Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File:                     HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier:          p+7d4146dwucFjRIf7xuVRwti1V/WmwsGRlZeSq7WzE=
Subject key identifier:   8F:16:D5:34:E2:F1:AC:09:1B:15:2F:A2:9D:F9:56:19:C8:ED:CC:ED
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer:       /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial:       019DA3AEA10BC9505EC8312C695F9F13A413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number:          1223
Signing time:             Sun 19 Apr 2026 03:00:23 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:23 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:23 +0000
Files and hashes:         1: CvlT8XgWCNuSSaYILqFrDUnlk8Q.roa (hash: /PY60x69f1RFb1+VeQA4srQb3VpoSBgqHMBssXQXw/A=)
                          2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: txeRHmqUkU6QPqBNaqMCokfIdmt47JhrfMoaYQrbdRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:a1:0b:c9:50:5e:c8:31:2c:69:5f:9f:13:a4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
        Validity
            Not Before: Apr 19 03:00:23 2026 GMT
            Not After : Apr 20 03:00:23 2026 GMT
        Subject: CN=8f16d534e2f1ac091b152fa29df95619c8edcced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:f3:ae:d9:4a:b4:c8:da:8e:76:5f:a6:00:
                    71:2b:44:c3:80:86:15:7e:91:97:38:5b:34:73:9b:
                    74:92:73:92:29:04:b9:d5:ec:25:48:e3:88:90:a7:
                    03:d7:4f:5a:f3:d6:d1:27:b0:f7:ad:73:c3:22:a8:
                    f4:fd:63:71:56:25:36:69:ee:e6:70:04:58:22:41:
                    fc:47:20:37:b6:9a:41:5e:07:8b:91:e6:09:ee:0d:
                    8c:ce:f4:df:19:28:d9:82:64:f8:57:62:5e:a9:18:
                    1f:f5:95:e1:cd:b3:20:72:c1:74:c5:a8:be:d9:a5:
                    8a:9c:cb:8c:22:c3:88:56:81:1d:54:db:5b:df:fd:
                    1a:24:a3:20:ab:08:86:da:d5:d7:3e:dd:4f:2e:4d:
                    3b:65:ce:b5:2e:16:93:95:17:5a:55:23:20:1f:f2:
                    6b:5f:89:7d:18:6d:0e:d3:ad:10:79:b8:b3:88:6d:
                    52:e8:45:8e:46:75:2b:19:28:a0:dc:3b:5a:67:85:
                    65:5e:63:ac:ac:02:a7:03:d8:3d:44:63:5b:29:8f:
                    ae:db:e6:5e:5f:b7:c2:43:6b:ab:66:20:58:ed:f1:
                    25:3a:4a:a8:db:d8:c8:73:28:0c:b2:04:8d:c0:e5:
                    20:56:4c:ed:2a:21:aa:53:8c:90:03:59:18:bb:0e:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:D5:34:E2:F1:AC:09:1B:15:2F:A2:9D:F9:56:19:C8:ED:CC:ED
            X509v3 Authority Key Identifier:
                keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a0:5d:50:6c:3b:76:b2:7b:5e:ed:b7:9b:c6:0b:70:26:66:
         b6:3e:d9:4b:9d:52:d2:b4:b7:37:ae:41:6a:70:60:c1:a6:f3:
         d7:66:b3:2b:21:4d:49:86:b7:cd:54:ed:f7:f0:23:5f:9f:cf:
         60:fe:e2:bf:50:01:10:7f:e0:9a:81:5d:5b:92:56:fc:b2:81:
         a8:09:7a:76:56:62:1a:4e:5d:5b:eb:1e:48:6f:bd:92:a2:48:
         17:8b:75:3c:21:87:e0:17:5e:d2:f8:8f:17:e3:ac:4a:d5:a3:
         7b:a8:01:71:ab:fc:64:d1:27:36:38:72:70:c3:28:79:7a:14:
         c6:62:98:01:c0:05:b4:ff:01:0f:77:84:5e:df:1b:f5:ef:3d:
         fd:89:92:91:ef:70:58:5a:d6:60:64:5b:7d:7d:95:b7:e5:2f:
         4f:f0:19:a4:0b:c7:0c:fe:fb:ae:9f:07:f6:63:f1:2b:29:f8:
         15:5f:83:b3:35:b7:9c:e1:58:42:21:b3:7f:00:2b:92:a7:99:
         42:15:d9:ea:0f:77:44:f7:e8:c0:6e:0f:f7:60:d5:af:8f:e0:
         63:6f:31:94:57:1d:c1:e3:d8:bb:05:b1:a7:9b:22:18:c1:71:
         39:7e:68:05:43:86:eb:df:6b:94:3c:e9:7e:33:55:5e:2b:a2:
         f7:ce:11:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrqELyVBeyDEsaV+fE6QTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOWMwYjFkMjE0NDIxNGVhNDkxM2M3ZDYzYjI2ZmUyNmE0
NzJlZmUwHhcNMjYwNDE5MDMwMDIzWhcNMjYwNDIwMDMwMDIzWjAzMTEwLwYDVQQD
Eyg4ZjE2ZDUzNGUyZjFhYzA5MWIxNTJmYTI5ZGY5NTYxOWM4ZWRjY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMjzrtlKtMjajnZfpgBxK0TDgIYV
fpGXOFs0c5t0knOSKQS51ewlSOOIkKcD109a89bRJ7D3rXPDIqj0/WNxViU2ae7m
cARYIkH8RyA3tppBXgeLkeYJ7g2MzvTfGSjZgmT4V2JeqRgf9ZXhzbMgcsF0xai+
2aWKnMuMIsOIVoEdVNtb3/0aJKMgqwiG2tXXPt1PLk07Zc61LhaTlRdaVSMgH/Jr
X4l9GG0O060QebiziG1S6EWORnUrGSig3DtaZ4VlXmOsrAKnA9g9RGNbKY+u2+Ze
X7fCQ2urZiBY7fElOkqo29jIcygMsgSNwOUgVkztKiGqU4yQA1kYuw4Z4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8W1TTi8awJGxUvop35VhnI7cztMB8GA1UdIwQY
MBaAFBycCx0hRCFOpJE8fWOyb+JqRy7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEp3TEhTRkVJVTZra1R4OVk3SnY0bXBITHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDg1MTQtMGVlNS00Y2RiLWIwNzgt
ZjY1YTkzZjQ4MGE4LzEvSEp3TEhTRkVJVTZra1R4OVk3SnY0bXBITHY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZDg1MTQtMGVlNS00Y2RiLWIwNzgtZjY1YTkzZjQ4MGE4
LzEvSEp3TEhTRkVJVTZra1R4OVk3SnY0bXBITHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaBdUGw7
drJ7Xu23m8YLcCZmtj7ZS51S0rS3N65BanBgwabz12azKyFNSYa3zVTt9/AjX5/P
YP7iv1ABEH/gmoFdW5JW/LKBqAl6dlZiGk5dW+seSG+9kqJIF4t1PCGH4Bde0viP
F+OsStWje6gBcav8ZNEnNjhycMMoeXoUxmKYAcAFtP8BD3eEXt8b9e89/YmSke9w
WFrWYGRbfX2Vt+UvT/AZpAvHDP77rp8H9mPxKyn4FV+DszW3nOFYQiGzfwArkqeZ
QhXZ6g93RPfowG4P92DVr4/gY28xlFcdwePYuwWxp5siGMFxOX5oBUOG699rlDzp
fjNVXiui984R1g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:46 2026 by rpki-client