:82:80:27:c4:1c:62:1b:49:0d:f2:a0:ce:f4:1b:a0:
         0e:09:e3:4c:72:6c:52:5f:35:7e:d3:e1:d1:06:89:61:1d:c0:
         43:12:3e:9f:a1:44:3a:af:d8:6e:a1:2d:0f:69:0f:5d:a0:5c:
         68:d6:d7:d3:42:e4:b6:c4:23:ad:ab:7e:1c:d5:a2:43:6c:60:
         0a:dd:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 02:31:38 2026 by rpki-client