Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File:                     hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier:          DNHO+QzseMTtvO9qscqHCv5wzDAlVC1rHwY78ErUVxA=
Subject key identifier:   8F:93:8C:82:EF:AB:B2:DC:4B:2E:12:47:BB:DB:71:23:F2:FB:02:95
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer:       /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial:       019EC224F1C5159EAB7AD4475DFAFE8FAED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number:          190B
Signing time:             Sat 13 Jun 2026 18:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:01 +0000
Files and hashes:         1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
                          2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: pT3mJl2eiD2TD2S+bd6ShXjeezmm8fYXPbyDdu+tRoU=)
                          3: ztuH1Ib6x5wzUeQhgYqrotMVPQw.roa (hash: utfkpD2m+HS/flfgYbwUeyyWH7NvVuqHqyG3A5crwN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:f1:c5:15:9e:ab:7a:d4:47:5d:fa:fe:8f:ae:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
        Validity
            Not Before: Jun 13 18:01:01 2026 GMT
            Not After : Jun 14 18:01:01 2026 GMT
        Subject: CN=8f938c82efabb2dc4b2e1247bbdb7123f2fb0295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:ed:af:1f:8f:b7:24:71:4b:ba:fc:fa:9d:
                    cd:f0:50:2e:2f:b3:9c:9e:09:f5:de:61:bc:56:39:
                    a4:0f:8b:12:a1:45:01:56:c6:83:23:36:52:42:73:
                    b4:bd:bf:24:6e:e9:1e:1e:1e:37:34:69:e2:69:fd:
                    21:a5:34:ae:8a:92:dc:0c:49:35:21:42:b0:15:03:
                    34:be:19:ce:13:96:ea:fd:aa:f1:90:9a:4d:15:2f:
                    5e:0e:22:7f:f0:f5:82:d8:53:4c:7f:09:ef:08:02:
                    e6:3f:ec:c6:a8:df:95:2a:64:a2:0d:ad:a3:c4:bc:
                    34:d2:f7:ea:1b:87:c7:ee:b8:ea:06:58:b5:fc:ad:
                    86:74:80:5c:1b:d0:56:f3:68:c1:2d:88:27:5d:bc:
                    92:87:10:d1:50:a4:c6:56:67:68:0c:04:fc:ed:8d:
                    79:e3:4b:6f:dd:b8:c1:9f:18:f3:c2:af:3f:f5:27:
                    fc:3d:e0:e2:88:e1:3d:bc:7a:e0:be:b2:a9:b1:b1:
                    e2:9e:9c:81:97:1f:bf:99:9d:e4:b3:a8:6f:d3:7c:
                    7a:6f:1b:8e:3e:85:9e:1b:05:6c:0c:f8:38:fe:e3:
                    79:ea:68:59:6a:29:f4:d3:e9:77:24:2e:ed:ea:7f:
                    88:c2:56:9e:31:38:82:cd:37:f6:27:e5:3b:c5:60:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:93:8C:82:EF:AB:B2:DC:4B:2E:12:47:BB:DB:71:23:F2:FB:02:95
            X509v3 Authority Key Identifier:
                keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cc:20:40:87:ee:5a:b5:cc:7e:b0:91:aa:7b:d4:32:8b:00:
         14:c5:3b:a8:bf:54:2c:07:2f:a4:14:78:ea:68:a9:0f:e6:17:
         45:7d:7e:70:55:e9:37:df:22:96:57:a8:3b:02:a2:3f:c2:82:
         9b:96:ea:e2:cd:20:ae:e4:79:52:8e:62:ed:a5:72:26:8a:78:
         c9:0a:c7:66:05:21:46:7b:9c:60:12:01:b5:d3:7d:ac:d6:d1:
         85:62:59:06:9a:85:e8:95:5f:64:7a:11:96:48:50:d6:a1:6b:
         3a:d4:32:4e:fb:b4:8a:ab:e9:2c:7e:38:24:19:67:94:19:d3:
         9c:8a:33:5b:9e:c1:f6:c2:39:8f:dd:bd:97:91:59:cf:1a:c2:
         5a:f6:7f:db:a7:df:8a:b7:fa:f3:d0:e7:31:37:c7:df:4a:2e:
         52:87:11:a3:59:df:61:c9:c7:1a:76:3c:67:5b:79:cf:48:51:
         9a:6d:73:fb:15:6e:fa:1f:a5:b9:ae:06:48:66:89:16:2e:db:
         ce:f6:37:75:c8:d5:19:47:fc:c2:ec:d9:83:97:03:5c:e8:a1:
         83:b3:d3:a0:10:d9:1c:e6:f0:bf:a8:a7:36:be:28:c2:6e:fa:
         9c:e0:19:15:83:47:25:20:66:dc:87:43:ee:c1:0e:90:29:4f:
         89:96:51:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJPHFFZ6retRHXfr+j67ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2
NmYwNzEwHhcNMjYwNjEzMTgwMTAxWhcNMjYwNjE0MTgwMTAxWjAzMTEwLwYDVQQD
Eyg4ZjkzOGM4MmVmYWJiMmRjNGIyZTEyNDdiYmRiNzEyM2YyZmIwMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUTtrx+PtyRxS7r8+p3N8FAuL7Oc
ngn13mG8VjmkD4sSoUUBVsaDIzZSQnO0vb8kbukeHh43NGniaf0hpTSuipLcDEk1
IUKwFQM0vhnOE5bq/arxkJpNFS9eDiJ/8PWC2FNMfwnvCALmP+zGqN+VKmSiDa2j
xLw00vfqG4fH7rjqBli1/K2GdIBcG9BW82jBLYgnXbyShxDRUKTGVmdoDAT87Y15
40tv3bjBnxjzwq8/9Sf8PeDiiOE9vHrgvrKpsbHinpyBlx+/mZ3ks6hv03x6bxuO
PoWeGwVsDPg4/uN56mhZain00+l3JC7t6n+IwlaeMTiCzTf2J+U7xWBumwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+TjILvq7LcSy4SR7vbcSPy+wKVMB8GA1UdIwQY
MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt
MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm
LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8wgQIfu
WrXMfrCRqnvUMosAFMU7qL9ULAcvpBR46mipD+YXRX1+cFXpN98illeoOwKiP8KC
m5bq4s0gruR5Uo5i7aVyJop4yQrHZgUhRnucYBIBtdN9rNbRhWJZBpqF6JVfZHoR
lkhQ1qFrOtQyTvu0iqvpLH44JBlnlBnTnIozW57B9sI5j929l5FZzxrCWvZ/26ff
irf689DnMTfH30ouUocRo1nfYcnHGnY8Z1t5z0hRmm1z+xVu+h+lua4GSGaJFi7b
zvY3dcjVGUf8wuzZg5cDXOihg7PToBDZHObwv6inNr4owm76nOAZFYNHJSBm3IdD
7sEOkClPiZZRDw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:50 2026 by rpki-client