Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File:                     HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier:          m2padbBOXehCu2YnMVmh2wAibJTT57a/39LSKvaRj3o=
Subject key identifier:   80:24:86:5E:AB:F8:79:6C:C1:8A:8F:06:22:8F:19:B6:AC:88:08:B6
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer:       /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial:       019CAE359033692257A757979FC0031B562E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number:          1850
Signing time:             Mon 02 Mar 2026 11:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:11 +0000
Files and hashes:         1: 6dv_L1DDphVKsaPUbNVgrio2mco.roa (hash: u/UqpDhbgxCW0Bpgwy3j9fMc8sf/q9V3Bh/vCaaYoAQ=)
                          2: FLGDI-HNGLyavIFHPkaqz0x2dyA.roa (hash: p43U03mDQXL/wNzoMe4V67qrIM7B3GFIc1QcZlkxGyI=)
                          3: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: yt4BnRrhC9v8f9xsYAKM7CiY8/zSYl7+MfqxO7NAhrw=)
                          4: SNT8hJvMVBfYKWPwF8E6mRsCbIk.roa (hash: fIUVYcxClsJOGEyEKMH1vBZ+eD6MkSZpeWY8XXK6vEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:90:33:69:22:57:a7:57:97:9f:c0:03:1b:56:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
        Validity
            Not Before: Mar  2 11:01:11 2026 GMT
            Not After : Mar  3 11:01:11 2026 GMT
        Subject: CN=8024865eabf8796cc18a8f06228f19b6ac8808b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:02:13:0c:ae:b0:66:ac:07:c6:e0:d8:d8:
                    05:4c:b0:5a:5b:68:70:a0:16:4b:ea:fa:b7:2c:50:
                    74:47:0b:de:83:20:49:0a:34:28:a3:a1:5c:1f:2d:
                    93:56:cb:44:bd:fa:ee:cb:b7:27:84:79:ae:23:54:
                    4a:ea:8d:31:e9:33:ff:03:03:6f:59:60:95:69:5a:
                    f5:92:a9:29:5f:52:1a:75:ca:90:10:d0:a5:69:9b:
                    c7:de:c7:3d:04:1a:55:31:88:1c:c9:eb:9b:fd:c1:
                    c0:af:f7:5b:07:63:fa:e6:de:85:d8:cd:96:53:f5:
                    e7:73:c1:bb:0f:26:25:d8:53:9f:c8:7d:a6:7e:1b:
                    d0:c6:74:5d:4d:cc:63:2f:73:2b:91:b6:e6:ce:01:
                    6e:98:88:82:f4:96:c2:61:7b:ac:cb:42:d6:96:76:
                    75:36:38:45:3a:4b:26:a6:c8:a6:c6:6a:d8:d4:69:
                    33:67:18:c2:85:7d:f3:bc:9d:1c:66:92:50:48:c9:
                    4a:41:a3:ee:93:c6:f7:85:0d:68:06:31:f7:c5:ad:
                    c0:28:82:93:0c:7f:03:da:af:92:a3:c9:e3:ab:0f:
                    85:fc:8d:e1:cd:85:e9:cc:aa:ef:c4:46:6d:bf:d6:
                    b0:40:1a:87:b9:39:1b:3a:3e:16:1e:e5:0f:0f:a0:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:24:86:5E:AB:F8:79:6C:C1:8A:8F:06:22:8F:19:B6:AC:88:08:B6
            X509v3 Authority Key Identifier:
                keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:27:ad:f5:8e:af:41:45:6c:0e:67:c3:a5:e1:b1:e3:35:
         4e:37:7d:93:f8:2e:5d:db:6a:76:aa:56:b3:97:26:32:6e:78:
         e2:a5:5e:05:b6:4b:17:78:21:7d:0e:cb:f4:04:d5:53:ff:db:
         db:ab:de:03:a4:87:31:41:95:3d:11:4b:5d:09:00:c7:46:0c:
         5c:16:9c:ef:45:e5:57:f7:4c:f7:08:e3:47:74:fc:0b:06:95:
         54:a0:10:53:7d:ae:6e:9c:aa:d0:ed:20:13:7f:28:d7:d9:15:
         e8:d9:20:57:29:42:11:1a:82:28:b9:1e:1f:ab:2c:97:7c:e7:
         24:d2:3c:9a:9c:b3:d5:6d:6b:74:68:e2:4a:0d:a3:59:80:1f:
         dd:57:a0:1d:5d:bb:f2:45:e1:a1:81:9b:0e:c2:bb:7b:c4:28:
         26:99:3e:8e:0c:c2:e0:92:b3:f1:82:21:bb:ec:1e:b5:5d:1d:
         5c:ad:78:67:86:14:7e:2f:06:45:93:3c:b7:22:6a:75:6a:54:
         b2:bb:6c:c0:d3:5a:9b:9a:93:63:cd:85:a7:41:b8:15:0d:94:
         76:95:d3:8f:92:ec:0b:33:ca:73:aa:01:d4:3d:8a:e6:f5:4d:
         58:83:fc:e2:05:85:ff:24:92:76:40:28:ee:c0:bb:7e:78:66:
         fe:6f:1e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNZAzaSJXp1eXn8ADG1YuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz
ZmNkYzIwHhcNMjYwMzAyMTEwMTExWhcNMjYwMzAzMTEwMTExWjAzMTEwLwYDVQQD
Eyg4MDI0ODY1ZWFiZjg3OTZjYzE4YThmMDYyMjhmMTliNmFjODgwOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon0CEwyusGasB8bg2NgFTLBaW2hw
oBZL6vq3LFB0RwvegyBJCjQoo6FcHy2TVstEvfruy7cnhHmuI1RK6o0x6TP/AwNv
WWCVaVr1kqkpX1IadcqQENClaZvH3sc9BBpVMYgcyeub/cHAr/dbB2P65t6F2M2W
U/Xnc8G7DyYl2FOfyH2mfhvQxnRdTcxjL3MrkbbmzgFumIiC9JbCYXusy0LWlnZ1
NjhFOksmpsimxmrY1GkzZxjChX3zvJ0cZpJQSMlKQaPuk8b3hQ1oBjH3xa3AKIKT
DH8D2q+So8njqw+F/I3hzYXpzKrvxEZtv9awQBqHuTkbOj4WHuUPD6CeTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAkhl6r+HlswYqPBiKPGbasiAi2MB8GA1UdIwQY
MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt
OGZjMzczNzU3Njg0LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0
LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvgnrfWO
r0FFbA5nw6XhseM1Tjd9k/guXdtqdqpWs5cmMm544qVeBbZLF3ghfQ7L9ATVU//b
26veA6SHMUGVPRFLXQkAx0YMXBac70XlV/dM9wjjR3T8CwaVVKAQU32ubpyq0O0g
E38o19kV6NkgVylCERqCKLkeH6ssl3znJNI8mpyz1W1rdGjiSg2jWYAf3VegHV27
8kXhoYGbDsK7e8QoJpk+jgzC4JKz8YIhu+wetV0dXK14Z4YUfi8GRZM8tyJqdWpU
srtswNNam5qTY82Fp0G4FQ2UdpXTj5LsCzPKc6oB1D2K5vVNWIP84gWF/ySSdkAo
7sC7fnhm/m8eWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:27 2026 by rpki-client