Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File:                     HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier:          dMu2r3Kl+Vtm49IIv/h2MbpbA/yoRobPXYT9fDr9GQo=
Subject key identifier:   F6:29:FC:1A:46:EF:EE:6A:B4:62:70:0A:AE:4B:0E:C2:AE:55:9E:54
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer:       /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial:       019D9850504D973220EC9339E72D5F346DB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number:          0FE8
Signing time:             Thu 16 Apr 2026 22:01:33 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:33 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:33 +0000
Files and hashes:         1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: qEs4BeJDRO9umVTxstq5pMQ0+1lT6x1PzBvvU4I9TnI=)
                          2: UJWn-wAPft9IixekN55NPYLNamM.roa (hash: pG2rLvElt60tF5xnp9AHmw3BuJ08zKLP8VTkx1BBVh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:50:4d:97:32:20:ec:93:39:e7:2d:5f:34:6d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
        Validity
            Not Before: Apr 16 22:01:33 2026 GMT
            Not After : Apr 17 22:01:33 2026 GMT
        Subject: CN=f629fc1a46efee6ab462700aae4b0ec2ae559e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:13:02:be:da:26:c7:ac:a4:93:42:ac:8b:
                    50:78:48:80:a0:86:14:31:d6:bf:f5:b7:5e:d9:09:
                    31:77:6b:69:e2:b2:0a:0f:bc:c4:d5:dd:72:b9:49:
                    38:3d:8b:7d:62:11:1d:bc:fc:ca:66:85:fc:f5:66:
                    46:fd:a0:a8:17:c6:22:5a:a5:ff:41:28:03:ac:a5:
                    09:b3:f9:cd:f9:1a:c1:14:d3:ab:f7:df:c3:0c:51:
                    fe:55:08:12:6b:8f:9d:0c:ae:b6:ed:bb:2e:bc:bf:
                    2a:f0:15:44:c2:a9:25:e6:16:f6:95:ba:9e:e6:89:
                    b6:c9:c0:56:ab:58:88:4e:87:47:a1:98:76:1d:bf:
                    c5:f1:5d:e0:fd:fb:3a:61:0d:60:5c:13:5e:dd:31:
                    fd:b6:33:cc:4e:00:d6:ca:7c:9b:b4:3f:0a:c0:54:
                    c5:0e:92:a4:06:b5:a4:1d:54:0b:0d:02:ac:bd:2d:
                    5b:47:af:21:54:e2:23:b4:0b:39:5d:c0:ff:f2:74:
                    80:a2:5f:b9:f8:19:d6:3b:5a:66:c8:60:34:e3:1d:
                    d4:d9:57:f1:bf:c1:07:cb:9d:5a:fd:8c:6f:0c:7a:
                    f4:ef:45:61:41:cf:2e:0a:8f:25:c1:e4:08:34:aa:
                    a8:3c:d9:d5:c0:f9:88:3d:26:c6:8a:35:d4:29:60:
                    1c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:29:FC:1A:46:EF:EE:6A:B4:62:70:0A:AE:4B:0E:C2:AE:55:9E:54
            X509v3 Authority Key Identifier:
                keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:50:83:ff:20:10:b4:81:0e:b2:29:8b:d3:2a:6d:f8:69:2f:
         59:99:c3:57:cd:9a:fd:f0:2c:60:ff:33:ce:eb:03:34:1c:0d:
         96:b2:30:cc:e4:66:21:ae:31:22:09:2e:d6:9e:49:49:0c:f3:
         3a:d5:39:de:e7:3c:98:95:70:47:3a:9f:d7:ac:b3:53:36:78:
         db:6a:61:95:6e:28:df:4b:52:bf:30:c0:51:d4:db:77:ee:92:
         04:75:01:82:a8:3f:fd:60:43:5b:5d:38:8f:3c:94:af:8f:89:
         3a:c7:da:bf:e7:c2:3f:0a:d7:f0:d7:fa:1e:3d:7c:e3:19:37:
         74:a1:d8:e2:eb:e2:64:55:04:75:f3:f8:cf:f0:ef:40:a3:be:
         8e:e8:bc:e2:5a:93:1a:13:59:ad:bc:dd:3b:b6:32:99:41:e7:
         90:b2:68:16:2e:90:d1:87:41:1b:e3:6e:0c:5c:31:25:15:f2:
         ec:47:35:28:e8:ce:09:82:d8:d5:c4:b4:a2:78:7c:c0:cc:fa:
         84:b1:f8:f7:04:d2:7f:40:a1:4a:70:0c:dc:94:36:cd:6a:4a:
         27:2a:1a:ac:09:97:18:48:e9:cd:74:87:60:f3:05:03:77:cf:
         0f:55:86:b7:4e:f6:54:42:2a:b5:ea:6f:fb:c7:4f:05:a6:94:
         42:d2:cb:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUFBNlzIg7JM55y1fNG2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjFjYjRiYmVlNWNkZDdlY2VkYTc1NjBhYTI0OWM2ZDEx
ZjIzYTkwHhcNMjYwNDE2MjIwMTMzWhcNMjYwNDE3MjIwMTMzWjAzMTEwLwYDVQQD
EyhmNjI5ZmMxYTQ2ZWZlZTZhYjQ2MjcwMGFhZTRiMGVjMmFlNTU5ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqsTAr7aJsespJNCrItQeEiAoIYU
Mda/9bde2Qkxd2tp4rIKD7zE1d1yuUk4PYt9YhEdvPzKZoX89WZG/aCoF8YiWqX/
QSgDrKUJs/nN+RrBFNOr99/DDFH+VQgSa4+dDK627bsuvL8q8BVEwqkl5hb2lbqe
5om2ycBWq1iITodHoZh2Hb/F8V3g/fs6YQ1gXBNe3TH9tjPMTgDWynybtD8KwFTF
DpKkBrWkHVQLDQKsvS1bR68hVOIjtAs5XcD/8nSAol+5+BnWO1pmyGA04x3U2Vfx
v8EHy51a/YxvDHr070VhQc8uCo8lweQINKqoPNnVwPmIPSbGijXUKWAcwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYp/BpG7+5qtGJwCq5LDsKuVZ5UMB8GA1UdIwQY
MBaAFB1hy0u+5c3X7O2nVgqiScbRHyOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQt
MDg3MWZkYjZhNGZhLzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQtMDg3MWZkYjZhNGZh
LzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlCD/yAQ
tIEOsimL0ypt+GkvWZnDV82a/fAsYP8zzusDNBwNlrIwzORmIa4xIgku1p5JSQzz
OtU53uc8mJVwRzqf16yzUzZ422phlW4o30tSvzDAUdTbd+6SBHUBgqg//WBDW104
jzyUr4+JOsfav+fCPwrX8Nf6Hj184xk3dKHY4uviZFUEdfP4z/DvQKO+jui84lqT
GhNZrbzdO7YymUHnkLJoFi6Q0YdBG+NuDFwxJRXy7Ec1KOjOCYLY1cS0onh8wMz6
hLH49wTSf0ChSnAM3JQ2zWpKJyoarAmXGEjpzXSHYPMFA3fPD1WGt072VEIqtepv
+8dPBaaUQtLLvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:10 2026 by rpki-client