Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File:                     hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier:          ttkbcnRWVJV1l2qqOcm6DJmVfnS4OrY67qw74OP4JsI=
Subject key identifier:   84:4F:63:93:74:08:20:A1:36:57:3B:83:EF:4E:C7:5E:6A:E6:CA:18
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer:       /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial:       019FA2973BCB8E39D1BD7410AF22E9D7D070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number:          1981
Signing time:             Mon 27 Jul 2026 08:00:47 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:47 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:47 +0000
Files and hashes:         1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
                          2: Y3J2ud7jTrX4_kZX_16f1uueVbg.roa (hash: phuOOyFdkRfonnOS6jbXwYKqxA0Iu7gFVN1SwrhDuJ4=)
                          3: dD9dHGQ8gQw13ckZppje7kWpQsM.roa (hash: r4y30mkY+vW+Z9vUf+xkdGW81b+7QGW2Rple9BpVlfI=)
                          4: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: n381bf5Pn+z1LIun6Erij/cN7hl48laRhI0XeOb8CF4=)
                          5: ztuH1Ib6x5wzUeQhgYqrotMVPQw.roa (hash: utfkpD2m+HS/flfgYbwUeyyWH7NvVuqHqyG3A5crwN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:3b:cb:8e:39:d1:bd:74:10:af:22:e9:d7:d0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
        Validity
            Not Before: Jul 27 08:00:47 2026 GMT
            Not After : Jul 28 08:00:47 2026 GMT
        Subject: CN=844f6393740820a136573b83ef4ec75e6ae6ca18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:d7:ac:9b:34:1e:3b:4b:b3:0e:be:b0:cf:
                    f5:79:a2:c1:09:a2:0c:99:63:e8:2d:39:2c:f7:15:
                    3a:c2:2a:d0:3f:15:c6:8a:7a:28:82:db:ac:aa:05:
                    fd:d9:b3:50:ee:9d:69:9b:f0:45:fd:c3:5d:9d:55:
                    62:0c:2a:c0:4b:53:0b:ef:ca:f8:65:a9:c9:17:2c:
                    c3:4b:85:00:ff:07:65:7b:f3:95:36:9f:b9:3f:84:
                    f1:f5:cf:14:81:c2:6a:b1:0b:3d:87:ec:87:39:55:
                    5f:20:c5:35:4b:41:0f:94:8d:6e:76:24:8c:51:ef:
                    b2:5c:2e:ec:68:b0:75:41:5f:21:7a:19:bb:d9:2b:
                    95:3b:61:1b:be:e7:a3:b2:64:1e:a7:58:1a:63:ca:
                    b0:8a:c3:30:76:d9:79:da:2e:9a:1c:77:9a:1f:18:
                    20:31:de:96:5e:4d:b5:6e:b2:d6:37:01:2f:da:f1:
                    6e:44:5d:fc:82:ab:6a:3e:c8:e6:f9:39:c9:fc:3f:
                    54:ab:7f:ab:a5:fc:21:c8:17:58:48:70:b3:1e:ff:
                    6b:2c:b3:ee:fb:b8:76:21:dc:44:af:3c:2d:8e:6e:
                    93:ee:85:9f:31:0b:f1:a6:a0:4e:9a:ce:0c:41:3f:
                    a4:be:2f:ea:69:0a:c9:2b:7c:29:e3:f3:c2:bf:f2:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4F:63:93:74:08:20:A1:36:57:3B:83:EF:4E:C7:5E:6A:E6:CA:18
            X509v3 Authority Key Identifier:
                keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:12:f3:b2:76:5a:c3:62:d7:8c:55:f4:4a:19:2f:66:a4:cd:
         79:b4:05:fa:2e:78:74:b4:6d:6d:36:6d:e1:8a:98:33:0a:f7:
         9b:38:2c:43:63:8a:93:ac:ff:b6:05:f3:b3:bb:a8:c2:ec:c0:
         53:24:08:1e:5e:33:90:43:90:26:52:ca:ee:69:60:c3:4f:73:
         e8:05:62:bd:2f:6d:2d:50:e8:af:b7:94:e3:87:c9:08:af:78:
         c1:10:46:e3:7f:63:e3:13:36:ce:8c:0a:4b:68:d9:06:46:73:
         2a:5b:54:44:4c:ad:49:8e:dd:1c:ca:e2:1a:49:c9:78:ef:0d:
         d0:85:9a:52:b6:27:cd:fd:5c:91:6a:e2:35:08:db:68:9e:25:
         87:56:4e:16:af:85:c8:31:51:a7:57:46:26:cb:34:cc:f8:94:
         21:5f:88:73:19:b4:84:54:43:57:b0:98:24:14:cc:c1:f8:a8:
         c7:18:70:4d:45:e0:bf:3d:09:54:a8:2a:78:70:54:71:fc:29:
         f7:ef:82:a4:e3:2d:5d:b0:1d:b0:39:72:e5:eb:12:cd:52:e8:
         a9:bd:a9:97:06:a1:d5:ac:cb:cc:58:c4:e3:7c:5b:62:2b:38:
         4f:c3:80:b2:b5:ed:1d:45:2a:6a:4b:39:ce:c9:67:e7:fd:70:
         b0:be:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:22:23 2026 by rpki-client