Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File:                     hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier:          fBG3JCkne9JuM/EWpz/ArKePBjdYoo4NRpUjlIX0jS0=
Subject key identifier:   09:F8:43:58:7C:7C:F3:74:C3:D1:9A:BC:B4:F3:3A:5F:19:AF:97:BB
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer:       /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial:       019EBE483A58DF7E76CD4E4CDC5D6975A357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number:          1998
Signing time:             Sat 13 Jun 2026 00:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:05 +0000
Files and hashes:         1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
                          2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
                          3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
                          4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: cTLblp0I8oHtkE0Lr18H2WClqEBXGZ8grHRiFw660AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:3a:58:df:7e:76:cd:4e:4c:dc:5d:69:75:a3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
        Validity
            Not Before: Jun 13 00:01:05 2026 GMT
            Not After : Jun 14 00:01:05 2026 GMT
        Subject: CN=09f843587c7cf374c3d19abcb4f33a5f19af97bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:a6:2c:67:91:80:e6:a0:b6:35:58:74:39:
                    2b:af:bb:d2:48:03:22:64:97:7a:e9:99:13:cb:5f:
                    8f:47:f4:ec:7a:bb:96:53:5b:c9:81:2c:9b:ba:71:
                    e8:81:0c:58:bc:d2:96:da:e7:2e:a0:4b:41:e9:c6:
                    b7:ff:98:e2:a2:94:e0:57:df:72:ab:fa:c1:6a:10:
                    90:11:5e:0b:a7:91:38:df:ab:75:05:d4:90:7d:19:
                    77:71:55:91:0d:df:6f:bc:93:9c:eb:46:77:e9:90:
                    3a:4f:4c:e0:95:ac:4b:23:0c:8f:88:8a:18:93:00:
                    79:09:cb:0e:5a:04:77:6e:ad:d8:db:53:a3:d5:40:
                    b3:1f:e2:45:44:f2:31:3f:3d:13:17:17:18:03:ac:
                    71:10:ff:b5:0f:15:12:c9:4c:4e:28:0c:75:42:00:
                    74:3f:3e:4f:75:5a:f1:a4:1b:c6:f4:9f:21:e4:65:
                    6b:bd:f1:5b:32:c7:76:71:94:09:55:0d:ca:b3:f4:
                    81:c7:dd:1a:51:9e:19:36:4a:5e:38:6d:d5:87:81:
                    8c:8f:88:90:70:f8:fc:d2:68:e1:53:ba:3f:12:1a:
                    2b:1c:ff:51:9d:40:d1:58:43:5c:47:eb:b8:9e:37:
                    ea:dc:5b:16:0a:c2:5e:76:d9:52:73:71:e9:fc:23:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F8:43:58:7C:7C:F3:74:C3:D1:9A:BC:B4:F3:3A:5F:19:AF:97:BB
            X509v3 Authority Key Identifier:
                keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a6:c5:97:d8:e3:1f:4b:b9:24:d2:2d:87:f3:a7:3c:f2:c3:
         c9:0c:77:43:16:fa:ac:9c:51:2e:18:9e:b6:47:15:ce:2f:f0:
         8a:74:ec:b3:e7:81:03:c1:2a:76:08:03:38:9c:d3:38:65:b8:
         cb:e5:1a:22:d1:85:13:c7:ec:f8:64:d8:83:85:ef:3e:77:d3:
         ed:7d:b5:f4:94:92:44:1f:fa:e3:96:21:67:bd:27:28:34:b5:
         bd:7d:cd:7f:3b:47:e3:8d:c6:7a:49:d7:a4:a3:2e:c9:2b:e7:
         99:8f:72:75:3f:f5:57:92:9b:92:69:72:48:5b:93:64:00:c3:
         0f:12:bf:a5:14:a0:b7:38:a2:fd:41:30:0a:9b:a3:cf:4f:46:
         20:c2:d0:14:a2:c9:1d:be:82:39:c7:b7:f2:b9:68:b1:9e:04:
         47:13:60:fc:6a:e4:ec:1c:bd:e7:34:97:38:fc:50:95:a9:e1:
         1a:96:dc:56:e1:06:f5:21:01:57:a0:90:d0:54:9d:35:cc:45:
         dc:c6:99:db:81:13:7e:d1:9d:e1:e3:78:30:5d:09:97:9d:61:
         fc:7a:d5:de:5d:90:f5:70:3a:e4:1e:00:fc:43:51:11:e1:b4:
         48:91:27:24:78:17:7b:c2:1b:44:a1:57:7c:b7:61:29:a3:eb:
         31:1e:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:18 2026 by rpki-client