Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File:                     HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier:          aail/TZt276qdtPCTpxLpeAUSUBs0+XMnIOrFvd0SRw=
Subject key identifier:   22:2E:74:32:02:93:8B:E0:26:1B:77:47:82:F2:F0:E3:D2:FD:3E:44
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer:       /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial:       019CE44857BDF87C457AFF261EE21AC6FDF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number:          186C
Signing time:             Thu 12 Mar 2026 23:01:11 +0000
Manifest this update:     Thu 12 Mar 2026 23:01:11 +0000
Manifest next update:     Fri 13 Mar 2026 23:01:11 +0000
Files and hashes:         1: 6dv_L1DDphVKsaPUbNVgrio2mco.roa (hash: u/UqpDhbgxCW0Bpgwy3j9fMc8sf/q9V3Bh/vCaaYoAQ=)
                          2: FLGDI-HNGLyavIFHPkaqz0x2dyA.roa (hash: p43U03mDQXL/wNzoMe4V67qrIM7B3GFIc1QcZlkxGyI=)
                          3: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: h4hlysyzX7yic3hvwBX3wyWEV9TkX480oBAM7DzFoEY=)
                          4: SNT8hJvMVBfYKWPwF8E6mRsCbIk.roa (hash: fIUVYcxClsJOGEyEKMH1vBZ+eD6MkSZpeWY8XXK6vEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:48:57:bd:f8:7c:45:7a:ff:26:1e:e2:1a:c6:fd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
        Validity
            Not Before: Mar 12 23:01:11 2026 GMT
            Not After : Mar 13 23:01:11 2026 GMT
        Subject: CN=222e743202938be0261b774782f2f0e3d2fd3e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:90:60:37:bc:bb:18:4b:f8:41:b5:31:39:
                    03:49:23:55:82:c0:b6:b4:ac:23:b6:68:e3:ba:cd:
                    a8:54:ec:46:c5:bc:87:a6:2f:c5:e6:a2:b5:54:a2:
                    2c:c3:ab:d6:9e:04:ae:27:54:fe:00:a1:cc:24:a8:
                    52:de:5f:05:b4:5e:b5:48:1c:38:76:f7:b6:f7:b3:
                    ed:26:00:02:87:3a:22:12:fc:e9:06:21:e1:40:93:
                    3b:b7:7a:9a:87:6c:3f:8c:fb:a3:ed:25:a1:fd:70:
                    e2:5a:6b:66:70:a0:4c:0e:1c:ce:5a:9a:e5:e5:27:
                    71:e1:83:c6:95:7d:7a:56:20:a4:1e:0d:e5:c7:de:
                    6c:be:f0:92:89:b4:b1:d4:11:5d:f2:da:4c:b2:f7:
                    58:50:b9:51:43:50:72:74:41:a2:0a:a8:28:04:1a:
                    f3:5a:b0:9e:fd:6c:5c:bd:9b:b1:50:ce:59:a3:e1:
                    32:06:7c:50:82:40:8a:c0:26:30:5d:8e:e8:34:3a:
                    8b:4e:7c:68:21:79:27:c7:72:11:95:7e:85:3b:9a:
                    a0:33:11:ee:dc:52:4c:e1:fb:bd:ee:5a:20:b6:fa:
                    c9:bb:30:14:04:01:b3:53:e5:03:dc:b9:7b:8f:6e:
                    c1:c0:dc:52:0c:c2:1d:28:4b:d8:ee:57:73:d4:7e:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2E:74:32:02:93:8B:E0:26:1B:77:47:82:F2:F0:E3:D2:FD:3E:44
            X509v3 Authority Key Identifier:
                keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e7:a4:df:11:d1:de:fd:4a:b8:17:62:a4:41:1d:e2:9e:75:
         66:5b:91:5c:09:c7:0b:85:4c:ee:e1:19:81:e0:a1:8e:0c:c3:
         00:f3:ef:e0:4e:61:3d:64:a9:25:f4:9c:78:08:9a:46:98:d8:
         27:2c:36:22:21:53:14:f3:3a:18:d8:87:aa:a8:cb:55:bd:3b:
         d3:67:38:4e:e0:b4:a2:53:8f:4d:22:8f:19:8c:b7:9a:60:59:
         2b:3d:5c:f6:a9:14:be:bf:37:d1:dd:c2:98:54:8b:5e:e9:71:
         0e:c0:3c:2a:c0:95:82:f0:cf:31:b8:2b:88:dd:73:57:a7:e3:
         59:4a:8a:0c:a5:d4:fe:b2:00:5f:26:90:4e:ec:9e:8c:0a:62:
         a6:1e:2f:f0:1a:8c:19:3d:dc:6d:15:62:78:c9:5e:e7:bc:45:
         b4:fc:ef:b0:ce:52:4a:48:d7:43:92:65:5e:b1:48:20:0c:c0:
         2d:16:17:6d:3f:fe:e5:37:90:b7:8c:71:92:0b:7f:84:1c:79:
         cb:80:e1:f1:9d:51:a4:30:91:02:4d:45:d0:4d:ff:f2:cb:64:
         e9:28:e5:45:26:2c:53:2a:d5:8c:b3:8a:65:a3:e6:5a:d2:4c:
         4b:6b:91:ea:90:ca:9e:50:d9:77:ad:08:fd:54:e4:77:0e:0d:
         a3:4b:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:44 2026 by rpki-client