Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          zFb0T6NNPE0vdaFmw+87Atr9ap0IjXQVPEgzGpTQajU=
Subject key identifier:   17:0F:9C:A0:03:87:CA:48:F7:0D:9F:BD:3F:9B:58:FB:F5:52:A2:C1
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       01A15BFA1703699C5276318758ED2AA0FA37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          1143
Signing time:             Wed 21 Oct 2026 01:01:18 +0000
Manifest this update:     Wed 21 Oct 2026 01:01:18 +0000
Manifest next update:     Thu 22 Oct 2026 01:01:18 +0000
Files and hashes:         1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=)
                          2: 4BgA-ABWSArgHx-ygbshx6JYrTY.roa (hash: bvv8kgY0ZVnm7qvnIwLD4R0xE7EezfYihSBw0uGEums=)
                          3: 6oX7ogKnna_ypXZ8MDh5x58FMtk.roa (hash: octsSR/p/oYnmWAgy7moWhXPeQCD19SmWvpLf6k7P8g=)
                          4: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=)
                          5: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=)
                          6: D9IIvAjUBeonrUuAtA9-LP_kfxg.roa (hash: 2T3Qvn8J8uK4lzJw95imN9pofbDQi2ngOHPWAgyI0Cg=)
                          7: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=)
                          8: Dk-jJFtIegd7vMtwXAPR2x7sWOg.roa (hash: eFq5rBM9aRlTQ6R3hKfapN16rEjVHqmjrF61RQvzONU=)
                          9: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=)
                          10: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: 6qaruIGmt6Pkj21Mm0CjgAbID2eF9wa9nJo5NTKQP58=)
                          11: JDgMbtzm9TbQ4eWyo_rVJwWaWOY.roa (hash: v4xwFMtuHO8ayfqB5VQBenyDwKgKi5kZP3vMs+HZh4g=)
                          12: LSGlB-ajJzFLCn4n2ILBxzTMFCg.roa (hash: 7h9ibuh5D9RPhhsbZk+iDJYxN9/RBYhyuSLUZM4uQAs=)
                          13: MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa (hash: pPpAjQ9/faa4QoYKDH51+jkG77bH512fpifEsnfi9LY=)
                          14: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=)
                          15: S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa (hash: jo9uW/EfFrv7avMQwhlQaDKV2tu9K+V96NtiixNAWjo=)
                          16: V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa (hash: 2mcsTNBbXliMo6Xfl43UwD6c9ZLoqqEr0U1Zz/8r+ug=)
                          17: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=)
                          18: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=)
                          19: acgv97YNnbbDPyBz44KpDWdpOkQ.roa (hash: KyAE8oZNrznG/SETxn7e5ARXLp9M42t4EPdCRxa4IjY=)
                          20: c3qNueiGWk4Qn-ykN_QlCOGM37o.roa (hash: wnA6SEQc4U9MNJjFtGtJmJio/YAYcn579hZtE+0vJ/k=)
                          21: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=)
                          22: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=)
                          23: fXJCkrL2-H_ZQ4Zt87YfhhhmOQs.roa (hash: 3C8IOTwEDVBKwzZYj72/2wGHHAb/m3FVKoIuZt999yc=)
                          24: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=)
                          25: ioRtNTdinpYrcVf_jzCS5BV23i0.roa (hash: Ka+iUbIs4jDL+lzQs7AOTwqacQczetgn601hHQNpQS0=)
                          26: q_5h2J2szvTHu7w0j365OsNO_28.roa (hash: ehVA9ZwcbxiL71TE9OayRWFVow00rmle7PO/BmkhQbU=)
                          27: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=)
                          28: sQf6IK5FHk3Au1xATQSqBGjBt3Q.roa (hash: xoq0jOoDwQuAunETFsnRk7KpXL6i+eQqm5DGW96MaRo=)
                          29: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=)
                          30: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=)
                          31: waVfjlEW9G5C6wB6VoPjPFZVCgo.roa (hash: GBWMN0rzQ7woVbRkW0/HGCfRanbLCyvTKE8YVyrrQls=)
                          32: wjMr5Dy0bR1HNLEm4Nz5u1txWrA.roa (hash: 0N3meIn2yL7+R4H9Boh39pJ8uOOO2cz3n7sm1Yhp1RM=)
                          33: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:fa:17:03:69:9c:52:76:31:87:58:ed:2a:a0:fa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: Oct 21 01:01:18 2026 GMT
            Not After : Oct 22 01:01:18 2026 GMT
        Subject: CN=170f9ca00387ca48f70d9fbd3f9b58fbf552a2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:37:bb:fa:13:3c:57:aa:ae:c1:5b:10:3d:
                    7c:08:26:f6:cb:47:5c:e3:10:72:90:bb:44:10:3e:
                    a9:60:c1:5e:b2:65:ae:05:2f:ca:27:ba:27:06:ca:
                    f7:ec:82:8f:df:0b:41:33:7b:ca:4a:14:89:07:7d:
                    d5:58:f5:6a:13:9c:f0:b6:30:f2:11:6c:5d:a2:4b:
                    d6:d5:da:bc:b1:4f:3e:92:47:88:03:17:ac:91:ed:
                    30:e2:23:50:d3:70:d0:3f:8b:26:d7:a7:52:1e:be:
                    e6:05:22:11:9c:26:fe:20:a4:50:cd:7f:6c:fb:03:
                    e4:c7:ef:65:d7:16:ed:1f:ef:c3:5b:77:aa:e0:8c:
                    5b:b3:cb:c1:91:1c:74:67:a7:30:77:dd:63:e3:6b:
                    d1:b8:cb:25:66:ef:c1:e5:6f:42:2d:39:38:dc:2a:
                    53:a9:54:a7:5a:6a:a4:9f:e5:d6:ae:22:20:9d:a4:
                    c3:4a:cf:7c:32:54:2f:cb:7c:9b:0b:dc:f8:3f:da:
                    53:f7:4d:40:95:77:8e:98:59:85:c6:f3:60:39:a6:
                    a1:8d:d4:db:b5:12:e3:1a:53:87:f2:ec:20:dd:82:
                    f6:48:e6:b4:b9:18:b9:8a:95:b9:e3:70:98:16:e4:
                    da:1a:51:c5:ee:1f:63:7d:73:0f:52:18:30:5c:56:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0F:9C:A0:03:87:CA:48:F7:0D:9F:BD:3F:9B:58:FB:F5:52:A2:C1
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:96:24:aa:cb:2f:03:ac:02:3c:95:46:66:e8:19:3f:a0:ee:
         de:48:65:10:59:aa:5d:19:01:95:1c:b6:fe:72:b7:00:ed:d2:
         cf:6f:28:5b:80:37:3e:18:ab:c7:c9:3e:27:e7:9d:36:f6:78:
         18:7b:b5:4e:0f:41:e4:96:1b:3f:43:69:dc:d2:ad:c7:be:68:
         73:41:cc:9e:ab:03:d0:16:66:46:4b:dd:0b:a8:48:2a:2c:e1:
         92:ff:fb:a1:23:08:e5:33:e8:93:99:45:d3:5d:bb:30:92:20:
         5c:db:b0:59:a7:d6:dc:75:76:bd:ae:ec:f3:cb:bb:85:c2:21:
         2c:75:64:29:9d:73:47:42:10:ec:39:17:55:6e:d3:59:c8:4f:
         a7:5b:0d:a1:33:62:d5:0c:54:ef:7d:3b:08:e9:e0:36:44:35:
         91:2d:cf:9b:21:c7:90:7e:b4:bc:2b:21:16:13:cd:ee:2d:25:
         8d:95:44:99:8d:75:e7:c6:3a:b3:d6:9f:85:a0:47:aa:2a:0d:
         6f:ff:6e:41:88:67:dd:73:c2:e4:dc:e2:a4:43:29:73:a1:f6:
         36:9b:51:01:93:0d:f2:65:37:a9:41:ea:4f:3a:48:d6:11:1a:
         11:37:87:6a:89:37:73:c7:b1:f5:e2:cf:97:be:26:b4:3a:95:
         48:1f:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:16:22 2026 by rpki-client