Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
File:                     HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json)
Hash identifier:          WIcp79LbPoiuj3NJw2vsqY/H1mFd8yPV5Zd/HznmkfU=
Subject key identifier:   F3:2F:56:6A:52:47:FC:2B:97:2C:92:BB:FA:15:67:E1:5D:41:F8:F0
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Certificate issuer:       /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial:       019D39E5EDE8F023F37F88166D9473B3B48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 14:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 14:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 14:01:03 +0000
Files and hashes:         1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: gdV9zS/PcDoSXrUv+Z98jczuUZZue6qKvgQVKsv3IvU=)
                          2: NECq5bb7SIXry0rZHvapUwXLa2Q.roa (hash: dYpsXQiT0mqcppDxERSn5No7Emz9UKQhwW4R+PdVL/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:ed:e8:f0:23:f3:7f:88:16:6d:94:73:b3:b4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
        Validity
            Not Before: Mar 29 14:01:03 2026 GMT
            Not After : Mar 30 14:01:03 2026 GMT
        Subject: CN=f32f566a5247fc2b972c92bbfa1567e15d41f8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:c6:f4:17:78:65:33:fc:f5:ef:05:90:d3:
                    6b:cd:8b:ac:76:62:ec:5d:dc:76:a9:f2:a2:1f:33:
                    41:87:5e:b4:31:d2:73:4d:4b:65:7e:a2:a2:a0:a7:
                    0c:0a:e2:44:ca:83:26:cb:a1:9a:0e:80:2d:73:c3:
                    85:93:42:9c:96:c0:22:e4:02:95:ba:75:2b:6f:7e:
                    a5:7b:8c:20:3d:85:fc:6d:15:1b:e6:e9:cc:0d:b2:
                    1d:b8:8d:37:21:4a:15:f1:d6:92:9e:d8:3e:90:4b:
                    c3:b9:60:62:bc:b6:34:67:57:b1:29:b6:b3:57:6c:
                    eb:d9:fa:8f:1e:c5:ce:61:20:43:a1:c8:b9:e8:50:
                    a6:c2:aa:6b:c4:7f:6e:85:fa:4b:57:4a:a6:5d:b6:
                    64:8b:40:26:16:15:1a:04:13:0f:ab:25:12:f3:d5:
                    d0:dd:2b:14:80:08:02:4b:e1:bd:84:e6:cd:e8:53:
                    70:c2:84:b3:88:31:c6:29:73:c5:8f:e8:6b:50:37:
                    4c:8c:fa:b4:b1:7c:c7:c0:3f:ab:25:03:83:22:fe:
                    a1:b3:ed:b9:11:7e:59:50:67:94:9b:03:bf:76:ff:
                    61:87:47:12:3e:de:0f:91:c7:bc:65:83:ff:df:ac:
                    e8:b4:02:f2:10:c0:68:0e:e2:49:4d:86:0a:f9:bd:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2F:56:6A:52:47:FC:2B:97:2C:92:BB:FA:15:67:E1:5D:41:F8:F0
            X509v3 Authority Key Identifier:
                keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:99:1f:22:e2:df:14:57:1d:8c:3c:0f:2a:43:5b:92:28:
         ba:b4:7f:9e:e4:e7:c7:59:43:66:1f:46:97:87:d7:5a:1b:7f:
         d3:85:6c:3f:c1:86:60:b8:8b:27:31:07:01:b5:d6:7a:35:9c:
         eb:cc:1e:12:75:49:bf:ab:e7:c0:a6:fb:37:96:fd:b1:2d:d3:
         c4:03:d2:2e:ce:18:8f:ad:d5:ca:c7:aa:85:c3:f6:83:62:48:
         ed:25:6f:35:e2:d4:b3:58:59:70:4a:a0:84:cb:89:d4:48:17:
         91:18:d5:a1:84:ba:cb:23:ae:e4:d3:0d:ee:c3:8c:dd:e7:72:
         0b:1f:6a:f4:bd:a6:b2:de:fd:c0:6b:43:23:93:a3:ef:f8:ec:
         f6:fa:81:a3:1a:31:eb:93:1f:fc:08:66:9d:f8:16:97:e7:13:
         43:7c:8f:4c:0f:9e:a5:34:94:a6:ea:2f:86:20:b6:a7:45:f9:
         c1:a2:f7:1f:b4:1e:2c:9b:af:4d:9d:ae:cd:82:2c:db:e8:a1:
         eb:35:df:06:39:3b:25:79:b5:a3:b6:15:52:d2:4e:b5:74:4c:
         2d:e4:0f:1a:48:06:1a:0b:78:66:18:5f:54:30:2b:8b:07:41:
         30:42:3c:dd:ae:75:7e:76:2c:d9:6f:6a:06:68:ac:1d:51:8d:
         cd:d4:2d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055e3o8CPzf4gWbZRzs7SNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzNhN2ZjMzA0YmMwMmQ4MDc0NDc2ZDA3NWRiNWNkY2Qy
ZGFiZGUwHhcNMjYwMzI5MTQwMTAzWhcNMjYwMzMwMTQwMTAzWjAzMTEwLwYDVQQD
EyhmMzJmNTY2YTUyNDdmYzJiOTcyYzkyYmJmYTE1NjdlMTVkNDFmOGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSXG9Bd4ZTP89e8FkNNrzYusdmLs
Xdx2qfKiHzNBh160MdJzTUtlfqKioKcMCuJEyoMmy6GaDoAtc8OFk0KclsAi5AKV
unUrb36le4wgPYX8bRUb5unMDbIduI03IUoV8daSntg+kEvDuWBivLY0Z1exKbaz
V2zr2fqPHsXOYSBDoci56FCmwqprxH9uhfpLV0qmXbZki0AmFhUaBBMPqyUS89XQ
3SsUgAgCS+G9hObN6FNwwoSziDHGKXPFj+hrUDdMjPq0sXzHwD+rJQODIv6hs+25
EX5ZUGeUmwO/dv9hh0cSPt4Pkce8ZYP/36zotALyEMBoDuJJTYYK+b0DbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMvVmpSR/wrlyySu/oVZ+FdQfjwMB8GA1UdIwQY
MBaAFBxzp/wwS8AtgHRHbQddtc3NLaveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhPbl9EQkx3QzJBZEVkdEIxMjF6YzB0cTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84MTBjNzItZDQxNi00YTE0LThhY2Et
YThmYWVlYjdlZTUyLzEvSEhPbl9EQkx3QzJBZEVkdEIxMjF6YzB0cTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84MTBjNzItZDQxNi00YTE0LThhY2EtYThmYWVlYjdlZTUy
LzEvSEhPbl9EQkx3QzJBZEVkdEIxMjF6YzB0cTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkSZHyLi
3xRXHYw8DypDW5IourR/nuTnx1lDZh9Gl4fXWht/04VsP8GGYLiLJzEHAbXWejWc
68weEnVJv6vnwKb7N5b9sS3TxAPSLs4Yj63VyseqhcP2g2JI7SVvNeLUs1hZcEqg
hMuJ1EgXkRjVoYS6yyOu5NMN7sOM3edyCx9q9L2mst79wGtDI5Oj7/js9vqBoxox
65Mf/AhmnfgWl+cTQ3yPTA+epTSUpuovhiC2p0X5waL3H7QeLJuvTZ2uzYIs2+ih
6zXfBjk7JXm1o7YVUtJOtXRMLeQPGkgGGgt4ZhhfVDAriwdBMEI83a51fnYs2W9q
BmisHVGNzdQtyw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:43 2026 by rpki-client