Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File:                     HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier:          2zCBec84aDLpjkXGQM9QgEn9IdEzPVBaTtyG/Hm7mzM=
Subject key identifier:   44:E9:66:F5:34:61:1A:47:1A:9D:8A:63:3E:AC:7E:BF:CB:A8:D2:64
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer:       /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial:       019E3229D440E6A140C531985622F130AC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number:          0E10
Signing time:             Sat 16 May 2026 19:01:02 +0000
Manifest this update:     Sat 16 May 2026 19:01:02 +0000
Manifest next update:     Sun 17 May 2026 19:01:02 +0000
Files and hashes:         1: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: HJSbewkIvB7kQX2vmB3b13cgkcGe9uIaAyEHKZ47a7g=)
                          2: TuInl5IxseRhLtbZY1X_lYI6Hbk.roa (hash: lryzFZqAm22jNaG1JE0uiAUiFqU+yZbKbV6Mt0hLWnI=)
                          3: mBXb2boBQD64TLoWn4Zh1rqCAcg.roa (hash: ZX2yeD+qikYMaWGw9f7Ga1ZGLd393lsnCDdUVbjc544=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:d4:40:e6:a1:40:c5:31:98:56:22:f1:30:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
        Validity
            Not Before: May 16 19:01:02 2026 GMT
            Not After : May 17 19:01:02 2026 GMT
        Subject: CN=44e966f534611a471a9d8a633eac7ebfcba8d264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:69:58:e6:0a:46:d6:4c:6d:42:de:56:31:
                    e6:37:1d:be:56:ed:73:36:cf:fb:a3:bf:48:68:cf:
                    76:1e:e4:c0:a8:61:6b:81:db:7f:8f:ad:3e:31:f7:
                    23:af:4a:c1:c4:3b:ad:96:81:0b:1c:37:f7:8e:35:
                    23:2a:0e:99:21:3e:57:53:d5:82:5f:b7:36:39:47:
                    8e:4f:a5:3b:dc:b6:72:ab:f8:c3:e8:2f:8d:db:6a:
                    5c:56:5b:bc:94:35:39:4d:8f:85:ed:cf:38:55:6e:
                    b8:70:d0:e2:f4:91:9b:b7:e1:df:b7:e8:62:bd:87:
                    af:33:e3:a0:f7:e0:0c:1a:f5:b5:31:21:85:a4:9f:
                    b4:f4:01:fe:b9:74:80:86:e1:9c:31:49:d0:b0:99:
                    1c:14:3b:b5:1e:36:d3:bb:6c:4b:64:45:8e:94:2c:
                    1b:35:61:00:cb:16:c0:2f:94:07:e3:4b:90:0b:e7:
                    47:6a:01:b7:f3:94:24:44:ee:4f:0e:b6:e5:5a:2a:
                    5c:4f:cf:50:b8:3d:3d:87:a1:15:06:21:1a:ff:c5:
                    3b:d9:4c:00:71:50:f2:94:71:b3:28:25:d2:d4:9c:
                    4c:53:52:46:ff:e3:e5:a4:c6:d6:32:02:80:5b:25:
                    3f:7d:d0:36:7a:0f:39:c2:22:18:18:74:35:65:57:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E9:66:F5:34:61:1A:47:1A:9D:8A:63:3E:AC:7E:BF:CB:A8:D2:64
            X509v3 Authority Key Identifier:
                keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:97:2f:93:db:ed:f0:56:46:e1:a2:31:ca:19:52:a6:60:5f:
         79:f2:cd:b2:56:4f:90:aa:52:3f:05:ae:3c:90:fe:67:4c:55:
         e7:73:a3:47:0a:d4:64:60:a3:20:47:e6:4d:cc:8c:5f:9e:4f:
         74:1b:27:5b:3a:29:c0:c7:14:08:3e:a7:fc:11:a7:c9:71:ff:
         f8:60:3c:8d:0a:96:07:7d:b2:7c:36:12:6b:1d:d9:84:87:06:
         4b:2c:5e:3a:26:e6:72:49:53:d2:a1:c2:d1:ab:35:17:4a:08:
         e8:5c:5b:e0:ee:ce:c7:f9:a2:fd:25:37:fd:7f:59:b0:39:1d:
         3b:ec:af:3d:dd:bd:70:09:0b:44:b7:be:28:9b:38:56:7f:5d:
         a2:79:c8:4e:bb:33:b5:e7:d2:24:fe:1c:c4:4e:9d:95:10:29:
         ba:fa:75:14:02:62:82:0b:f4:34:be:02:02:6c:13:4d:fe:67:
         de:43:26:f4:a0:41:9e:17:de:2c:73:2b:d1:2a:c8:49:fa:4b:
         1b:36:71:76:72:9b:a3:18:f3:8b:52:f3:bc:48:ae:b1:fa:f3:
         cd:10:15:8f:ef:47:36:c0:33:9e:de:53:8d:cc:87:6c:68:b7:
         71:9b:b1:42:de:33:d9:12:4c:1c:b6:c9:a5:bb:cf:85:a0:58:
         e7:26:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:59 2026 by rpki-client