Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File:                     HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier:          dhifYi4i6gPiN1jNkb31UpzuacvMeM+t+eL121coaiY=
Subject key identifier:   96:7A:FE:67:13:18:C4:FF:B7:46:B0:B8:2C:25:05:73:28:F4:6E:DF
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer:       /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial:       019E30DFDE70456FA74B1E5B55D66D1EA47D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number:          18A2
Signing time:             Sat 16 May 2026 13:00:38 +0000
Manifest this update:     Sat 16 May 2026 13:00:38 +0000
Manifest next update:     Sun 17 May 2026 13:00:38 +0000
Files and hashes:         1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: En9E5AK71Rk5eMdOjuHXV+8+xY0IB7Tvu1ZiiGXtecM=)
                          2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=)
                          3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:de:70:45:6f:a7:4b:1e:5b:55:d6:6d:1e:a4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
        Validity
            Not Before: May 16 13:00:38 2026 GMT
            Not After : May 17 13:00:38 2026 GMT
        Subject: CN=967afe671318c4ffb746b0b82c25057328f46edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:be:cc:b2:3e:ab:ac:0e:3d:8f:83:19:bf:
                    46:7a:64:41:2d:90:7b:88:d5:38:a0:24:6f:c2:24:
                    8f:96:fd:56:ae:de:13:28:c2:0e:90:cd:b7:2b:0c:
                    d4:b3:3b:28:af:d4:05:7f:a7:f6:66:66:06:94:52:
                    ea:e4:04:70:a4:80:c6:56:6a:81:09:81:27:2b:d7:
                    dc:41:77:69:d6:77:99:0c:6f:49:ae:9d:3a:bc:98:
                    e4:66:93:60:9c:bc:99:20:3a:cc:af:93:dc:b4:55:
                    48:f1:75:81:7a:c7:d2:3e:31:25:34:95:ae:3e:f8:
                    b9:1d:da:31:a0:83:1d:dd:72:01:15:41:21:b3:5b:
                    7d:96:83:85:af:18:62:2d:f8:93:25:37:f3:f4:7c:
                    b5:d0:9a:f3:fd:23:93:5d:69:a3:8e:b7:b7:a7:e7:
                    de:9c:16:42:bc:91:fd:2e:8e:07:82:6a:12:a2:9f:
                    8f:83:c2:5b:df:c5:0a:1c:4d:b8:7a:77:aa:a5:96:
                    a4:3e:6f:20:61:9d:67:2a:81:4f:2e:61:b0:c9:85:
                    70:0f:68:75:43:c5:fb:2e:8f:72:7a:f9:cd:44:13:
                    bf:5d:dd:f7:45:95:0a:22:15:03:82:1b:cd:52:b9:
                    76:d2:2e:13:22:9b:a4:8c:ab:5e:4e:78:3f:52:c7:
                    1d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:FE:67:13:18:C4:FF:B7:46:B0:B8:2C:25:05:73:28:F4:6E:DF
            X509v3 Authority Key Identifier:
                keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:51:40:0a:62:84:5a:8e:aa:cf:49:1a:98:52:d8:4e:a3:1b:
         cd:54:4e:a6:5b:6c:7c:ae:5d:49:c6:f8:b4:0b:a5:91:f6:94:
         ff:cb:b8:75:ef:99:34:92:53:49:6c:a4:cf:60:61:94:ac:f4:
         65:f9:70:04:5b:3f:5a:a6:55:f9:ca:5a:e4:d9:aa:6b:49:00:
         9e:34:61:e3:f9:53:85:d3:09:37:17:69:67:78:a7:77:41:03:
         c4:af:f6:16:43:22:8f:ff:5d:37:85:4e:e9:42:d7:e2:40:44:
         6d:ca:7c:5e:ae:de:f0:5f:15:e5:0a:82:fb:6f:69:99:9a:d8:
         97:b5:d4:9b:91:0f:63:50:63:21:0d:67:b4:9d:67:01:cd:5d:
         1d:ca:3b:29:cf:ba:ab:30:24:30:e0:a9:e7:71:05:32:41:32:
         7b:17:da:56:87:99:d1:88:5c:53:83:e5:d0:55:da:c6:81:60:
         c3:70:10:47:1f:8a:e3:44:bd:1b:bb:d6:31:14:38:86:47:3d:
         25:9b:d0:86:4c:e4:9e:70:36:6d:72:a5:35:e9:71:cd:7f:0a:
         1e:57:17:39:9e:bc:cd:d2:a0:22:97:c1:bb:03:e4:77:b2:4c:
         f4:13:81:10:bc:8d:c6:e1:2f:68:eb:fe:f9:23:a0:d0:90:5b:
         20:d7:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:59 2026 by rpki-client