Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          35NkeTNFSPQB9cSM1926saeZYce7CwWfqOXuGtFewj4=
Subject key identifier:   F2:A8:8C:8D:51:22:07:5D:C1:A3:D8:B1:29:7B:C3:29:52:D5:3F:02
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       01A0DE3CB1D12D368992C2A48A0C2D076986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          1086
Signing time:             Sat 26 Sep 2026 15:01:54 +0000
Manifest this update:     Sat 26 Sep 2026 15:01:54 +0000
Manifest next update:     Sun 27 Sep 2026 15:01:54 +0000
Files and hashes:         1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=)
                          2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=)
                          3: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=)
                          4: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=)
                          5: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=)
                          6: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=)
                          7: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=)
                          8: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=)
                          9: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=)
                          10: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=)
                          11: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=)
                          12: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=)
                          13: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=)
                          14: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=)
                          15: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=)
                          16: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=)
                          17: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=)
                          18: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=)
                          19: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=)
                          20: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=)
                          21: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=)
                          22: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: nj8NgvFXhMbf2yyHxG4jrMC6fEuGath234F4A9WVZlE=)
                          23: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=)
                          24: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=)
                          25: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=)
                          26: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=)
                          27: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=)
                          28: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=)
                          29: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=)
                          30: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=)
                          31: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=)
                          32: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=)
                          33: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=)
                          34: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=)
                          35: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:3c:b1:d1:2d:36:89:92:c2:a4:8a:0c:2d:07:69:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Sep 26 15:01:54 2026 GMT
            Not After : Sep 27 15:01:54 2026 GMT
        Subject: CN=f2a88c8d5122075dc1a3d8b1297bc32952d53f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:5b:d2:e4:66:23:22:38:7f:02:87:11:f2:
                    d9:a2:d1:6c:85:6b:92:71:47:c1:0a:73:7b:6d:33:
                    66:d8:33:72:1a:3f:89:6d:05:fd:29:2e:57:7f:16:
                    5f:74:d2:2d:e2:d1:d6:97:5d:e9:78:ad:07:03:57:
                    29:4b:84:43:20:25:49:46:0a:14:75:b3:58:d1:89:
                    2a:05:c4:d2:f9:ec:04:5c:40:c0:d5:ca:36:dd:c2:
                    64:d1:7f:01:af:b9:1f:fb:98:86:8f:7d:86:3f:94:
                    6f:04:d9:2a:97:e2:17:a7:ac:0f:6f:b3:f7:f4:1d:
                    61:69:d5:e0:bc:99:71:d9:f7:13:a9:68:78:e3:b5:
                    6c:78:4b:9b:98:9b:7f:a5:91:c5:c7:63:19:31:91:
                    9e:31:b5:a5:71:c2:e5:84:78:2c:b7:8c:93:cb:95:
                    7a:e3:3d:c6:96:aa:af:38:37:d7:bd:20:4c:b1:92:
                    52:28:39:5a:0c:02:b8:00:2a:9b:0b:27:25:ef:10:
                    0f:04:d0:7e:1c:44:24:3e:9e:4f:c8:06:a0:6f:f6:
                    c1:18:c6:c5:87:ce:6b:e9:21:4e:94:c9:b1:7c:a9:
                    b7:2b:b1:67:02:74:4f:20:4b:84:45:35:24:09:38:
                    f2:c8:e0:a6:c7:8d:c1:83:0a:7b:29:29:c3:95:e7:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A8:8C:8D:51:22:07:5D:C1:A3:D8:B1:29:7B:C3:29:52:D5:3F:02
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:9c:b5:a1:6a:87:9a:dc:c5:73:47:21:19:88:7f:c7:b3:78:
         9c:f0:e0:39:21:07:25:b2:8d:73:49:32:64:a5:4a:72:43:d6:
         59:f8:a0:cc:ad:1f:4b:f7:b4:fe:ed:97:f3:b0:ec:a9:5d:84:
         41:8d:4b:e0:a0:31:99:ea:8c:89:df:e4:3f:40:5b:14:82:86:
         4c:e3:cd:45:28:7b:a1:7f:3d:9d:a1:16:12:30:16:de:b7:1e:
         4f:82:68:4d:f2:d3:db:57:6e:b1:8b:c6:38:b4:b1:b2:a9:e9:
         64:9b:7f:15:72:e8:7b:94:93:e0:01:99:97:2c:ba:83:38:cb:
         db:a5:15:bf:b4:45:0e:f0:8f:37:ae:18:03:13:98:51:5e:fb:
         96:12:4a:54:37:2b:bd:35:7c:8e:3f:d9:f2:6a:c5:05:31:c3:
         d1:e5:44:bf:63:83:f2:e9:7f:a1:47:ea:af:8d:7f:a3:3c:23:
         85:d2:ce:bf:11:4b:57:a0:46:2d:5a:3e:69:3b:1a:4a:e6:c3:
         62:49:81:bc:57:03:0e:23:74:72:62:2e:6b:a4:63:35:d8:26:
         10:87:9c:d0:80:66:41:63:90:b6:8d:a0:d1:cd:2e:ab:e5:d6:
         e8:1d:05:ae:1d:f1:f9:a5:2e:2e:98:c4:2d:40:e8:c5:84:aa:
         07:aa:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:11:21 2026 by rpki-client