Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          mfbVZ+aSLnoVLm2pNCOiCw41LXhK7Yp4cOIaKkugOfs=
Subject key identifier:   AC:82:18:D4:EF:E4:1C:9A:75:80:07:88:12:B8:CC:F5:A2:B0:79:89
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       019CE5914084AEB67205CD3FA392036799EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0E76
Signing time:             Fri 13 Mar 2026 05:00:27 +0000
Manifest this update:     Fri 13 Mar 2026 05:00:27 +0000
Manifest next update:     Sat 14 Mar 2026 05:00:27 +0000
Files and hashes:         1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=)
                          2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=)
                          3: 59xHeQcfN9MrHnGV12N9v9XcThY.roa (hash: Elta/uOtbtWIHwKEBTZUqwVybQem3iwKx6GhTo1J6rY=)
                          4: 6PnH-I0v0o7AGL6ifiGT8peyJ0k.roa (hash: tFSqOOC1Lg0SA1A3rDQWgBL5K2qm5q+QWpyCruQ1mJU=)
                          5: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=)
                          6: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=)
                          7: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=)
                          8: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=)
                          9: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=)
                          10: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=)
                          11: Le82C6pXnzW7IxXdGJLWL7-aOrU.roa (hash: QElIq8TT7E1GaFXwqMBgfp+5OsT2hRS1zDV8eeFQVmg=)
                          12: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=)
                          13: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=)
                          14: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=)
                          15: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=)
                          16: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=)
                          17: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=)
                          18: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=)
                          19: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=)
                          20: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=)
                          21: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=)
                          22: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=)
                          23: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=)
                          24: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=)
                          25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: zcVOsIZztWCNRiUGgwrdn4mk+oFUMH6Okz1pdar2wlY=)
                          26: jCkE9hjop9AAI9KGHrAu9Oj7LNI.roa (hash: YqzUoI4bHyTW6BYWw7GMg/Wlqugt8gZRXRL0jSMxthQ=)
                          27: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=)
                          28: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=)
                          29: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=)
                          30: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=)
                          31: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=)
                          32: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=)
                          33: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=)
                          34: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=)
                          35: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=)
                          36: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=)
                          37: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=)
                          38: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:91:40:84:ae:b6:72:05:cd:3f:a3:92:03:67:99:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Mar 13 05:00:27 2026 GMT
            Not After : Mar 14 05:00:27 2026 GMT
        Subject: CN=ac8218d4efe41c9a7580078812b8ccf5a2b07989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:07:d9:e0:78:ff:d8:ef:05:cc:1a:f1:b2:
                    9f:d3:96:a8:55:16:ae:4e:88:43:ee:07:72:e4:a7:
                    ab:dd:61:77:6e:2b:c6:32:b1:a2:62:2f:9b:e1:f6:
                    33:2b:10:42:37:f1:8a:34:84:c0:7f:d3:8e:ea:c9:
                    a1:1c:73:74:ec:bf:1c:c4:40:ef:b4:c2:e8:a3:0c:
                    6a:fa:28:b8:32:0f:96:d5:b5:ef:5c:04:e2:74:c3:
                    9c:61:ce:d1:13:d0:cd:18:ab:93:eb:10:bd:be:10:
                    b4:d5:92:04:f8:e1:3b:36:1f:22:00:95:dc:83:23:
                    7b:3b:4e:1b:60:a2:79:f0:fe:6b:68:da:d7:04:9e:
                    7f:59:94:a9:83:ad:67:da:74:c6:b9:cd:d5:3a:74:
                    f5:4e:82:82:10:86:97:07:64:cf:cd:df:81:78:f3:
                    59:d0:1b:e7:e7:4f:0b:18:2c:62:66:b9:1d:42:98:
                    1c:f1:55:58:39:11:72:f3:fe:8f:17:f9:24:b9:cc:
                    81:b9:7c:19:52:ad:ea:03:57:e4:1d:5e:b1:27:f0:
                    0e:fe:ec:a1:41:70:19:46:1b:20:99:2e:00:e8:b0:
                    e2:dd:e5:5a:c9:a8:5f:2d:97:55:e4:ee:20:77:0a:
                    b1:de:88:c5:23:b7:cc:50:54:3c:a3:a2:f4:78:85:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:82:18:D4:EF:E4:1C:9A:75:80:07:88:12:B8:CC:F5:A2:B0:79:89
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:1f:a9:6e:90:37:42:78:f8:67:19:ae:4f:fa:d1:28:84:
         fa:07:58:97:66:6c:aa:d6:56:c6:ee:59:22:eb:d9:3f:05:c5:
         38:86:0b:00:a6:fe:4c:c9:b1:7f:15:07:5c:fe:8f:5a:da:b6:
         40:ab:71:ba:ff:e4:9d:5f:60:dd:8d:88:09:14:40:49:18:21:
         c5:28:27:64:79:ee:03:bc:44:f2:1f:75:b6:07:6b:5b:3e:de:
         eb:b2:c5:14:77:3f:55:da:90:5a:d9:23:19:36:3c:81:92:e6:
         64:bc:6f:9f:bf:f7:4d:49:ff:24:54:48:db:c3:00:27:d9:7a:
         8d:e3:dc:fe:9b:da:03:e3:d6:d8:3c:1d:c6:78:42:34:f2:41:
         e5:21:46:fc:19:8c:a9:e8:30:4f:02:f4:18:05:84:6f:03:93:
         38:ae:bd:ec:07:02:56:5b:61:31:41:06:27:61:d1:45:26:20:
         76:79:46:fc:ae:ab:75:76:e9:27:f8:d5:6e:2c:f1:28:11:e1:
         87:5d:99:c6:42:00:82:41:df:91:5c:52:5a:ee:e2:8c:fe:01:
         e8:d3:24:34:e8:d4:65:5d:6e:9b:ce:68:a3:d7:b0:a4:a6:5f:
         70:f7:5b:82:bf:fd:4d:75:8e:e7:e9:5f:34:41:c3:bb:92:3e:
         68:d3:c6:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkUCErrZyBc0/o5IDZ5nsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjYwMzEzMDUwMDI3WhcNMjYwMzE0MDUwMDI3WjAzMTEwLwYDVQQD
EyhhYzgyMThkNGVmZTQxYzlhNzU4MDA3ODgxMmI4Y2NmNWEyYjA3OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx8H2eB4/9jvBcwa8bKf05aoVRau
TohD7gdy5Ker3WF3bivGMrGiYi+b4fYzKxBCN/GKNITAf9OO6smhHHN07L8cxEDv
tMLoowxq+ii4Mg+W1bXvXATidMOcYc7RE9DNGKuT6xC9vhC01ZIE+OE7Nh8iAJXc
gyN7O04bYKJ58P5raNrXBJ5/WZSpg61n2nTGuc3VOnT1ToKCEIaXB2TPzd+BePNZ
0Bvn508LGCxiZrkdQpgc8VVYORFy8/6PF/kkucyBuXwZUq3qA1fkHV6xJ/AO/uyh
QXAZRhsgmS4A6LDi3eVayahfLZdV5O4gdwqx3ojFI7fMUFQ8o6L0eIUS2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyCGNTv5ByadYAHiBK4zPWisHmJMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbUfqW6Q
N0J4+GcZrk/60SiE+gdYl2ZsqtZWxu5ZIuvZPwXFOIYLAKb+TMmxfxUHXP6PWtq2
QKtxuv/knV9g3Y2ICRRASRghxSgnZHnuA7xE8h91tgdrWz7e67LFFHc/VdqQWtkj
GTY8gZLmZLxvn7/3TUn/JFRI28MAJ9l6jePc/pvaA+PW2DwdxnhCNPJB5SFG/BmM
qegwTwL0GAWEbwOTOK697AcCVlthMUEGJ2HRRSYgdnlG/K6rdXbpJ/jVbizxKBHh
h12ZxkIAgkHfkVxSWu7ijP4B6NMkNOjUZV1um85oo9ewpKZfcPdbgr/9TXWO5+lf
NEHDu5I+aNPGLg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:41:47 2026 by rpki-client