Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File:                     HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier:          bveQU9iigSby+I7zt5h53Qfza6Wk8nH48WPp+hrWl+o=
Subject key identifier:   1C:A1:A5:5D:A1:1A:C0:30:57:91:3C:0D:D7:6C:F4:EA:D0:28:EE:45
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer:       /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial:       019F8568B3A4D63E7B0ED1C77F49B7735243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number:          1655
Signing time:             Tue 21 Jul 2026 16:00:59 +0000
Manifest this update:     Tue 21 Jul 2026 16:00:59 +0000
Manifest next update:     Wed 22 Jul 2026 16:00:59 +0000
Files and hashes:         1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: PmbvbvPnL3g2e8sOc0KcwLpONXaGaprjn2+lEemfCN4=)
                          2: OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa (hash: JuywCKLI+PPdkKSGBeKBQF3KYZjcO8aSfG1zgtriXEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:68:b3:a4:d6:3e:7b:0e:d1:c7:7f:49:b7:73:52:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
        Validity
            Not Before: Jul 21 16:00:59 2026 GMT
            Not After : Jul 22 16:00:59 2026 GMT
        Subject: CN=1ca1a55da11ac03057913c0dd76cf4ead028ee45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:db:ce:59:a2:06:06:60:23:14:44:2f:94:
                    0d:c8:dc:4b:39:d3:6b:ed:bd:98:e7:4d:0e:d7:c1:
                    0f:74:4c:bd:94:53:49:f8:9f:91:43:7b:f6:01:9a:
                    c0:24:6e:1c:9c:56:88:3f:74:eb:33:13:80:80:1a:
                    60:0e:0e:48:0c:38:f2:5f:36:bc:95:a2:0e:18:ee:
                    6a:3c:7a:08:1b:7e:85:3d:c7:27:25:35:97:e8:36:
                    10:27:f7:f7:ad:a9:98:63:6b:b3:2f:58:14:e7:52:
                    30:bb:d8:85:d8:01:cc:96:8c:b3:6a:b6:0f:b5:a4:
                    5a:de:a3:19:13:83:3c:b1:f1:f0:d1:aa:0b:86:bc:
                    25:cd:5c:c1:51:b5:76:34:6a:a9:91:b3:b6:dd:99:
                    2c:65:0c:d9:47:d9:10:73:9d:2c:7f:86:06:f1:86:
                    ef:13:63:a1:4d:01:03:e3:5b:b7:a6:2b:47:69:46:
                    e5:a6:ac:80:cc:b9:c8:bd:60:0d:04:b3:27:ac:95:
                    a0:b0:80:57:57:56:01:a1:68:34:43:b9:b4:c6:de:
                    c6:c9:b1:a4:21:f9:cd:c4:23:65:cc:d2:e9:45:3a:
                    32:cf:23:e7:29:73:1b:d7:dc:53:95:19:38:11:29:
                    03:60:a1:04:62:b4:ce:14:36:f4:48:1c:53:42:9b:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A1:A5:5D:A1:1A:C0:30:57:91:3C:0D:D7:6C:F4:EA:D0:28:EE:45
            X509v3 Authority Key Identifier:
                keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:16:dc:bd:fa:12:17:62:ec:c2:3c:fa:c5:66:b8:36:9a:90:
         65:f0:06:dd:81:9a:dc:62:fc:3f:33:34:8b:09:09:05:7b:1f:
         8a:b2:22:7b:76:3d:a8:9a:b6:07:8e:14:fa:ef:6c:14:09:ff:
         40:d8:09:d3:59:71:07:c0:a0:78:60:61:d9:d8:75:35:57:68:
         4e:be:e4:47:2c:4c:79:6a:0b:56:77:28:e9:6d:ad:4c:a2:c4:
         32:e2:86:5c:19:f8:a5:8e:88:f3:d1:77:6b:c0:e0:e0:4c:4e:
         79:24:69:8c:df:4f:91:fc:8e:d9:c2:18:9e:00:bc:4c:63:4b:
         18:ff:6f:f9:b3:51:d7:c4:17:e8:71:38:20:a4:db:3c:5a:04:
         dd:f4:39:ba:90:cb:b2:4f:9d:9a:c8:b2:85:8b:af:13:1d:0c:
         8e:b2:64:a1:ba:57:27:4c:eb:15:f0:79:29:84:32:9e:fd:4e:
         b3:85:a3:d0:95:6b:f4:8b:3d:14:e0:80:fa:0f:7f:34:a9:3b:
         bf:46:20:75:ae:f5:3f:6e:c8:ae:db:68:45:0f:8c:77:30:70:
         58:af:78:ee:ff:f0:31:d7:c5:7e:2b:34:4e:fb:36:d9:65:71:
         d2:d2:da:7e:7f:3a:a3:c1:2d:52:17:46:84:bd:04:3d:d7:51:
         f8:49:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:51:15 2026 by rpki-client