Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File:                     hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier:          bugIxJbNvHx6PirnCDd5lvlCW7wmYdNEsCPpD9+WxKE=
Subject key identifier:   D2:93:F1:D3:39:E3:D0:BC:29:5E:4E:A3:85:FD:F9:14:F4:C5:48:6F
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer:       /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial:       019E30DFE3237BBA13CAA47DC5191CC4456B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number:          0E57
Signing time:             Sat 16 May 2026 13:00:39 +0000
Manifest this update:     Sat 16 May 2026 13:00:39 +0000
Manifest next update:     Sun 17 May 2026 13:00:39 +0000
Files and hashes:         1: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (hash: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0=)
                          2: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: eHkEjs59aD0TLCXSJUzKUPzX4WfkCv4W2s7ECDeK+9o=)
                          3: yk-DGGnoKxjDOyVJDYCP2Dq6RkY.roa (hash: vb19X8WJPy7+RYVMmtMqPzkvfdcm+Fk9dFoJfJFBMp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:e3:23:7b:ba:13:ca:a4:7d:c5:19:1c:c4:45:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
        Validity
            Not Before: May 16 13:00:39 2026 GMT
            Not After : May 17 13:00:39 2026 GMT
        Subject: CN=d293f1d339e3d0bc295e4ea385fdf914f4c5486f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:7d:e0:21:8e:3c:2b:74:84:11:f6:7b:17:
                    f1:a5:24:27:a0:80:d9:f6:01:2d:c7:58:f3:fa:3a:
                    2d:5c:5c:51:1b:b3:95:55:fc:84:82:45:fa:f5:bc:
                    26:40:a5:e3:2d:fc:36:ff:9d:ba:c8:e7:c5:fa:97:
                    fe:a2:ee:1a:de:1f:41:08:6b:1c:d9:c7:a3:a1:70:
                    c0:15:00:6c:e6:3c:00:c1:d4:d6:00:2e:c5:2a:84:
                    cd:e3:d4:98:40:fc:33:5c:f2:5a:a1:37:68:28:e8:
                    2a:7f:eb:3b:62:06:59:38:12:b9:89:b0:c8:aa:26:
                    34:af:7f:bc:f6:ce:68:1e:35:84:c7:5f:f7:f3:ab:
                    2c:16:96:f0:e9:bd:bb:f2:7e:1d:42:fc:4b:f8:d7:
                    40:8c:35:21:1f:9d:18:69:15:46:61:fe:01:30:45:
                    3a:9e:59:13:7d:4c:bc:18:d9:7a:76:1e:2c:f4:85:
                    c6:3c:42:f3:5a:c6:63:21:8d:19:43:25:dc:e8:9a:
                    eb:fa:16:61:12:e7:e2:ee:74:73:6a:70:0a:df:9d:
                    56:11:70:ca:07:73:a9:19:f5:13:ba:30:a9:ba:85:
                    55:34:2a:0a:fb:ef:3e:84:a1:3a:d0:42:c0:b9:e7:
                    f9:70:dc:99:a7:18:28:ff:f5:ec:9b:77:39:94:cf:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:93:F1:D3:39:E3:D0:BC:29:5E:4E:A3:85:FD:F9:14:F4:C5:48:6F
            X509v3 Authority Key Identifier:
                keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:47:96:89:ba:dc:06:ec:e4:3d:56:b6:bf:27:2e:3e:34:ed:
         6c:19:ae:86:ce:23:36:e2:2f:66:57:69:77:7a:c7:37:79:94:
         26:84:39:f3:b1:f0:25:92:d8:3f:4b:1f:5d:d3:f3:04:ab:13:
         2a:02:7d:6a:be:7b:cf:b8:d3:75:37:fc:42:99:e8:43:72:ed:
         aa:f7:bb:06:a6:27:8b:cc:6a:c0:a0:2a:10:ae:fd:b9:8e:b3:
         52:b1:53:ca:d3:e9:b1:cc:1d:3c:a1:4e:a2:f1:27:b2:9c:42:
         06:2c:58:ad:0d:2c:d5:40:a7:88:46:ed:a7:a2:49:d7:67:1a:
         54:f6:c5:a8:74:88:97:23:79:40:8c:da:42:77:1e:57:00:1d:
         15:8b:93:cb:e6:47:f0:b6:83:19:da:4c:a6:6a:23:ff:10:b9:
         e4:bc:3c:26:e0:ee:c8:b5:90:a0:81:d0:38:d2:47:82:d9:97:
         2f:91:36:41:03:cd:31:46:68:e4:e1:0a:ba:8d:7a:eb:07:15:
         ae:76:1a:1a:3f:bf:e6:5c:fa:4c:be:09:5e:aa:83:92:3b:cb:
         bd:9a:03:3f:7a:d1:83:d4:02:c0:10:4e:31:bf:92:ce:3f:9f:
         bc:c3:e4:d5:47:6c:3a:05:28:c0:53:e3:56:79:56:47:d0:dc:
         ef:f1:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:47 2026 by rpki-client