Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File:                     HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier:          YkgCNM4NcJrEIpsxV9IRxXsqQqhPT6POmoi4QEjLFF4=
Subject key identifier:   34:C2:40:23:A5:B6:E7:D2:3A:86:53:79:46:E0:D1:29:F6:D7:2C:2F
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer:       /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial:       019D371B9281A37C2C86C74910ECDFAEF1EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number:          0975
Signing time:             Sun 29 Mar 2026 01:00:46 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:46 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:46 +0000
Files and hashes:         1: 3W6mluySiEpKej6eN1jA5zstxy4.roa (hash: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ=)
                          2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: SQE8KM7nockAIKhOrv43YuHg8UEPM0IrVUXujFnTDkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:92:81:a3:7c:2c:86:c7:49:10:ec:df:ae:f1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
        Validity
            Not Before: Mar 29 01:00:46 2026 GMT
            Not After : Mar 30 01:00:46 2026 GMT
        Subject: CN=34c24023a5b6e7d23a86537946e0d129f6d72c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:f6:82:c3:dd:37:75:3e:c7:aa:ff:8c:dd:
                    73:e0:d1:ba:2e:e4:71:14:55:47:28:8c:07:04:cc:
                    15:4b:85:0e:1a:b4:26:5e:3d:8f:5e:4a:78:b0:b8:
                    5b:15:12:66:c9:28:bf:08:38:a7:28:67:ac:21:0c:
                    b5:af:1d:f4:45:f7:7d:b9:89:18:41:7a:5f:3c:10:
                    9a:ae:2c:66:aa:b9:78:c3:e1:0e:ae:5b:67:ae:06:
                    da:e9:1d:b4:ce:b3:19:be:a9:71:5c:d0:b6:29:0c:
                    a1:31:0b:c9:01:95:89:27:76:d3:97:ac:2b:27:65:
                    41:d0:38:db:d6:2d:96:21:3a:57:8a:09:41:30:07:
                    81:1e:a0:67:72:e5:e0:1c:01:7b:5b:95:4a:17:67:
                    28:95:6c:31:90:9c:01:aa:b3:0a:22:a8:3b:af:fe:
                    b9:6c:71:6d:7b:d8:b1:bd:02:5e:5f:4f:33:21:ae:
                    69:09:76:70:b4:5e:97:92:bd:7d:e6:20:2f:c8:9f:
                    69:71:df:fe:e6:fd:1c:04:54:48:b0:20:5f:88:58:
                    cc:0a:c0:f0:3a:b2:0e:9d:25:d6:d9:e8:c3:db:1a:
                    c0:84:9a:d5:9a:53:e9:bd:52:e7:54:e2:42:23:af:
                    53:99:66:d9:c8:b1:3f:b3:7a:a0:2e:42:51:b1:5a:
                    ca:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C2:40:23:A5:B6:E7:D2:3A:86:53:79:46:E0:D1:29:F6:D7:2C:2F
            X509v3 Authority Key Identifier:
                keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3e:6d:db:51:0d:9a:63:a1:8a:a4:98:b6:a8:3e:0b:89:31:
         7e:fc:f8:28:71:e8:39:54:32:8e:83:f8:e3:8a:93:08:84:51:
         2d:8f:ca:9f:c6:46:7d:bd:13:c7:5e:86:86:fc:a9:41:84:25:
         43:c6:28:7f:a2:45:82:cb:60:e2:b0:05:33:7a:fe:1e:12:c8:
         c3:00:02:73:07:9b:dd:31:bc:33:2f:cb:fc:05:f7:cf:43:7e:
         84:6c:56:2e:67:ea:60:c0:07:2d:e4:5d:8d:2a:de:b1:23:64:
         14:40:57:9f:ee:2b:9a:af:0b:6a:8e:75:9d:b5:74:f0:0a:19:
         2c:2c:28:d0:a4:91:ef:9b:8b:f9:5d:91:55:a2:4d:1a:51:3c:
         7f:80:2e:ea:cd:9f:7c:33:35:7e:e0:5a:57:45:8b:31:69:a7:
         0a:61:5b:14:56:5b:13:ad:6a:36:32:6b:f3:32:6b:85:f0:99:
         4e:09:0e:e4:53:13:9b:9d:0f:e4:f0:06:2a:81:aa:34:4c:20:
         74:be:49:18:8d:9e:f0:7a:c8:8e:ec:b8:cf:85:00:70:b0:8f:
         46:66:74:d3:45:15:1d:0f:f1:78:97:ca:f6:0f:fe:8c:5a:7e:
         8a:a0:f3:0b:01:24:91:fd:eb:fa:e0:f5:be:5b:ae:d6:ec:f3:
         af:63:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:25 2026 by rpki-client