Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File:                     HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier:          9ppiqXV+mdg9Iw+Lxyp1WIH7bD4dVihVuy5MKHOJS1U=
Subject key identifier:   AE:53:9F:5D:F0:D8:E5:1B:D6:F4:67:21:D0:4D:BE:17:12:A4:7E:86
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer:       /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial:       019D9BBEBD82FBFCCA6596DAB9E438315A25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number:          18CB
Signing time:             Fri 17 Apr 2026 14:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:01 +0000
Files and hashes:         1: 6dv_L1DDphVKsaPUbNVgrio2mco.roa (hash: u/UqpDhbgxCW0Bpgwy3j9fMc8sf/q9V3Bh/vCaaYoAQ=)
                          2: FLGDI-HNGLyavIFHPkaqz0x2dyA.roa (hash: p43U03mDQXL/wNzoMe4V67qrIM7B3GFIc1QcZlkxGyI=)
                          3: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: sI3pLB6Ph0OO5jSuLR30/ipEipVvmnjWRj810PoIqgw=)
                          4: SNT8hJvMVBfYKWPwF8E6mRsCbIk.roa (hash: fIUVYcxClsJOGEyEKMH1vBZ+eD6MkSZpeWY8XXK6vEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:bd:82:fb:fc:ca:65:96:da:b9:e4:38:31:5a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
        Validity
            Not Before: Apr 17 14:01:01 2026 GMT
            Not After : Apr 18 14:01:01 2026 GMT
        Subject: CN=ae539f5df0d8e51bd6f46721d04dbe1712a47e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:38:8a:26:0d:a5:18:de:bd:5d:04:69:44:
                    56:79:43:d9:fd:bc:dd:17:6b:bc:49:8a:86:0d:df:
                    ec:a9:7d:50:c4:f8:30:4e:c0:d8:1d:e8:26:79:e2:
                    20:97:cc:6c:05:b0:3e:a4:d7:96:07:33:84:14:54:
                    1c:ca:23:4c:8b:02:b9:bf:98:4c:a8:32:ec:65:d2:
                    9e:5e:a7:b8:6c:ea:54:6d:bc:3f:c1:61:b9:f0:99:
                    af:43:19:83:e6:e8:a8:a2:a8:6e:14:98:18:b0:27:
                    b1:bb:d4:3e:cc:e1:0e:75:26:5e:d1:51:a5:3c:16:
                    c2:43:98:4f:9b:0f:ee:4c:be:30:23:b8:a8:c1:6c:
                    20:f0:b1:e2:1a:8d:72:8a:8b:30:2b:26:46:45:c9:
                    04:a2:3b:55:da:24:5f:ad:31:b3:ff:2f:3a:1f:bd:
                    f2:d3:a3:9a:79:a1:0e:1c:b3:0d:53:8e:d0:ab:65:
                    42:11:77:03:68:c8:04:0b:1e:e8:e4:cb:c2:17:7c:
                    5f:fd:6c:43:bf:f7:09:cd:a6:f3:be:25:8b:24:2a:
                    d2:b5:e8:dc:22:3e:57:8d:10:13:d3:e0:48:43:4f:
                    26:5d:3e:21:a6:94:ec:ec:18:e2:e6:ea:39:9c:de:
                    22:35:6a:6e:6a:01:90:a8:6e:c1:33:ee:93:d0:74:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:53:9F:5D:F0:D8:E5:1B:D6:F4:67:21:D0:4D:BE:17:12:A4:7E:86
            X509v3 Authority Key Identifier:
                keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:58:16:24:c7:e4:30:3f:23:2e:99:47:8c:8d:bc:8c:ef:ac:
         b7:2d:b3:21:55:c5:ab:f0:d4:c1:ce:b5:cb:75:3f:df:da:07:
         58:9c:e6:46:a3:90:b1:2f:7c:fa:33:fe:8d:ea:a6:17:97:6b:
         52:e6:58:e0:01:0e:82:50:31:3c:45:15:7d:9a:9e:40:7f:7c:
         bf:af:e5:78:03:57:fc:43:71:61:2f:fa:38:60:ed:32:00:21:
         a5:0f:30:b3:74:72:d9:8f:b0:51:e2:dc:47:f3:c2:6c:2f:d5:
         e0:3e:c8:9d:97:d3:2f:d2:c0:65:68:fd:5f:37:c9:ad:0a:49:
         16:0b:29:69:be:63:b7:ab:1b:af:a6:8e:61:9c:11:88:cf:66:
         1d:fc:c8:30:e6:91:aa:53:27:18:11:27:ed:44:a0:97:db:21:
         58:95:9a:f3:4f:0b:96:d9:69:6a:23:13:eb:33:47:7b:ab:88:
         30:0c:b6:2d:e4:cf:65:d2:ae:4a:3a:fc:9f:f1:32:72:66:61:
         50:4e:be:95:8c:88:b3:e7:dc:bf:dd:19:3d:54:44:0d:5f:67:
         06:14:b3:2f:9e:82:a5:59:1a:17:49:18:57:76:c3:8f:ee:e5:
         33:fd:fb:27:03:85:49:f4:0c:62:ea:28:ce:29:e3:41:fa:ce:
         82:7d:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:27 2026 by rpki-client