Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File:                     HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier:          vAxsGkq0+SJ1jHXezf6XCQ7RWxHBQkhS79uAki9sv0M=
Subject key identifier:   59:DD:C6:05:20:DD:10:2B:B0:71:6F:FF:48:42:2C:9E:94:F5:DA:9C
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       019FF7FE3AEA9B46BAB80FAB6519DA4388DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number:          1713
Signing time:             Wed 12 Aug 2026 22:01:01 +0000
Manifest this update:     Wed 12 Aug 2026 22:01:01 +0000
Manifest next update:     Thu 13 Aug 2026 22:01:01 +0000
Files and hashes:         1: 6pBv9rKYxwjjKOpT9lg6FT4kUQA.roa (hash: IB3HEiPAgwZs0ZTzyeRwb6dl6LY+fOatj7OxrAXQUsE=)
                          2: Cw5n-PWT2I1DxgK5DhwcrBsPkdE.roa (hash: mUvGxOekgoK3xHrsniH+HyllAGZivMOYDnmq6KeKBXw=)
                          3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: ET+nIBea5ooPHQ9d7+798hdY6XbDKJUZzQ4An/o2epU=)
                          4: jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa (hash: qxuliQjoknAXmEjclXw7gD+kEmDxgV1U5FrECOviQhg=)
                          5: xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa (hash: EELHcZVf2cz0S4yWN9gbTUNVwaT1jOiA4YdDZsp4DqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:fe:3a:ea:9b:46:ba:b8:0f:ab:65:19:da:43:88:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Aug 12 22:01:01 2026 GMT
            Not After : Aug 13 22:01:01 2026 GMT
        Subject: CN=59ddc60520dd102bb0716fff48422c9e94f5da9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:16:db:c3:98:82:62:df:fd:c4:22:99:ac:
                    5a:a8:fe:f4:b4:1a:a6:c5:11:02:93:1c:50:23:69:
                    72:e3:e1:4f:51:db:46:1f:9a:d3:cd:5e:53:1c:b1:
                    d1:20:62:02:34:cd:79:58:d1:bd:95:45:3a:36:62:
                    89:71:ff:5b:ac:ea:46:4b:3f:cf:90:26:2f:20:62:
                    f2:3e:6c:53:f5:ae:9b:47:54:ef:b8:94:e6:1a:b5:
                    f2:d3:8b:02:e7:db:91:0c:63:ba:3d:56:5c:21:d1:
                    72:b8:2b:35:5f:28:d2:db:c1:ce:33:60:90:de:e1:
                    85:07:14:53:b8:50:1f:5f:d7:f8:b6:7b:94:85:51:
                    e0:85:82:57:56:9c:55:50:61:b2:75:a7:bd:e6:dc:
                    df:31:8c:8d:03:1b:0b:c8:24:76:8b:c7:94:61:3d:
                    2b:80:d8:64:ce:f4:02:e2:5b:c8:ff:52:e4:34:26:
                    59:79:a3:77:89:96:86:f5:ad:0e:ca:34:91:89:f4:
                    23:2b:63:a8:50:b4:3b:e5:5f:c6:14:92:d5:1f:eb:
                    98:4f:c7:34:70:6a:13:ff:92:95:4a:7d:ad:bd:16:
                    56:46:5b:a2:8b:0c:28:c3:61:a4:48:1e:73:0c:3a:
                    be:18:60:43:99:e7:d6:20:c6:fd:d9:b0:80:43:e6:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DD:C6:05:20:DD:10:2B:B0:71:6F:FF:48:42:2C:9E:94:F5:DA:9C
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5a:0b:46:fa:52:07:ca:2a:dd:9e:a0:d2:d7:8d:e1:5e:cd:
         4c:87:8f:66:72:fc:48:7b:5b:79:ec:8d:08:df:94:51:e9:90:
         93:54:30:23:44:fa:f4:60:8a:76:d2:38:b0:a8:64:7b:d7:82:
         1b:17:bd:7e:f5:0f:06:4a:98:16:25:31:15:b7:76:20:31:71:
         f7:6e:c7:f1:78:9c:c6:aa:ed:7e:60:22:5c:65:38:06:4d:01:
         f1:02:b8:dc:01:2f:62:d2:66:69:e7:fd:e6:a8:9c:11:71:b2:
         57:19:06:a2:c6:bf:69:38:ca:8e:30:f9:f7:78:d2:7e:f2:ed:
         7f:28:c8:d2:f5:5f:c9:70:57:81:81:2f:80:bb:24:6f:17:5d:
         94:8a:3f:bf:52:8e:33:06:bb:d0:2f:54:4f:e2:cb:81:2c:dd:
         64:15:c4:20:0c:24:85:f2:68:a9:85:cc:9e:5b:62:a2:68:01:
         ca:97:e5:bd:48:7d:02:2b:df:c5:aa:96:01:ec:01:24:da:83:
         c9:31:bb:9b:1b:83:27:83:d8:09:2d:1a:cc:a9:54:f9:c9:7a:
         d2:32:5b:16:ed:2c:88:14:df:04:91:73:8f:6a:53:3b:b2:7d:
         7b:da:b1:ff:6a:33:b8:47:82:48:74:f0:86:e1:fb:48:07:ae:
         91:9b:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:04:37 2026 by rpki-client