Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File:                     hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier:          M7ya3laqb4ejB7pQdV4RAXohwBN03SgzP6x9s1/HO/o=
Subject key identifier:   2E:C7:F9:0E:5C:9D:FF:97:CB:97:D0:B4:01:E2:05:72:F6:B0:6B:A6
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer:       /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial:       019D3AF84FF7719ED5AB1FF3974598100F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number:          1773
Signing time:             Sun 29 Mar 2026 19:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 19:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 19:00:44 +0000
Files and hashes:         1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
                          2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: 2mDvrz8XAbb0GYCQpKxxqsBrac3ejrhtVwsrBaBSxXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:f8:4f:f7:71:9e:d5:ab:1f:f3:97:45:98:10:0f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
        Validity
            Not Before: Mar 29 19:00:44 2026 GMT
            Not After : Mar 30 19:00:44 2026 GMT
        Subject: CN=2ec7f90e5c9dff97cb97d0b401e20572f6b06ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:df:66:87:0e:c4:df:43:e0:e2:8c:d4:ae:8f:
                    f9:0d:a0:33:3e:74:12:10:3b:3f:ef:1a:5f:95:81:
                    a6:fd:e9:9c:76:5c:57:9d:2c:ab:37:70:a8:48:8d:
                    13:fc:14:18:0f:07:e0:6a:0d:41:93:1f:b3:fd:97:
                    3f:98:ef:c4:6c:7a:e2:66:78:93:63:44:ab:48:0f:
                    e7:32:c6:c8:af:34:68:82:74:4d:13:c4:d6:13:e4:
                    cd:2b:5a:d6:cd:1b:2a:8d:31:3c:56:a5:48:da:b8:
                    2d:97:58:58:45:45:0b:59:37:1a:02:33:3d:76:ea:
                    d5:17:bc:8a:48:93:6c:e1:39:2e:06:7e:26:84:66:
                    71:ed:d0:b0:09:75:6a:af:17:f3:cb:5e:82:e6:9b:
                    94:78:25:36:80:99:86:86:ea:a7:43:48:13:bf:c9:
                    62:94:ba:10:34:b9:9b:ca:ea:ce:6b:34:66:3f:5d:
                    7e:57:30:df:50:ee:4a:05:be:15:cf:35:a8:be:e0:
                    19:5d:87:d6:e2:f2:c3:61:ca:53:97:cb:17:0f:66:
                    2f:77:39:4b:cd:9e:fc:7f:f8:64:b6:30:f6:19:4a:
                    81:3d:89:ba:88:02:a2:f2:67:a7:0e:d5:3e:fc:8a:
                    63:6d:7f:e9:01:e7:8f:5e:cc:bc:d6:25:4b:62:7c:
                    f4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C7:F9:0E:5C:9D:FF:97:CB:97:D0:B4:01:E2:05:72:F6:B0:6B:A6
            X509v3 Authority Key Identifier:
                keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fa:d8:aa:4c:b4:d7:41:4b:b7:d8:08:eb:8d:bd:8a:88:c4:
         dc:62:45:7b:ea:9e:ed:bc:c6:62:b4:7d:f1:c5:f7:d5:ff:2f:
         ca:4e:ef:d3:0a:1e:61:bb:ca:a3:67:88:eb:f9:1d:fc:2b:6f:
         39:be:71:6a:f9:8d:7d:97:b3:33:42:50:6c:01:fc:3a:de:49:
         44:d0:de:22:f2:4f:8e:bb:0e:e5:20:f9:51:47:17:a3:db:a2:
         4e:33:ba:29:15:ec:9e:65:6d:2f:1a:eb:2e:9c:19:9c:35:ed:
         9a:18:da:9b:17:f5:4d:7a:e0:8b:a3:ea:ed:f6:8e:3f:63:5f:
         17:3b:b5:c6:e8:e6:6f:b5:be:9a:16:52:56:a8:9c:7a:5a:90:
         2d:cd:86:7f:bb:a6:e1:fb:19:57:88:a2:54:35:bd:ce:ce:ea:
         8d:ad:2f:70:45:b2:b6:f7:e1:67:fb:b9:bf:cf:92:a3:66:13:
         9d:27:96:d1:2b:ce:11:fe:a5:73:86:aa:56:20:79:bc:b6:4b:
         21:b7:26:f2:1e:6f:89:83:ca:24:27:42:b1:34:04:94:28:cc:
         6d:d1:1a:05:7e:3b:cb:2f:72:96:03:93:ad:f7:18:6e:70:d9:
         a9:ba:2b:33:f3:81:b5:26:8b:1a:88:3f:3b:1e:3a:30:7d:f1:
         23:12:d7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:44 2026 by rpki-client