Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          QKL8j/rvrrbm9ZYntJrFIjPPPdaFU7aiAmTtPOFD30s=
Subject key identifier:   95:7D:04:54:36:A7:3F:79:76:CE:A3:E2:DF:DD:C3:C4:E6:0C:E5:6F
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       019CAC46A9F36EDFA731BF3C9626A20AB0D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0E58
Signing time:             Mon 02 Mar 2026 02:00:37 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:37 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:37 +0000
Files and hashes:         1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=)
                          2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=)
                          3: 59xHeQcfN9MrHnGV12N9v9XcThY.roa (hash: Elta/uOtbtWIHwKEBTZUqwVybQem3iwKx6GhTo1J6rY=)
                          4: 6PnH-I0v0o7AGL6ifiGT8peyJ0k.roa (hash: tFSqOOC1Lg0SA1A3rDQWgBL5K2qm5q+QWpyCruQ1mJU=)
                          5: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=)
                          6: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=)
                          7: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=)
                          8: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=)
                          9: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=)
                          10: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=)
                          11: Le82C6pXnzW7IxXdGJLWL7-aOrU.roa (hash: QElIq8TT7E1GaFXwqMBgfp+5OsT2hRS1zDV8eeFQVmg=)
                          12: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=)
                          13: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=)
                          14: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=)
                          15: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=)
                          16: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=)
                          17: WThqBVbVDEY5Hhy8yzc2FIOqKaQ.roa (hash: IRJB4vL3WJmKrmN2uWCtCKuTvMKm8OG48njPdr9TRHU=)
                          18: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=)
                          19: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=)
                          20: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=)
                          21: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=)
                          22: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=)
                          23: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=)
                          24: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=)
                          25: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=)
                          26: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: +Sckhmj2PSYjIwtmbAAVv/9vQ1lx6UfKASUcvV26wRM=)
                          27: jCkE9hjop9AAI9KGHrAu9Oj7LNI.roa (hash: YqzUoI4bHyTW6BYWw7GMg/Wlqugt8gZRXRL0jSMxthQ=)
                          28: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=)
                          29: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=)
                          30: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=)
                          31: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=)
                          32: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=)
                          33: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=)
                          34: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=)
                          35: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=)
                          36: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=)
                          37: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=)
                          38: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=)
                          39: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:a9:f3:6e:df:a7:31:bf:3c:96:26:a2:0a:b0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Mar  2 02:00:37 2026 GMT
            Not After : Mar  3 02:00:37 2026 GMT
        Subject: CN=957d045436a73f7976cea3e2dfddc3c4e60ce56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:fa:76:34:e6:0c:27:df:e2:f8:9d:40:3f:
                    35:43:cf:4d:a9:da:7c:06:e4:17:dd:b7:e8:4a:04:
                    6f:ac:8c:12:28:ff:99:c3:8f:8e:d9:24:fc:59:9c:
                    d6:9a:0b:f7:93:5a:0c:0c:b2:99:c2:a7:2a:13:fc:
                    25:e7:28:63:58:0a:c5:65:9a:6b:f5:98:1d:18:21:
                    37:80:f0:b6:e8:52:f4:d2:ed:ca:d9:23:a9:1e:fc:
                    46:14:13:d7:1b:3d:bd:5a:5e:66:9a:a0:8d:db:21:
                    60:d5:da:4f:19:df:ee:c9:66:36:05:ef:94:21:1c:
                    b6:82:56:56:26:b3:32:52:97:2c:38:2a:d9:d9:8a:
                    c7:57:7f:55:15:92:02:0c:9e:4e:db:e4:cd:3c:62:
                    e0:a2:fe:da:7b:ac:6e:61:39:77:d0:6d:20:cb:17:
                    4d:71:46:1e:17:aa:ae:03:f5:ad:09:2a:72:96:4a:
                    f7:fd:9b:dd:f8:02:65:58:67:20:af:0f:31:13:47:
                    79:52:13:5c:63:23:5d:36:79:fa:a0:c3:dc:f3:4a:
                    7a:ea:e2:32:62:26:35:07:07:4a:88:77:98:43:3b:
                    9f:31:6b:4e:cf:62:ec:5a:61:20:bf:c2:4d:55:ea:
                    e8:2f:71:1e:74:6b:6e:49:a9:9b:eb:55:85:a4:1c:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7D:04:54:36:A7:3F:79:76:CE:A3:E2:DF:DD:C3:C4:E6:0C:E5:6F
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:6c:5d:d5:a0:28:fa:13:4b:3d:28:ff:58:ee:97:09:9e:
         6e:3c:d1:1f:27:2a:7d:42:1c:6f:5a:a6:ca:f4:58:90:c3:8a:
         54:ce:81:c8:e2:26:d3:a3:b1:14:85:02:a3:85:7f:c5:99:74:
         1c:30:65:aa:fc:20:d5:56:39:9d:a7:98:17:e2:8c:62:f4:60:
         d0:b4:79:c3:8e:6b:e4:af:47:73:bf:9e:c0:f4:1e:2f:f3:07:
         c6:74:0d:16:69:41:5b:99:44:f2:c1:08:0b:5a:dd:94:d9:d6:
         da:41:b7:33:f8:93:07:1a:15:90:30:04:a3:1e:1e:2b:e9:97:
         05:31:2d:96:f0:31:15:f9:4e:30:9a:2e:21:88:be:2d:1b:0a:
         fe:86:72:d5:9e:e1:32:df:5c:50:32:55:a1:cd:6e:29:fb:3b:
         2d:77:6a:75:64:aa:89:d3:0b:ec:6e:a8:0d:22:d2:8a:ef:22:
         19:e0:e9:4d:88:ce:29:92:ed:ef:e8:2c:f4:b5:64:a0:0e:ed:
         66:5e:af:59:0d:d8:d9:a4:d1:67:65:45:75:a4:2a:04:94:d5:
         c0:37:04:d9:4c:05:7a:54:26:d1:57:d5:19:ed:60:6c:24:48:
         32:1f:ee:d8:f8:1e:47:54:35:7f:fd:35:43:d2:7d:07:6d:58:
         1c:20:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----