Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File:                     Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier:          Sd5zpokXxmLydmVD1C9hEtQ7n7FUt9tKyEzDbxk0fGw=
Subject key identifier:   6C:62:53:A0:41:72:DD:7D:FB:C6:A5:5D:FC:FC:6C:56:A1:DB:3B:82
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer:       /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial:       019EBFC84351B8F555771CCFBB5EAFE69DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number:          169B
Signing time:             Sat 13 Jun 2026 07:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:32 +0000
Files and hashes:         1: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (hash: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ=)
                          2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: HOqIqoNBLIWBmGdY081HDeHMONg17AIg4r3CFSZED3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:43:51:b8:f5:55:77:1c:cf:bb:5e:af:e6:9d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
        Validity
            Not Before: Jun 13 07:00:32 2026 GMT
            Not After : Jun 14 07:00:32 2026 GMT
        Subject: CN=6c6253a04172dd7dfbc6a55dfcfc6c56a1db3b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:32:72:a6:fd:0a:6d:41:81:04:20:03:cf:
                    f2:28:6c:b4:55:12:03:a0:51:5e:39:58:26:fa:f3:
                    04:56:97:85:85:69:26:05:f3:b0:7a:72:b8:4e:fc:
                    5c:9f:6d:f8:80:14:bb:26:b6:de:c0:26:9d:be:50:
                    03:5b:3c:ab:57:b9:e7:f4:6d:f8:c6:d3:4f:25:c6:
                    9d:4e:b8:e2:72:1f:5a:0b:e5:53:f4:63:52:cf:9f:
                    7c:14:ac:be:f4:1b:1f:ab:47:d9:61:8a:20:51:01:
                    90:30:b2:1c:b8:52:c9:80:5b:55:01:e0:8e:e8:b6:
                    ad:f5:54:25:df:ae:34:c4:d4:4c:92:94:49:9b:1e:
                    29:b4:d2:6b:31:13:a9:f5:4d:6d:ab:e9:89:17:8c:
                    67:44:f7:5b:00:45:9b:6c:a9:6e:88:93:2d:eb:0e:
                    2b:88:50:f3:e5:7e:65:7f:77:e8:23:20:85:d5:5d:
                    7e:13:40:2b:31:52:e4:d1:fd:cb:6b:01:8c:50:42:
                    ca:a0:bd:63:79:d3:97:9b:8a:5d:1f:bb:e8:d8:5d:
                    9e:24:25:77:05:67:23:99:7d:81:c9:f2:46:43:d0:
                    d6:00:41:08:9f:9e:15:1a:34:50:cc:e1:d1:7a:31:
                    79:c4:ca:21:5c:f9:fd:12:aa:aa:09:4d:e9:ce:19:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:62:53:A0:41:72:DD:7D:FB:C6:A5:5D:FC:FC:6C:56:A1:DB:3B:82
            X509v3 Authority Key Identifier:
                keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d9:9f:54:33:f9:58:44:19:de:eb:f0:a3:3f:74:e8:59:c8:
         e1:49:7b:11:66:ff:66:39:02:65:9a:5a:fa:79:08:ab:5d:db:
         4f:5c:34:bf:a3:a6:b5:00:ab:e5:ae:69:a3:8b:2c:2a:db:4a:
         91:73:2e:ff:50:2f:6d:11:6b:c9:c1:01:36:dd:83:ea:6f:8b:
         cb:68:2f:66:09:ef:db:46:eb:4a:95:a8:83:72:aa:58:19:12:
         10:76:c8:be:a5:ab:6c:e2:35:55:ea:82:5d:a7:30:ca:ba:c5:
         74:d1:5b:9e:4f:c7:32:de:e1:66:66:80:95:d0:9f:7f:c0:20:
         87:8a:43:dd:93:5a:a7:3e:d3:da:2d:d5:37:5e:e8:fe:31:a8:
         57:d9:ec:12:2f:3f:82:2b:48:b6:69:06:ff:32:87:2a:38:73:
         ab:1a:a6:98:51:2d:17:0a:49:b8:73:6e:19:71:d1:92:40:dd:
         5c:55:ec:9b:1e:2f:25:40:72:c9:8b:ee:8a:83:8e:a8:f4:27:
         8f:d9:90:20:83:4a:6d:df:c9:e8:86:64:2a:75:8f:87:b9:3d:
         2c:4e:26:cd:eb:97:bb:fd:72:63:ac:6b:97:32:83:b7:3f:1c:
         d9:3c:9e:48:55:1b:e8:79:37:1a:e1:0d:92:eb:57:3b:88:a8:
         3e:6b:30:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yENRuPVVdxzPu16v5p2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3
ZTMzZDQwHhcNMjYwNjEzMDcwMDMyWhcNMjYwNjE0MDcwMDMyWjAzMTEwLwYDVQQD
Eyg2YzYyNTNhMDQxNzJkZDdkZmJjNmE1NWRmY2ZjNmM1NmExZGIzYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfUycqb9Cm1BgQQgA8/yKGy0VRID
oFFeOVgm+vMEVpeFhWkmBfOwenK4Tvxcn234gBS7JrbewCadvlADWzyrV7nn9G34
xtNPJcadTrjich9aC+VT9GNSz598FKy+9Bsfq0fZYYogUQGQMLIcuFLJgFtVAeCO
6Lat9VQl3640xNRMkpRJmx4ptNJrMROp9U1tq+mJF4xnRPdbAEWbbKluiJMt6w4r
iFDz5X5lf3foIyCF1V1+E0ArMVLk0f3LawGMUELKoL1jedOXm4pdH7vo2F2eJCV3
BWcjmX2ByfJGQ9DWAEEIn54VGjRQzOHRejF5xMohXPn9EqqqCU3pzhkEgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxiU6BBct19+8alXfz8bFah2zuCMB8GA1UdIwQY
MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt
ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk
LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdmfVDP5
WEQZ3uvwoz906FnI4Ul7EWb/ZjkCZZpa+nkIq13bT1w0v6OmtQCr5a5po4ssKttK
kXMu/1AvbRFrycEBNt2D6m+Ly2gvZgnv20brSpWog3KqWBkSEHbIvqWrbOI1VeqC
XacwyrrFdNFbnk/HMt7hZmaAldCff8Agh4pD3ZNapz7T2i3VN17o/jGoV9nsEi8/
gitItmkG/zKHKjhzqxqmmFEtFwpJuHNuGXHRkkDdXFXsmx4vJUByyYvuioOOqPQn
j9mQIINKbd/J6IZkKnWPh7k9LE4mzeuXu/1yY6xrlzKDtz8c2TyeSFUb6Hk3GuEN
kutXO4ioPmswTw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:22 2026 by rpki-client