Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File:                     HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier:          Y7krDZKnizAxYYnJkwZP3Qx+KlQ5Fblew5JHq86+/a0=
Subject key identifier:   0C:37:78:2E:24:75:13:68:DE:DB:13:C2:E8:61:43:FA:CE:E2:9C:97
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       019EFCF2A78750F3E33A31BB0CA1E583E471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number:          1691
Signing time:             Thu 25 Jun 2026 04:03:41 +0000
Manifest this update:     Thu 25 Jun 2026 04:03:41 +0000
Manifest next update:     Fri 26 Jun 2026 04:03:41 +0000
Files and hashes:         1: 6pBv9rKYxwjjKOpT9lg6FT4kUQA.roa (hash: IB3HEiPAgwZs0ZTzyeRwb6dl6LY+fOatj7OxrAXQUsE=)
                          2: Cw5n-PWT2I1DxgK5DhwcrBsPkdE.roa (hash: mUvGxOekgoK3xHrsniH+HyllAGZivMOYDnmq6KeKBXw=)
                          3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: kZOWKnQ7rr9FivTf0cGWOw/XXshtV832U0Bx/CSkQYc=)
                          4: jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa (hash: qxuliQjoknAXmEjclXw7gD+kEmDxgV1U5FrECOviQhg=)
                          5: xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa (hash: EELHcZVf2cz0S4yWN9gbTUNVwaT1jOiA4YdDZsp4DqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:f2:a7:87:50:f3:e3:3a:31:bb:0c:a1:e5:83:e4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Jun 25 04:03:41 2026 GMT
            Not After : Jun 26 04:03:41 2026 GMT
        Subject: CN=0c37782e24751368dedb13c2e86143facee29c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:db:39:7c:5b:da:18:56:f5:81:1e:17:47:
                    d6:ad:a8:04:08:be:52:75:23:6b:26:e6:a6:90:2d:
                    c4:00:3d:fd:cf:1e:03:f4:9f:d6:83:ca:c6:7a:44:
                    2e:1e:29:68:a6:af:b9:ac:97:f8:83:27:1d:7c:e8:
                    4e:e3:23:a5:e0:fa:3c:6e:47:b2:e5:42:1d:af:32:
                    43:90:1d:c4:dd:9f:f8:86:ad:10:9f:ad:fe:8c:5c:
                    50:fc:2d:d0:eb:5d:37:ed:dc:c3:9e:8e:c0:8b:dd:
                    82:b6:4f:ec:32:f8:4e:8d:68:32:bb:63:64:50:47:
                    75:95:fb:2a:e9:3f:cd:3a:d2:e8:f0:a2:ea:ae:dc:
                    8c:7d:38:64:84:a3:e5:9b:c7:f4:82:4b:d6:6b:01:
                    6d:1c:9b:8b:33:75:b8:e2:f8:b1:66:82:09:99:69:
                    63:77:03:79:6e:92:04:74:9f:41:c9:66:7c:7c:8a:
                    8b:36:0b:c7:29:ac:12:2e:7c:fb:1b:1b:45:8c:83:
                    b7:33:a6:a5:d5:54:ad:67:6e:7f:d9:dd:d1:8e:d1:
                    66:30:97:4b:3b:72:67:6d:9a:63:09:5f:b4:29:33:
                    93:81:ef:08:93:86:77:b9:1c:b5:7f:5f:1d:bf:16:
                    8d:97:8e:75:05:6d:a9:b4:17:98:fd:1c:6a:16:61:
                    3b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:78:2E:24:75:13:68:DE:DB:13:C2:E8:61:43:FA:CE:E2:9C:97
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6f:61:de:47:cb:17:6e:f0:8c:d0:96:b5:6e:56:77:6a:bd:
         14:43:ce:f7:74:b6:be:99:91:68:b8:34:ae:f0:ca:d8:d1:ca:
         c0:0b:0f:ee:92:29:19:5e:b8:20:47:d8:a6:d2:82:97:1a:8d:
         57:83:a5:39:b7:cc:bd:b1:a8:55:89:d5:55:2b:86:59:39:d5:
         60:01:37:6d:6d:0d:99:75:b9:9f:9b:bd:1e:d4:18:1f:01:11:
         df:16:93:e5:ee:e8:46:84:6d:73:a0:75:0c:81:33:ab:07:f8:
         4a:17:bd:75:4d:41:5c:ba:c2:65:13:73:c1:cc:f6:a9:09:5e:
         15:4a:a9:88:03:cd:4f:61:f9:1e:d4:ae:5c:a2:0a:da:fb:cf:
         c7:e9:57:3d:6d:7e:2e:b5:f9:64:b9:b7:a2:54:ea:c0:71:0c:
         c0:af:54:27:fd:0c:bb:35:9d:ea:8e:60:1c:d4:7a:f8:cb:37:
         eb:ae:98:24:64:2f:d3:9b:b4:a3:71:e7:4b:40:aa:8d:11:74:
         e7:a6:b5:62:78:b6:fa:a3:28:9c:16:36:43:a6:36:96:c2:60:
         bd:a8:9c:44:9e:00:16:3b:03:2a:a3:cf:dc:8a:ab:0a:08:07:
         d4:e1:ad:ff:ac:f6:39:43:c0:93:42:5c:7a:58:0a:59:03:50:
         d2:99:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:31:51 2026 by rpki-client