Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
File:                     hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json)
Hash identifier:          CfB0YYPtifNHIUNXgH+HoD/2tUTjghNpDSVo5ntefuo=
Subject key identifier:   89:A2:B9:99:AB:FD:6F:A1:F5:C3:15:AE:D4:2B:FA:D6:4C:35:B6:D1
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Certificate issuer:       /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial:       019EC17FB3E66F7C14FCFE5B0AFA1BD1E265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
Manifest number:          0275
Signing time:             Sat 13 Jun 2026 15:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:32 +0000
Files and hashes:         1: 1-Y8ZSIpDFM4sXK4p1HRKcl9dDOw.asa (hash: Oj96MpLA4P0Ac/L1bMXhubjoukHbnjmhLTzZJluAmhw=)
                          2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: IQnb7nhRCUzpWWMdPScrsDQnsH3MKucvWUR9w9+MkEA=)
                          3: x6M-HnD_Dy6Y50GGO7utXD02Jmk.roa (hash: DI7kmxecqKBRg9yOJMuJfmm5rA4os5wGkXmUhGxBPtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:b3:e6:6f:7c:14:fc:fe:5b:0a:fa:1b:d1:e2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
        Validity
            Not Before: Jun 13 15:00:32 2026 GMT
            Not After : Jun 14 15:00:32 2026 GMT
        Subject: CN=89a2b999abfd6fa1f5c315aed42bfad64c35b6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:70:97:03:1b:1d:2b:39:54:de:a1:4f:a3:c6:
                    90:da:76:f5:84:f4:90:1c:4a:0f:1e:bb:26:5b:fb:
                    f1:02:5f:0f:5e:61:59:b0:92:f5:0a:af:e1:23:ac:
                    ed:b2:43:7e:bb:45:6d:e3:85:7f:e7:44:02:30:45:
                    4b:ce:39:ed:0c:31:2f:55:4f:0a:44:07:75:ef:94:
                    55:af:19:c1:32:1f:bc:b8:3a:29:e8:1c:8f:0f:fe:
                    9e:9a:28:9a:19:6a:0b:5c:9e:fb:11:c7:95:fa:9c:
                    81:ef:f7:84:d5:2a:73:87:38:e4:ab:58:d9:c5:51:
                    4d:2e:32:5e:00:3a:42:f7:22:6d:a2:17:04:0c:0b:
                    bf:3c:dd:38:92:fd:b9:a0:e0:78:4b:e7:bc:c2:89:
                    e6:00:33:fe:45:80:be:75:81:ef:dd:96:b5:f5:e9:
                    8a:a6:05:95:9d:4f:26:18:f6:8d:3e:8a:75:f8:9c:
                    4a:ab:ab:59:bc:a3:e0:2c:0b:ff:db:a6:33:2f:10:
                    ec:53:27:1a:12:c3:cc:16:d9:d0:b9:06:2d:85:c2:
                    fb:9a:10:ad:85:a8:31:53:a7:1e:54:ec:79:81:fa:
                    ab:06:03:19:82:c2:c9:59:df:60:fa:cd:ce:db:e1:
                    7a:e8:0f:c3:7d:9c:3f:b4:62:58:57:51:c4:4a:60:
                    80:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A2:B9:99:AB:FD:6F:A1:F5:C3:15:AE:D4:2B:FA:D6:4C:35:B6:D1
            X509v3 Authority Key Identifier:
                keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:3e:a4:f6:c2:bf:54:b5:98:19:1d:3c:fa:61:0f:e5:ab:
         9b:36:51:dd:6e:70:ea:01:cb:e8:f3:c4:fc:5b:b9:95:3b:88:
         a5:61:fb:4b:a8:a6:fe:9e:0b:30:46:4e:66:06:81:19:90:ba:
         1b:ed:89:b8:af:81:03:ff:ca:aa:3f:ba:ca:52:3e:f6:33:14:
         47:31:fb:09:e1:8c:e8:07:da:e2:1e:42:9d:96:a1:f0:86:8a:
         b6:f0:16:b0:e3:52:1c:32:e8:d3:63:bb:f1:d9:07:ef:ce:f8:
         5f:56:d8:9c:ba:05:3d:4b:39:a3:f9:ee:5c:e4:6f:99:c7:0e:
         c4:0a:44:2d:85:16:34:8a:c3:d2:f5:52:25:9e:5b:48:20:a1:
         9b:4c:0c:6f:f8:56:e2:30:16:8b:4b:86:04:73:6c:a9:a3:70:
         59:d7:f5:5e:cd:0d:55:82:a1:f7:be:b0:62:30:7c:a4:77:cd:
         54:f9:f4:7a:fe:b7:a7:cb:96:c3:b4:15:c9:ff:73:01:d3:b7:
         68:7d:42:0a:f5:dc:03:ec:a6:35:5b:02:4d:5f:4b:c7:90:f0:
         03:40:5d:f1:cb:fb:1f:6b:2c:b4:25:bb:82:85:fb:47:4e:3a:
         8f:ef:2e:91:77:db:8d:d6:68:85:d9:b4:27:e7:c2:dd:84:2f:
         46:aa:20:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:15:33 2026 by rpki-client