Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File:                     HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier:          UtKdlHP7dajkYEI9QhUkaO+qgp5I+Fk4xNPEUp4Aprc=
Subject key identifier:   92:83:F9:F0:7E:C7:CF:F5:C5:11:DD:9C:5E:C8:AF:D5:0D:E6:7A:28
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer:       /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial:       019EBF233F315768690FAD1E9E1A26FD2CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number:          1486
Signing time:             Sat 13 Jun 2026 04:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:18 +0000
Files and hashes:         1: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: Hv4gwQYjRSeUbPC9YuYkGNc8S6SJQgzRPGxFVOMCJUY=)
                          2: MUqDsVkna7G4MyO1lSn72i-Jbow.roa (hash: IVcowk46pxZyKS0pkiAyx+n+WI60LUgzwvxTDQ5wrNc=)
                          3: N4IzrH0qD40Woupyn9pXT2Z1eMg.roa (hash: Day6JScG9JRnBC85UOxG3a1DX4Ksh0LMtFWjdlB6gU0=)
                          4: dRHnWg8xgMV7IsHlZGz8N74fQIs.roa (hash: gSF6LAUwiGyd8EI+BN4CEzTlS4d9BOM234ihF2xKvGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:3f:31:57:68:69:0f:ad:1e:9e:1a:26:fd:2c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
        Validity
            Not Before: Jun 13 04:00:18 2026 GMT
            Not After : Jun 14 04:00:18 2026 GMT
        Subject: CN=9283f9f07ec7cff5c511dd9c5ec8afd50de67a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:31:75:64:2a:08:9f:bb:22:6a:89:63:f2:
                    ca:e6:93:bf:ee:61:9a:3d:21:24:92:37:24:01:64:
                    9a:a6:30:3c:2b:8c:7f:db:ee:e3:85:48:13:81:57:
                    6d:02:d6:6c:f9:65:ff:59:8d:e6:2b:73:2d:5d:a1:
                    a7:a6:dc:a7:f0:b3:4c:16:a0:d7:4f:d0:bc:cd:f4:
                    f5:e8:cc:71:d0:82:b7:07:f1:34:b3:e9:cc:10:7d:
                    19:ab:6b:50:14:af:88:df:7d:09:25:46:0b:bc:e0:
                    7f:0c:49:4f:66:5c:32:9e:62:ce:fa:73:4d:71:6b:
                    5b:9e:00:f7:f0:6b:99:ae:5d:d4:a0:cc:03:1c:48:
                    b6:1f:1d:39:87:f5:0b:52:ef:6e:e3:14:cf:e7:0b:
                    b7:ba:98:64:d6:eb:49:d3:3e:72:2d:e8:a6:22:e4:
                    3a:95:4e:fa:df:3f:89:f4:b6:a8:c1:4a:6a:f7:c1:
                    3a:18:2a:04:70:e6:df:5b:02:64:dc:ed:00:cf:2e:
                    f6:07:d6:67:a5:1e:f9:de:5a:7d:15:f4:0c:10:5c:
                    4e:c8:ff:0a:f5:e9:59:03:7a:5d:04:51:63:63:0c:
                    b9:a8:db:0f:5c:ea:4b:48:ba:40:7a:41:81:3b:a4:
                    09:35:b1:51:ed:f7:3b:f0:71:b4:d5:e7:79:fb:ac:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:83:F9:F0:7E:C7:CF:F5:C5:11:DD:9C:5E:C8:AF:D5:0D:E6:7A:28
            X509v3 Authority Key Identifier:
                keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:f9:3b:ec:ef:e5:3a:68:f5:b6:05:a0:0e:15:2f:74:fb:
         e9:76:2f:23:c8:f1:4a:80:c6:1f:48:cc:9c:2e:e1:27:4c:d0:
         96:51:16:ce:77:32:e5:73:3b:f3:5d:39:de:9e:72:28:0b:73:
         e9:59:c8:fb:fd:67:7e:c6:44:e0:1e:6b:ec:e7:8f:e7:29:53:
         65:92:d3:31:e6:1e:e6:8d:36:dd:35:5f:69:3a:c6:2f:48:ff:
         a2:35:12:c9:4a:af:d4:58:03:47:71:dd:22:3b:0e:c4:c0:09:
         e3:40:b1:d5:bc:47:99:01:e8:37:3b:b0:57:16:b9:d3:ce:e6:
         4a:b9:a8:27:0d:da:e6:7d:97:af:10:28:21:65:93:1f:6c:5d:
         e5:6d:b1:1a:72:8f:06:7d:da:04:6e:61:66:4a:55:d1:c7:87:
         e1:a6:4f:ec:57:81:75:7d:8e:53:03:1e:7e:98:01:15:d1:4d:
         2a:ff:26:24:e2:a8:93:c0:6f:c4:88:27:e5:68:be:05:5e:fa:
         d8:90:a6:a7:1f:90:bd:6a:d4:fd:5c:cc:85:d0:2b:06:46:99:
         d6:25:cb:7e:a7:50:cd:12:70:b7:6c:93:fa:bd:e6:6e:dc:91:
         97:b0:de:8f:52:31:9a:37:fc:da:32:63:51:49:63:41:2c:76:
         d5:a4:3a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:27 2026 by rpki-client