Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File:                     HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier:          Wy/d7ZoopHNRGOorG9vPGnZLMw5pQciQku0iMMHvJy4=
Subject key identifier:   18:DC:E2:E8:88:81:E8:B0:1B:3D:44:4B:FA:DA:B1:80:9A:27:9C:C1
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       019D9B875AE17CEAA384C95A75ECC274187D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number:          15DA
Signing time:             Fri 17 Apr 2026 13:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:32 +0000
Files and hashes:         1: 6pBv9rKYxwjjKOpT9lg6FT4kUQA.roa (hash: IB3HEiPAgwZs0ZTzyeRwb6dl6LY+fOatj7OxrAXQUsE=)
                          2: Cw5n-PWT2I1DxgK5DhwcrBsPkdE.roa (hash: mUvGxOekgoK3xHrsniH+HyllAGZivMOYDnmq6KeKBXw=)
                          3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: ojpx1sQeFXYAkVv3mC8pBKb4LAA67X6gdUB3SfPDDxE=)
                          4: jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa (hash: qxuliQjoknAXmEjclXw7gD+kEmDxgV1U5FrECOviQhg=)
                          5: xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa (hash: EELHcZVf2cz0S4yWN9gbTUNVwaT1jOiA4YdDZsp4DqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:5a:e1:7c:ea:a3:84:c9:5a:75:ec:c2:74:18:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Apr 17 13:00:32 2026 GMT
            Not After : Apr 18 13:00:32 2026 GMT
        Subject: CN=18dce2e88881e8b01b3d444bfadab1809a279cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:56:20:dd:ca:94:6a:cb:68:40:43:d6:cf:
                    95:23:01:3b:4d:bb:21:d8:70:54:ad:5c:08:ae:35:
                    ab:32:85:b3:ba:8d:08:07:f4:b8:a1:e8:4b:60:25:
                    17:30:eb:c0:16:e0:e9:64:b1:f3:b5:07:aa:ff:bb:
                    ae:88:5a:40:ec:f8:b3:e6:49:42:0b:be:0a:a7:73:
                    e5:1f:c5:cf:45:72:7f:d0:d7:6b:2a:20:00:be:a8:
                    84:81:37:07:06:9b:c2:18:94:1b:50:e8:a0:8a:26:
                    5d:56:8c:3b:f5:4e:3d:8a:7b:af:7f:60:78:42:38:
                    0d:31:2c:88:a9:47:f4:eb:1d:f6:f6:8d:e7:49:27:
                    4d:2e:3f:f4:7f:da:ba:60:e4:73:10:27:d0:7f:e1:
                    88:12:ae:85:a3:28:af:d8:ab:7e:53:4b:5e:32:41:
                    0c:e1:94:9b:77:81:3f:b8:69:aa:3c:ef:3e:2a:f7:
                    9b:a2:f4:c1:78:75:50:b9:71:45:74:c4:64:47:87:
                    7c:52:15:79:ad:27:a3:23:8e:f9:83:52:16:48:50:
                    54:83:9b:81:24:f1:37:26:ae:77:2c:ea:68:85:d4:
                    b5:9d:37:d5:7b:78:27:6a:15:94:34:e3:4d:ae:ec:
                    42:5a:ba:70:1d:a9:a7:b2:65:b9:e9:72:9a:2f:a7:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DC:E2:E8:88:81:E8:B0:1B:3D:44:4B:FA:DA:B1:80:9A:27:9C:C1
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:00:de:7e:49:9b:66:fc:e0:32:af:f5:ae:db:d8:fd:ee:
         17:bd:12:01:78:26:d4:c6:40:8c:1c:08:75:e4:7f:a8:5d:e2:
         6e:a2:56:c6:7e:7b:08:89:36:a3:7e:e7:2a:0d:b0:10:9d:9c:
         4c:cf:5e:14:1f:5e:9b:ab:80:ad:8c:24:10:16:59:29:87:d4:
         c9:fe:7f:9d:59:92:0e:23:3e:1b:6c:8c:37:e7:e8:ae:11:32:
         0e:92:ea:14:4d:46:b6:3d:2d:54:e2:dd:63:a5:15:65:06:0a:
         8b:66:05:6d:8d:df:52:e0:0d:aa:a1:84:7c:0f:55:3b:c7:c7:
         49:d8:e7:a6:5d:ca:8f:6f:83:b9:75:91:9f:fd:da:17:34:d4:
         b0:7d:d9:55:c2:8b:73:35:75:25:32:85:f2:25:64:d1:0f:9c:
         40:fe:32:92:ad:e7:0b:c2:12:24:bb:2d:9e:08:8a:4f:fb:7c:
         53:6e:ac:b1:e8:e2:9e:a2:6f:c2:d0:e0:39:f1:e9:87:a7:81:
         6d:5a:51:1b:7c:10:b2:fe:ec:97:5d:f3:0e:21:21:15:33:95:
         00:e9:a6:ed:db:1f:2f:18:85:5a:30:d5:a6:6d:11:ae:ac:b4:
         59:f3:48:6e:ef:07:5b:27:cf:e4:7c:3f:46:b0:09:c5:53:b2:
         5e:55:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:55 2026 by rpki-client