Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File:                     hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier:          eIYYhInDtkQYTAtaaFm2la1Z4sNNd23Tbrvay6d+PKc=
Subject key identifier:   D5:15:0F:49:14:C9:98:4B:6F:B1:B0:3A:1F:67:99:E6:9B:59:A4:B3
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer:       /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial:       019CAAC6590CBE7E32F0FBE6E6431F29343A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number:          0D8D
Signing time:             Sun 01 Mar 2026 19:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:51 +0000
Files and hashes:         1: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (hash: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0=)
                          2: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: NqwI0fib1WP1STSIUWsrAzvGtkEwllC3gxPYGtdeHCU=)
                          3: yk-DGGnoKxjDOyVJDYCP2Dq6RkY.roa (hash: vb19X8WJPy7+RYVMmtMqPzkvfdcm+Fk9dFoJfJFBMp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:59:0c:be:7e:32:f0:fb:e6:e6:43:1f:29:34:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
        Validity
            Not Before: Mar  1 19:00:51 2026 GMT
            Not After : Mar  2 19:00:51 2026 GMT
        Subject: CN=d5150f4914c9984b6fb1b03a1f6799e69b59a4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:60:0b:d9:8c:8d:90:0b:0c:53:03:c2:f5:
                    00:dc:2a:71:71:4a:ef:0c:2d:42:1a:9c:85:bd:f8:
                    46:e2:53:2b:85:d2:d3:d9:98:a8:01:7e:8e:df:bc:
                    8f:f8:2d:f4:5f:cc:69:29:3b:34:8d:ec:d1:5d:db:
                    5b:11:ec:cb:42:0f:47:c9:f7:52:47:07:98:4a:c4:
                    90:0e:ae:72:c2:dd:71:17:be:c4:bb:c5:1a:97:15:
                    0d:71:1a:40:42:4a:be:f3:3a:ba:aa:c3:00:cb:a2:
                    a2:f9:81:57:cd:5c:18:67:46:3a:a3:5d:9d:c9:11:
                    f0:e9:41:1b:d4:b2:76:5d:80:84:02:11:79:e4:12:
                    6f:62:6f:ef:17:00:01:c8:71:e4:28:94:16:c3:ad:
                    63:eb:c1:4e:97:5e:11:85:40:92:ed:bc:f4:82:04:
                    c5:62:2c:0c:77:fe:b2:50:fa:ae:2b:80:fe:7a:f5:
                    6a:74:ee:03:8e:d8:ba:cf:bc:e2:1b:35:e2:d9:af:
                    66:29:d6:a8:d8:bd:54:b6:7b:a6:6a:9b:85:c9:8e:
                    bd:5e:2c:c9:7f:bd:b1:e8:42:b2:29:16:d1:84:77:
                    eb:8d:67:e7:57:89:19:98:60:f4:a5:ca:94:83:43:
                    09:00:39:41:31:ef:02:61:2d:76:2e:aa:2c:a8:ee:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:15:0F:49:14:C9:98:4B:6F:B1:B0:3A:1F:67:99:E6:9B:59:A4:B3
            X509v3 Authority Key Identifier:
                keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:53:31:1e:df:1c:a1:3d:ac:82:42:cf:e7:c7:ee:df:65:
         4e:29:84:97:1e:17:63:1d:a9:70:9b:1d:f6:8e:1d:f4:df:7b:
         58:9a:fa:e2:db:63:e1:0c:5c:79:6a:49:e7:cd:c7:81:41:c3:
         27:85:74:31:b2:78:15:cd:b4:60:1e:de:92:af:72:20:79:7e:
         ec:bd:d6:df:ee:2f:24:5d:e8:e7:16:f4:43:66:e3:4d:b3:20:
         5b:18:2f:d9:50:ac:63:90:bb:09:ee:b6:8e:6b:2f:1b:ab:1f:
         40:b0:c4:5c:eb:03:3a:f7:de:bc:40:0a:b2:c4:af:a5:f7:cf:
         0c:41:1e:46:58:7c:49:a1:79:13:b1:dc:6e:63:ce:a8:fc:60:
         4c:e7:97:1c:3e:51:2d:c0:40:2f:66:57:aa:5c:1c:b2:fa:e6:
         aa:f4:72:de:0c:f1:99:08:2d:28:79:69:dd:8b:0d:4c:74:6a:
         7e:64:d3:ff:a5:58:c2:aa:fc:61:91:a8:ef:0d:b5:b1:e7:3a:
         68:dc:6e:0a:26:30:67:da:62:09:31:fc:cb:15:37:9f:c4:40:
         c4:ba:32:59:d7:fc:90:eb:81:7d:72:23:7e:48:6d:d9:9d:9e:
         ee:f0:0a:4c:ec:aa:ef:0d:ff:f1:d5:4a:9c:33:c6:10:e8:9f:
         b4:b8:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:20 2026 by rpki-client