Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          UzCpeqATYmhjBSgaj04sDx5t9iAgB1zWvJpcO/nC2Yw=
Subject key identifier:   3A:B7:3C:BD:69:E6:88:24:42:E1:AC:39:B5:98:D0:45:D5:07:2F:63
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       01A0645B1CFCD564A3119E15CB5A4742B5AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          10BD
Signing time:             Wed 02 Sep 2026 23:01:27 +0000
Manifest this update:     Wed 02 Sep 2026 23:01:27 +0000
Manifest next update:     Thu 03 Sep 2026 23:01:27 +0000
Files and hashes:         1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=)
                          2: 4BgA-ABWSArgHx-ygbshx6JYrTY.roa (hash: bvv8kgY0ZVnm7qvnIwLD4R0xE7EezfYihSBw0uGEums=)
                          3: 6oX7ogKnna_ypXZ8MDh5x58FMtk.roa (hash: octsSR/p/oYnmWAgy7moWhXPeQCD19SmWvpLf6k7P8g=)
                          4: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=)
                          5: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=)
                          6: D9IIvAjUBeonrUuAtA9-LP_kfxg.roa (hash: 2T3Qvn8J8uK4lzJw95imN9pofbDQi2ngOHPWAgyI0Cg=)
                          7: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=)
                          8: Dk-jJFtIegd7vMtwXAPR2x7sWOg.roa (hash: eFq5rBM9aRlTQ6R3hKfapN16rEjVHqmjrF61RQvzONU=)
                          9: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=)
                          10: Hhx08W6yxhRbHfCLKYdHm13ozS0.roa (hash: jwpzK3qtdotyMub/ILdIHzVfvJLpMrtxw3Hz/Tq6IYI=)
                          11: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: QYVXvcr7lLCaIcND/FYDCaHab7avCL2UtgdvtbGaO/U=)
                          12: JDgMbtzm9TbQ4eWyo_rVJwWaWOY.roa (hash: v4xwFMtuHO8ayfqB5VQBenyDwKgKi5kZP3vMs+HZh4g=)
                          13: MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa (hash: pPpAjQ9/faa4QoYKDH51+jkG77bH512fpifEsnfi9LY=)
                          14: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=)
                          15: S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa (hash: jo9uW/EfFrv7avMQwhlQaDKV2tu9K+V96NtiixNAWjo=)
                          16: V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa (hash: 2mcsTNBbXliMo6Xfl43UwD6c9ZLoqqEr0U1Zz/8r+ug=)
                          17: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=)
                          18: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=)
                          19: acgv97YNnbbDPyBz44KpDWdpOkQ.roa (hash: KyAE8oZNrznG/SETxn7e5ARXLp9M42t4EPdCRxa4IjY=)
                          20: c3qNueiGWk4Qn-ykN_QlCOGM37o.roa (hash: wnA6SEQc4U9MNJjFtGtJmJio/YAYcn579hZtE+0vJ/k=)
                          21: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=)
                          22: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=)
                          23: fXJCkrL2-H_ZQ4Zt87YfhhhmOQs.roa (hash: 3C8IOTwEDVBKwzZYj72/2wGHHAb/m3FVKoIuZt999yc=)
                          24: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=)
                          25: ioRtNTdinpYrcVf_jzCS5BV23i0.roa (hash: Ka+iUbIs4jDL+lzQs7AOTwqacQczetgn601hHQNpQS0=)
                          26: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (hash: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0=)
                          27: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=)
                          28: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=)
                          29: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=)
                          30: waVfjlEW9G5C6wB6VoPjPFZVCgo.roa (hash: GBWMN0rzQ7woVbRkW0/HGCfRanbLCyvTKE8YVyrrQls=)
                          31: wjMr5Dy0bR1HNLEm4Nz5u1txWrA.roa (hash: 0N3meIn2yL7+R4H9Boh39pJ8uOOO2cz3n7sm1Yhp1RM=)
                          32: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 21:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:64:5b:1c:fc:d5:64:a3:11:9e:15:cb:5a:47:42:b5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: Sep  2 23:01:27 2026 GMT
            Not After : Sep  3 23:01:27 2026 GMT
        Subject: CN=3ab73cbd69e6882442e1ac39b598d045d5072f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:ee:8e:79:d0:9c:dd:39:4c:40:2e:a2:ca:
                    d9:fb:72:2e:2b:3f:5e:7a:60:b9:45:40:14:0f:8d:
                    c9:97:bc:b7:db:73:12:83:16:64:d7:e6:1f:e2:ba:
                    bb:39:f6:2b:43:98:05:29:6b:7c:56:79:08:3d:0c:
                    c1:f3:b6:77:ee:e7:38:03:61:8b:53:dd:c3:26:d4:
                    f0:b1:b2:02:c2:3a:9d:dd:30:3a:35:db:4e:e2:7e:
                    c1:b5:02:8a:f3:cb:01:19:0a:1b:b3:6c:8f:4c:93:
                    88:20:b4:93:51:86:6d:4f:85:87:79:ac:a5:ee:34:
                    67:7b:c8:6b:32:57:7f:e8:77:0c:2a:ac:2d:da:37:
                    83:28:9a:3f:0c:17:0a:1e:28:f5:0a:b4:92:90:dd:
                    46:7c:f9:a3:d3:c3:08:04:7c:23:06:86:2c:e1:21:
                    f4:f0:00:2e:0a:e1:6f:10:90:0d:23:05:49:9a:8d:
                    84:0f:df:ac:0f:e1:80:7a:e2:ac:89:cb:85:a1:4a:
                    f8:fc:31:1c:2b:04:fa:9b:60:e0:88:59:5f:e7:ac:
                    cd:fd:72:e8:5c:ff:e6:d8:de:76:fd:85:85:b2:08:
                    af:51:71:55:02:c1:4e:5d:31:94:ec:ff:0e:fe:a2:
                    25:0a:93:26:43:18:eb:8c:cf:70:88:60:61:a2:92:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B7:3C:BD:69:E6:88:24:42:E1:AC:39:B5:98:D0:45:D5:07:2F:63
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:62:6e:18:9c:bb:c3:c0:b2:38:0f:67:a4:80:d1:f8:fc:ae:
         1d:5e:9d:9f:81:03:20:82:a8:76:27:23:44:ac:60:17:c8:59:
         1e:78:da:d3:7d:49:49:f8:19:d8:f5:f9:a9:c5:c7:95:93:51:
         d3:78:b4:69:56:9c:1e:22:b0:aa:e3:aa:83:a8:a6:40:ee:5e:
         d2:70:21:3f:04:bc:a1:1b:34:b5:b9:d1:a2:d4:ab:96:68:3f:
         b6:b4:ae:0d:c4:a9:41:20:f6:78:5f:e7:24:d6:9d:fb:62:1a:
         54:d6:ef:77:f8:39:0c:4d:db:16:39:95:5c:b3:84:d8:0e:97:
         a1:85:c3:1c:27:03:4f:43:1e:a0:e2:04:52:d0:a5:f2:1d:1d:
         14:4d:28:56:a6:63:88:7e:58:e5:ed:ff:52:05:35:cd:fa:ab:
         e4:bf:42:fc:12:33:ab:54:af:46:a1:22:c9:87:f1:81:9e:72:
         c3:fe:57:4e:b7:00:8d:9b:a5:8a:3f:01:37:ac:97:f7:59:9a:
         75:13:25:4b:73:5b:05:d9:7e:b1:df:1f:4f:41:21:37:a6:51:
         80:17:81:3a:cc:97:19:ae:b6:7d:16:32:d0:fa:42:42:3e:eb:
         9a:07:ae:66:9d:bc:a2:d9:46:4c:e3:a2:c3:e1:e8:fc:b2:40:
         0a:bb:f1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 04:17:32 2026 by rpki-client