Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File:                     HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier:          7H33uuhGhp/M1Cg4NFi2tl5BjQXj4nY7G6snwPf+9+w=
Subject key identifier:   17:5D:A1:DA:44:44:05:56:94:F5:4B:D8:DA:70:67:48:3A:07:38:88
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       019CCAF61BB5D90DA82C3DB5A5D7ECDC4854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number:          156E
Signing time:             Sun 08 Mar 2026 01:00:52 +0000
Manifest this update:     Sun 08 Mar 2026 01:00:52 +0000
Manifest next update:     Mon 09 Mar 2026 01:00:52 +0000
Files and hashes:         1: 6pBv9rKYxwjjKOpT9lg6FT4kUQA.roa (hash: IB3HEiPAgwZs0ZTzyeRwb6dl6LY+fOatj7OxrAXQUsE=)
                          2: Cw5n-PWT2I1DxgK5DhwcrBsPkdE.roa (hash: mUvGxOekgoK3xHrsniH+HyllAGZivMOYDnmq6KeKBXw=)
                          3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: F5lKJf9eBB1+Hqgh3cWyhU2YDfZZ1broQZy1/Evn0y0=)
                          4: jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa (hash: qxuliQjoknAXmEjclXw7gD+kEmDxgV1U5FrECOviQhg=)
                          5: xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa (hash: EELHcZVf2cz0S4yWN9gbTUNVwaT1jOiA4YdDZsp4DqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 20:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:f6:1b:b5:d9:0d:a8:2c:3d:b5:a5:d7:ec:dc:48:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Mar  8 01:00:52 2026 GMT
            Not After : Mar  9 01:00:52 2026 GMT
        Subject: CN=175da1da4444055694f54bd8da7067483a073888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:66:54:b8:d7:b6:6b:51:16:3f:d9:e2:82:
                    6a:3f:81:04:96:f7:64:6f:95:3e:9b:1a:a1:70:ff:
                    19:d5:e5:c1:df:1e:76:d0:01:e5:f2:1f:f8:98:26:
                    bb:80:9c:16:4c:07:bc:00:3a:71:3d:dc:b4:42:45:
                    e8:ad:8e:f2:7d:71:d5:ec:e7:0e:19:c1:e1:ed:7d:
                    60:f2:8d:9b:57:c0:cd:a9:94:d9:ad:98:9f:97:48:
                    c3:ad:4a:40:44:9f:69:6a:ee:e9:28:f6:fe:d9:51:
                    6e:cc:b9:63:e4:e4:b5:19:4f:f6:53:e8:34:11:4d:
                    20:2b:48:18:86:06:0b:ce:52:a2:db:28:19:02:7f:
                    6a:8b:60:0c:ba:dd:c8:57:3a:3c:c4:75:62:07:8d:
                    8a:28:98:57:8e:1c:d9:6f:aa:69:68:4b:56:6d:64:
                    dd:57:c5:9f:1c:d8:16:6f:0e:4f:fe:c9:e9:98:31:
                    a8:5a:e2:5a:f3:0b:7a:dd:a8:fc:2b:d2:ab:1a:17:
                    72:fa:50:2a:9e:1a:e0:3b:1a:2f:27:88:96:15:8f:
                    27:4a:f0:20:2c:e3:16:89:b4:08:03:48:4a:aa:cb:
                    a4:db:07:af:ee:72:b8:46:b0:13:77:07:3d:dd:2c:
                    5f:ad:03:b4:fe:c7:a4:0a:8e:b6:87:60:9c:36:6a:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5D:A1:DA:44:44:05:56:94:F5:4B:D8:DA:70:67:48:3A:07:38:88
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:20:a9:13:6e:e0:3b:9b:ce:5c:7c:b8:d4:85:98:95:b5:cd:
         25:93:69:cb:87:73:2b:b3:c9:2c:83:93:43:74:b4:f8:80:f5:
         47:2a:09:53:92:fe:67:51:05:e4:89:c6:b2:fb:ad:6d:58:d8:
         4f:c1:ce:53:81:79:f0:82:c2:ad:80:c6:50:d6:32:3a:22:45:
         24:a9:cc:ed:94:b1:cf:9d:51:30:d9:f3:1d:ac:05:af:12:60:
         5d:da:e4:33:f2:de:96:cc:d0:52:23:80:0b:bc:39:c0:51:1d:
         84:66:d2:d2:3a:b2:ce:12:d8:01:55:4d:11:d7:c6:27:00:6e:
         79:73:58:01:4d:e9:16:00:ee:f5:8c:a2:bd:29:f3:bb:71:54:
         49:7e:f9:2b:a4:3f:c3:d7:82:67:7f:88:d7:81:b9:55:ec:bf:
         eb:34:c9:2c:b9:0a:a9:28:7d:05:28:a3:8c:4e:88:4a:b7:3a:
         df:35:b5:98:e3:7d:79:ea:3c:a8:35:2a:c8:04:d9:02:a5:32:
         e8:47:ac:c9:ae:f9:4e:12:b5:bb:da:96:a2:ec:cc:e1:03:4b:
         e4:47:58:21:8d:37:b3:7e:fb:2a:c7:4e:e3:15:18:53:ea:9f:
         39:fd:c4:ab:a7:ff:ce:eb:e0:d6:a5:58:97:4e:b7:8d:eb:0e:
         7e:99:ba:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzK9hu12Q2oLD21pdfs3EhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOTVhMDY5NjY5ZWQ1YTc2NmVlZThlYmRjMzJlMzlmYjE0
ODQxMGIwHhcNMjYwMzA4MDEwMDUyWhcNMjYwMzA5MDEwMDUyWjAzMTEwLwYDVQQD
EygxNzVkYTFkYTQ0NDQwNTU2OTRmNTRiZDhkYTcwNjc0ODNhMDczODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz41mVLjXtmtRFj/Z4oJqP4EElvdk
b5U+mxqhcP8Z1eXB3x520AHl8h/4mCa7gJwWTAe8ADpxPdy0QkXorY7yfXHV7OcO
GcHh7X1g8o2bV8DNqZTZrZifl0jDrUpARJ9pau7pKPb+2VFuzLlj5OS1GU/2U+g0
EU0gK0gYhgYLzlKi2ygZAn9qi2AMut3IVzo8xHViB42KKJhXjhzZb6ppaEtWbWTd
V8WfHNgWbw5P/snpmDGoWuJa8wt63aj8K9KrGhdy+lAqnhrgOxovJ4iWFY8nSvAg
LOMWibQIA0hKqsuk2wev7nK4RrATdwc93SxfrQO0/sekCo62h2CcNmpUuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBddodpERAVWlPVL2NpwZ0g6BziIMB8GA1UdIwQY
MBaAFB6VoGlmntWnZu7o69wy45+xSEELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAt
OTMzYmZhNTkyYjFkLzEvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAtOTMzYmZhNTkyYjFk
LzEvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSCpE27g
O5vOXHy41IWYlbXNJZNpy4dzK7PJLIOTQ3S0+ID1RyoJU5L+Z1EF5InGsvutbVjY
T8HOU4F58ILCrYDGUNYyOiJFJKnM7ZSxz51RMNnzHawFrxJgXdrkM/LelszQUiOA
C7w5wFEdhGbS0jqyzhLYAVVNEdfGJwBueXNYAU3pFgDu9YyivSnzu3FUSX75K6Q/
w9eCZ3+I14G5Vey/6zTJLLkKqSh9BSijjE6ISrc63zW1mON9eeo8qDUqyATZAqUy
6Eesya75ThK1u9qWouzM4QNL5EdYIY03s377KsdO4xUYU+qfOf3Eq6f/zuvg1qVY
l063jesOfpm6eQ==
-----END CERTIFICATE-----
Generated at Sun Mar 8 05:05:01 2026 by rpki-client