Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          IRgyYYlnqSvDJKuGJRewSeMT1vLbgYn/x0Q9UemnhYE=
Subject key identifier:   30:2B:EF:3A:D9:CC:DA:25:AB:63:93:B7:55:45:3F:10:60:CD:98:92
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       019EBF919729C6E72FFDCB736623266C2710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0F6D
Signing time:             Sat 13 Jun 2026 06:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:50 +0000
Files and hashes:         1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=)
                          2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=)
                          3: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=)
                          4: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=)
                          5: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=)
                          6: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=)
                          7: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=)
                          8: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=)
                          9: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=)
                          10: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=)
                          11: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=)
                          12: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=)
                          13: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=)
                          14: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=)
                          15: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=)
                          16: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=)
                          17: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=)
                          18: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=)
                          19: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=)
                          20: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=)
                          21: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=)
                          22: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: nyILbDNIHKoc68SUC+8ftvoGCq/kfIhn4AyP50ODBfw=)
                          23: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=)
                          24: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=)
                          25: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=)
                          26: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=)
                          27: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=)
                          28: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=)
                          29: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=)
                          30: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=)
                          31: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=)
                          32: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=)
                          33: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=)
                          34: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=)
                          35: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:97:29:c6:e7:2f:fd:cb:73:66:23:26:6c:27:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Jun 13 06:00:50 2026 GMT
            Not After : Jun 14 06:00:50 2026 GMT
        Subject: CN=302bef3ad9ccda25ab6393b755453f1060cd9892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:5c:8c:d2:cd:3d:ae:a5:89:71:d4:24:45:
                    b7:e3:c6:39:74:7c:bf:59:99:8f:de:3f:05:b7:4c:
                    2b:fc:50:81:fd:9c:05:ab:21:ca:17:1a:54:c7:4e:
                    b9:dd:57:3f:34:f8:88:2f:70:34:ab:c3:86:82:ea:
                    05:35:b4:4d:29:20:26:dd:be:3c:34:38:e9:e7:92:
                    6e:72:c0:94:13:7e:00:6f:41:62:a9:cf:4d:85:64:
                    f1:ba:1d:db:65:8b:98:31:17:a0:0c:ff:1a:7f:5e:
                    96:e0:e1:18:a5:b1:9d:30:8e:59:82:82:84:c9:65:
                    2b:b6:db:71:64:8b:ab:2e:f9:35:f6:46:73:4c:bf:
                    d8:20:63:e8:7d:da:8e:d7:fb:b5:3a:72:61:62:8f:
                    dc:1b:53:d5:6e:ba:41:df:ef:82:f1:38:09:5d:ac:
                    91:13:93:98:1d:e6:b7:2b:3a:4e:a1:16:43:98:b2:
                    74:f2:da:2d:c4:27:13:ce:0e:0c:21:38:0d:c6:54:
                    f5:8f:0e:45:a8:3e:a2:34:ad:7e:65:ce:a0:7a:16:
                    df:61:8f:0c:04:13:4c:5b:be:b3:1f:cf:d4:8d:ad:
                    52:51:76:90:bd:fb:eb:d6:a7:14:c4:5c:10:4a:88:
                    80:d7:bb:71:4b:7e:ed:b5:5c:d9:15:87:8d:e5:6c:
                    4b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2B:EF:3A:D9:CC:DA:25:AB:63:93:B7:55:45:3F:10:60:CD:98:92
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:26:0c:73:52:f1:f9:6b:46:b2:b1:d1:0b:e2:9b:c1:04:
         1c:47:4b:a1:65:76:c1:a4:f7:f3:c6:c0:83:3c:56:78:21:17:
         e3:95:80:e1:2a:46:0c:f4:9d:a9:f0:27:a7:c3:69:eb:98:b0:
         38:62:77:7b:a6:9f:a5:39:52:78:e6:57:6b:f1:d7:db:fa:4d:
         ff:c9:64:45:aa:0c:de:5a:51:dc:3c:c5:5e:68:f8:ec:ab:5c:
         bb:f0:9f:b5:d9:23:07:33:7a:dd:b2:41:a3:11:ca:91:08:9a:
         eb:66:d4:95:5a:40:e5:a3:b2:cc:84:a2:56:81:28:a8:92:f5:
         ca:50:9c:90:84:41:5b:5c:37:d0:d2:84:93:ae:ae:e2:98:d6:
         5c:3b:fa:d7:6f:50:c0:0b:fd:cc:bb:69:73:d3:f0:06:07:f0:
         d0:b7:9e:e4:d7:e4:4f:d5:64:16:23:61:e6:46:81:42:3b:7e:
         eb:18:d2:97:d9:74:8f:b4:ab:7d:cd:97:50:a8:48:f9:57:48:
         6b:2a:fb:eb:f4:82:2b:8b:82:62:0c:b4:6f:f6:97:7a:0c:30:
         e1:29:b8:74:27:2b:73:ed:2a:ed:00:a8:98:42:8f:aa:a3:5a:
         0d:0c:fe:e7:c4:6c:b8:bc:ea:f2:f2:e7:7e:b8:51:23:a0:f7:
         1e:23:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:45 2026 by rpki-client