Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
File:                     HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft (raw, json)
Hash identifier:          ShngbzXDb8ZAkdTUXA7OsTJ9QnftFNJfelJRoUaA2WA=
Subject key identifier:   26:8A:F4:B4:D4:F1:79:75:CF:5A:C3:AC:7A:1C:5E:98:C8:EC:78:C6
Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54
Certificate issuer:       /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
Certificate serial:       019D9A7496FE4AF7D9C247A182005A923B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
Manifest number:          18D1
Signing time:             Fri 17 Apr 2026 08:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:24 +0000
Files and hashes:         1: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl (hash: 1BpsU8NRcP0dy7r/YF7P0iEULRmANGZ51Qj0/MmeJLE=)
                          2: KjyZ-IWUc2C7pVW-MHRxX3svnzE.roa (hash: 0GkpPe5cedhyWHxbUVRPb6N3X2iYNRX2oFNBWSQd5QM=)
                          3: _k3FrSKBOJcqhSAecjQY_vjPrBI.roa (hash: Jz9vkmly0kvPNUlQ/KsGS0Q4ilypXkedeHMKNEz6gO4=)
                          4: icsvsPk4BgefPyHE0hDTiLFDKGw.roa (hash: qnFygNzFdqK6XGc7qG5bm8SL258f2hni6VplgwG1Klo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:96:fe:4a:f7:d9:c2:47:a1:82:00:5a:92:3b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
        Validity
            Not Before: Apr 17 08:00:24 2026 GMT
            Not After : Apr 18 08:00:24 2026 GMT
        Subject: CN=268af4b4d4f17975cf5ac3ac7a1c5e98c8ec78c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:fd:f5:e9:93:69:77:f7:15:e7:bf:f9:0c:
                    08:a9:35:26:03:12:c6:27:bc:c7:75:31:38:07:59:
                    f9:29:1b:02:d2:3d:ef:4e:bf:21:f6:c0:cd:15:c0:
                    6e:da:eb:b7:6b:88:28:16:d5:0f:82:95:29:62:11:
                    38:50:cf:76:38:20:24:b6:ee:01:02:71:76:31:cd:
                    d7:f0:43:36:18:5b:76:5a:aa:2b:7b:7d:9e:48:0d:
                    57:8d:9c:bc:0c:47:c8:36:18:5c:3b:56:a5:61:0f:
                    cc:6d:66:19:af:8b:dc:b1:50:e3:3f:b6:0d:4f:1c:
                    80:4e:27:8d:e5:be:f8:80:8d:d3:6d:7f:a2:3c:62:
                    5a:40:a3:c5:19:44:6d:5b:9c:7f:4d:74:5a:f4:15:
                    bb:98:4e:2d:69:ce:19:7f:06:64:1e:13:ba:a1:94:
                    1f:6e:5f:f6:a6:c3:84:34:56:ac:dd:45:a9:cb:ce:
                    26:1f:b4:50:73:a7:fa:05:14:3d:24:ab:ae:62:94:
                    84:d1:45:66:fe:46:72:c1:07:43:bc:80:ae:5c:13:
                    e3:4e:05:ab:6d:44:3a:5a:e3:1c:da:61:56:58:c8:
                    3b:28:b2:3e:91:84:b7:e9:49:8b:24:47:cf:db:c2:
                    f7:e9:d2:89:48:e3:09:7f:a2:42:2e:a1:20:f0:c1:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:F4:B4:D4:F1:79:75:CF:5A:C3:AC:7A:1C:5E:98:C8:EC:78:C6
            X509v3 Authority Key Identifier:
                keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:78:9f:b4:1d:b6:50:8a:db:37:5c:6b:66:f3:a1:4a:8e:
         8d:f6:ca:38:b3:51:25:bc:c8:a9:cd:99:93:58:c7:46:3d:54:
         2a:38:56:8c:c6:eb:5f:56:44:90:55:bf:0f:c7:15:30:c8:92:
         14:32:49:38:28:84:c7:84:50:56:70:5f:48:91:1b:0c:72:69:
         6f:db:86:df:73:56:63:60:83:fa:23:72:62:7a:5e:43:ce:40:
         bf:c6:a9:69:dd:b4:6c:14:f5:a1:bd:50:28:ef:f0:e2:1d:2e:
         0f:a1:d5:b2:b8:f9:aa:8a:02:47:8d:2b:4b:f1:dc:fa:8c:0f:
         b4:84:7b:73:9c:7c:bb:14:fa:3c:ec:93:27:9d:d0:e3:c8:89:
         b7:1e:54:6a:50:a4:f7:62:a6:6c:9d:d5:fc:18:7c:1f:26:d1:
         94:37:7f:1a:34:13:ed:b7:13:4b:f5:08:67:42:01:16:91:d4:
         af:49:b2:3f:f5:53:cc:5a:df:e6:19:2d:a8:74:64:d2:15:1c:
         56:ba:a1:54:c3:17:6b:36:49:10:a1:0e:49:48:1b:87:82:6a:
         1f:bd:45:bf:67:b5:3c:ce:7d:de:75:17:1d:89:1a:cf:a6:23:
         3e:6e:0e:28:1b:71:00:3a:b6:15:1c:06:76:44:73:c0:cc:59:
         57:52:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:06 2026 by rpki-client