Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File:                     HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier:          3u7PEm5zNp7rtMvzSzgjcn2f63kCNLtdt3/JBEDH3fY=
Subject key identifier:   3B:3B:FB:51:9E:9F:B0:1F:12:CB:16:80:25:12:1F:D0:DB:E6:C9:05
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer:       /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial:       01A0035DCE8C7C44A32B9FB61B5B5AC6B71A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number:          18FF
Signing time:             Sat 15 Aug 2026 03:01:14 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:14 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:14 +0000
Files and hashes:         1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: tY1I96Dr5V2RDexovw/3p8j7MWIyun13SJWXq/v7Cuk=)
                          2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
                          3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:ce:8c:7c:44:a3:2b:9f:b6:1b:5b:5a:c6:b7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
        Validity
            Not Before: Aug 15 03:01:14 2026 GMT
            Not After : Aug 16 03:01:14 2026 GMT
        Subject: CN=3b3bfb519e9fb01f12cb168025121fd0dbe6c905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:2f:27:da:3e:9a:f8:67:f0:36:ca:4e:13:
                    3f:f1:0c:90:bb:6b:2d:2c:a0:e9:e4:fb:91:d3:e7:
                    98:a6:86:db:61:d8:4f:20:53:32:29:6d:38:b0:0b:
                    73:e1:cb:c9:30:25:ae:b9:21:d7:da:8c:b4:d4:77:
                    5d:b3:e8:af:96:ae:c7:95:3a:c4:b5:98:81:d6:9c:
                    d1:01:c4:36:df:f5:17:27:45:61:ae:ce:e1:0e:07:
                    d6:92:01:d6:e2:9b:fe:df:e4:2e:cf:4d:29:a4:5c:
                    9f:ff:a4:95:28:c3:60:03:cc:18:13:2a:c9:4e:91:
                    97:99:1b:16:3e:13:5a:a1:0b:e5:63:29:21:2b:47:
                    6a:ce:bf:21:eb:42:6b:63:5c:27:d2:22:15:9e:30:
                    96:57:5e:8a:33:98:27:3c:22:0d:91:1d:23:1a:4f:
                    55:ba:7e:e4:a4:56:0e:78:7e:cd:08:1f:c5:31:89:
                    4f:7b:a9:83:a0:27:2f:ae:f6:f7:2e:15:14:9d:f2:
                    b0:eb:d2:b6:69:58:d6:b3:39:67:97:8f:a1:c5:e1:
                    ab:f1:b2:aa:e8:3f:b4:85:0a:21:99:0e:8e:91:9b:
                    0e:c5:bc:f3:a2:f2:0b:1e:1b:22:a0:56:c8:9c:c3:
                    e3:08:9c:88:85:2c:14:b3:c1:1f:c8:80:c1:92:6d:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3B:FB:51:9E:9F:B0:1F:12:CB:16:80:25:12:1F:D0:DB:E6:C9:05
            X509v3 Authority Key Identifier:
                keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:4b:51:03:2a:ef:ff:e6:3c:6b:ec:86:bc:d8:98:20:52:
         2e:0e:01:1e:5e:f2:ca:8b:f8:ed:ab:47:73:16:e2:fe:d8:4d:
         81:ce:fa:3e:5a:ed:cc:78:33:7f:20:9a:44:29:70:fe:62:a4:
         a1:e9:63:6d:e4:1e:b6:ba:81:ac:b3:a2:d8:e8:49:9e:04:74:
         3e:25:bd:f0:f9:b9:b5:25:99:71:0f:d9:55:46:0b:e5:31:54:
         f3:5c:2a:e6:91:fe:30:1e:a6:1a:68:0c:3d:48:07:cc:34:8c:
         8d:dc:f6:62:58:89:ff:b4:e7:de:f1:6b:5b:ce:51:c9:c9:e6:
         12:92:29:a4:70:c2:1c:93:68:ac:12:52:eb:e6:6e:3e:8c:d9:
         e0:71:e9:a0:c1:28:ae:9f:84:2b:76:8d:7d:e6:95:f0:71:17:
         71:a9:04:db:0b:13:99:c4:97:af:9e:d2:14:45:60:25:8f:44:
         a8:4b:22:3b:9e:e1:2b:55:45:b0:9a:fe:45:3e:d2:b4:ec:ec:
         e1:4c:b3:77:ee:7d:9b:1e:fb:38:d1:0e:33:8b:a0:7a:ae:07:
         18:9f:90:64:c3:98:00:b8:ae:8b:8f:19:7c:f9:3d:27:92:f7:
         fb:c6:9e:7f:f5:4a:b2:5e:30:b1:5d:5c:53:90:5b:03:e4:61:
         2c:da:86:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXc6MfESjK5+2G1taxrcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODdmMzAyNzQ5NTFjYWRmYjViNzM3ZTEzMzNjNzNkNjRi
MDQyNTYwHhcNMjYwODE1MDMwMTE0WhcNMjYwODE2MDMwMTE0WjAzMTEwLwYDVQQD
EygzYjNiZmI1MTllOWZiMDFmMTJjYjE2ODAyNTEyMWZkMGRiZTZjOTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZEvJ9o+mvhn8DbKThM/8QyQu2st
LKDp5PuR0+eYpobbYdhPIFMyKW04sAtz4cvJMCWuuSHX2oy01Hdds+ivlq7HlTrE
tZiB1pzRAcQ23/UXJ0Vhrs7hDgfWkgHW4pv+3+Quz00ppFyf/6SVKMNgA8wYEyrJ
TpGXmRsWPhNaoQvlYykhK0dqzr8h60JrY1wn0iIVnjCWV16KM5gnPCINkR0jGk9V
un7kpFYOeH7NCB/FMYlPe6mDoCcvrvb3LhUUnfKw69K2aVjWszlnl4+hxeGr8bKq
6D+0hQohmQ6OkZsOxbzzovILHhsioFbInMPjCJyIhSwUs8EfyIDBkm3UdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs7+1Gen7AfEssWgCUSH9Db5skFMB8GA1UdIwQY
MBaAFB2H8wJ0lRyt+1tzfhMzxz1ksEJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUt
ZmU0NDAxMTFkODA3LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUtZmU0NDAxMTFkODA3
LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzJLUQMq
7//mPGvshrzYmCBSLg4BHl7yyov47atHcxbi/thNgc76PlrtzHgzfyCaRClw/mKk
oeljbeQetrqBrLOi2OhJngR0PiW98Pm5tSWZcQ/ZVUYL5TFU81wq5pH+MB6mGmgM
PUgHzDSMjdz2YliJ/7Tn3vFrW85RycnmEpIppHDCHJNorBJS6+ZuPozZ4HHpoMEo
rp+EK3aNfeaV8HEXcakE2wsTmcSXr57SFEVgJY9EqEsiO57hK1VFsJr+RT7StOzs
4Uyzd+59mx77ONEOM4ugeq4HGJ+QZMOYALiui48ZfPk9J5L3+8aef/VKsl4wsV1c
U5BbA+RhLNqGbA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:36 2026 by rpki-client