Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File:                     HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier:          IdfSyGaquevVT3Dw44HPTxF42I6JhDy9xaVnV7/3pkg=
Subject key identifier:   28:47:F1:A6:E5:88:73:40:42:29:23:15:DB:1B:F7:68:EA:99:86:0E
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer:       /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial:       019E314E7748C61C6E5987646FE98E9E63DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number:          0E47
Signing time:             Sat 16 May 2026 15:01:26 +0000
Manifest this update:     Sat 16 May 2026 15:01:26 +0000
Manifest next update:     Sun 17 May 2026 15:01:26 +0000
Files and hashes:         1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: 2pm4T9hoCSuvp4pEyfZ4zdDaJK6i6wxt0S868AfOJrg=)
                          2: gusOyZenv7586RqtEWmnhh7N0MA.roa (hash: 2ylZF1yMijEe2k4/d611VBCjiq1WUabPgeneyDm3vsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:77:48:c6:1c:6e:59:87:64:6f:e9:8e:9e:63:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
        Validity
            Not Before: May 16 15:01:26 2026 GMT
            Not After : May 17 15:01:26 2026 GMT
        Subject: CN=2847f1a6e588734042292315db1bf768ea99860e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:82:d3:9d:26:90:a2:33:4b:8e:52:ad:3b:
                    69:0d:ac:b1:a7:40:b2:c5:48:f8:09:0c:72:3a:c9:
                    bf:f7:95:52:42:00:72:d6:16:45:9b:63:a8:00:7f:
                    63:98:6b:bd:a1:f8:5c:17:8b:66:7c:7c:b5:67:0a:
                    ed:cd:4a:b7:bd:81:2d:51:fe:3f:87:5b:86:64:e7:
                    09:7c:04:d3:b7:61:64:77:d0:4a:ca:72:7c:c0:74:
                    f5:19:5b:03:69:bf:ce:32:09:1d:08:00:33:5b:4a:
                    94:dd:c8:76:dd:6e:58:11:e2:fc:a4:d7:fc:18:42:
                    37:a2:34:1b:3f:03:a6:0b:b0:c3:d2:58:00:36:ea:
                    0f:72:0e:61:3b:a2:23:b1:29:62:63:56:5d:86:9b:
                    3e:b4:d3:05:47:19:43:89:5c:dc:ce:37:b6:98:b6:
                    61:f1:85:f1:b9:43:34:2b:5c:ed:04:ec:aa:b4:fc:
                    70:ff:bf:e7:c4:94:b8:ef:9e:7f:41:6b:27:fe:d5:
                    82:c1:2c:38:ae:08:c6:f3:2a:0e:31:b9:89:3f:b9:
                    c2:af:78:56:92:eb:35:37:5c:a9:7d:af:0c:2a:4a:
                    86:fa:dd:4d:5e:86:04:9e:de:b7:59:94:28:14:d3:
                    c0:0d:76:d8:41:94:1b:da:8d:b4:13:ce:1c:08:99:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:F1:A6:E5:88:73:40:42:29:23:15:DB:1B:F7:68:EA:99:86:0E
            X509v3 Authority Key Identifier:
                keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:20:2a:96:fd:8c:b3:a9:24:85:5b:36:e8:63:5e:60:68:de:
         80:f4:ca:85:72:05:2a:dd:d3:59:69:1b:83:06:d8:cb:24:30:
         6f:e0:c6:f4:63:37:de:5f:12:f0:bd:fd:b5:53:21:72:96:c1:
         61:ff:28:e2:96:12:b8:59:99:24:2a:40:ce:15:e5:de:0a:7c:
         66:ba:98:4b:f7:48:be:bd:5c:a7:44:d6:a9:58:78:36:4b:85:
         e9:6c:98:e2:f2:23:68:24:72:a8:f7:2a:99:da:84:3c:2c:b4:
         f7:53:b8:9d:9f:90:a5:c2:b8:60:f1:08:72:48:8e:99:18:46:
         ec:f3:b3:0f:23:14:34:c6:14:ed:70:63:ff:9d:d8:77:18:6a:
         e7:2d:4c:c4:2b:1b:1e:ed:b1:3f:53:b1:80:72:7d:11:e6:55:
         e4:87:86:ae:17:d9:95:e4:3f:87:0d:33:39:4c:d3:ee:f3:f0:
         a6:60:e3:f8:71:cf:8b:95:f5:89:a4:e2:e9:ff:78:c0:0c:54:
         7e:0a:7e:0b:21:e7:dd:d8:49:2a:d9:6c:c4:ad:ea:59:5e:c7:
         41:6d:d2:dd:fb:a8:a8:a5:7a:37:57:4b:2f:63:5a:b2:fd:5a:
         1d:52:97:b5:0d:22:e2:2e:19:d2:cc:94:8e:92:ee:91:e1:33:
         37:c8:3f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:23 2026 by rpki-client