Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
File:                     hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft (raw, json)
Hash identifier:          cjagnC0J7nY4Jlalt+wnp0tpXaujURpf2c2C2rf2vkU=
Subject key identifier:   89:67:4A:45:7D:0D:A7:9A:07:30:1B:A1:C7:16:66:24:24:3C:57:26
Authority key identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
Certificate issuer:       /CN=8618b054d20dfdc9c5493c52c86234774904be77
Certificate serial:       019CAD5A0C0848BC0914BEBF644E19691257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 07:01:25 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:25 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:25 +0000
Files and hashes:         1: hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl (hash: ECpchH/9YKruaDwohuYUKxDmSfH3o8sUO57qwl5r/tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:0c:08:48:bc:09:14:be:bf:64:4e:19:69:12:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8618b054d20dfdc9c5493c52c86234774904be77
        Validity
            Not Before: Mar  2 07:01:25 2026 GMT
            Not After : Mar  3 07:01:25 2026 GMT
        Subject: CN=89674a457d0da79a07301ba1c7166624243c5726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:2c:f7:9a:0b:eb:fd:1c:db:03:a7:4d:13:
                    d4:0a:88:9d:ee:32:c0:4e:e6:3c:6f:bb:f4:14:12:
                    35:1a:7a:0b:b6:a4:64:98:00:89:ba:4a:ae:70:8c:
                    0f:bb:91:81:af:d1:2b:9a:a8:90:6d:0c:5e:d4:50:
                    22:f8:f6:57:91:3e:d7:2e:88:f5:04:54:60:14:f3:
                    0a:07:f4:68:53:a2:b9:b7:9a:98:be:95:72:24:d9:
                    da:63:ff:33:b2:92:d3:39:f0:ef:18:26:9a:cf:02:
                    26:e1:70:fc:80:e9:c3:95:5d:87:cc:6e:4e:61:c3:
                    6c:1d:2e:87:de:98:90:1f:b5:21:7e:ef:47:3b:49:
                    98:d0:7e:87:d9:7f:e6:33:1c:4e:23:29:f9:45:01:
                    12:aa:d0:9f:80:0a:51:46:38:d9:67:56:67:32:30:
                    01:95:d1:94:6e:de:1a:3d:bf:73:b1:2b:52:a3:fd:
                    ab:da:ab:fb:dd:9e:a3:64:5e:2f:ac:c8:77:f6:33:
                    85:b4:3f:f0:6c:82:e3:21:97:fa:0d:7f:80:b5:5b:
                    63:e9:f3:c5:a2:7f:ee:11:be:4b:ed:25:f9:97:8b:
                    eb:26:66:a6:46:3f:16:60:44:ae:00:43:26:8c:6a:
                    2c:bf:4e:e0:d0:94:35:47:6f:d8:dd:71:8f:58:75:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:67:4A:45:7D:0D:A7:9A:07:30:1B:A1:C7:16:66:24:24:3C:57:26
            X509v3 Authority Key Identifier:
                keyid:86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a8:54:12:78:bb:7c:85:f0:3d:06:42:05:9f:6a:a0:9a:5f:
         5c:ff:49:72:82:ac:b2:2f:3a:b5:42:06:fb:1f:51:49:30:41:
         6c:41:28:e0:e7:3d:19:c6:42:bf:cc:a6:36:eb:b0:b2:d1:6d:
         75:1f:be:bf:4a:1a:f4:70:b5:b0:1f:da:00:9e:8a:10:90:02:
         28:eb:46:0c:e9:96:93:8b:ee:8c:15:0a:d6:39:8f:3c:b1:4d:
         ce:ba:3a:01:e1:d7:09:38:9c:f2:a9:8d:64:a8:85:51:98:32:
         98:26:4d:ed:4e:97:bc:01:c7:fc:79:85:4a:29:d8:b3:99:05:
         72:ae:a9:80:5b:23:69:38:90:85:a7:c0:09:29:5b:e9:2e:6b:
         b6:ea:39:33:1d:aa:34:a9:74:14:f8:70:14:b3:10:37:5a:20:
         62:ab:f5:59:c5:2f:be:77:6a:3e:e0:c7:6a:4a:7f:93:3e:31:
         22:6f:c7:37:e1:ba:3d:07:05:a8:80:97:bd:43:4c:5b:99:2d:
         2b:54:c8:82:53:9a:a1:41:a1:9f:c7:b4:80:7d:6e:a3:87:89:
         1a:6d:e1:11:c1:1e:91:bd:fb:ce:ac:2f:09:b7:bd:98:a6:f5:
         84:47:c8:1e:0f:67:d2:b5:07:ed:e1:e0:32:9b:eb:5e:83:8a:
         3f:09:89:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWgwISLwJFL6/ZE4ZaRJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MThiMDU0ZDIwZGZkYzljNTQ5M2M1MmM4NjIzNDc3NDkw
NGJlNzcwHhcNMjYwMzAyMDcwMTI1WhcNMjYwMzAzMDcwMTI1WjAzMTEwLwYDVQQD
Eyg4OTY3NGE0NTdkMGRhNzlhMDczMDFiYTFjNzE2NjYyNDI0M2M1NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyIs95oL6/0c2wOnTRPUCoid7jLA
TuY8b7v0FBI1GnoLtqRkmACJukqucIwPu5GBr9ErmqiQbQxe1FAi+PZXkT7XLoj1
BFRgFPMKB/RoU6K5t5qYvpVyJNnaY/8zspLTOfDvGCaazwIm4XD8gOnDlV2HzG5O
YcNsHS6H3piQH7Uhfu9HO0mY0H6H2X/mMxxOIyn5RQESqtCfgApRRjjZZ1ZnMjAB
ldGUbt4aPb9zsStSo/2r2qv73Z6jZF4vrMh39jOFtD/wbILjIZf6DX+AtVtj6fPF
on/uEb5L7SX5l4vrJmamRj8WYESuAEMmjGosv07g0JQ1R2/Y3XGPWHUdGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlnSkV9DaeaBzAboccWZiQkPFcmMB8GA1UdIwQY
MBaAFIYYsFTSDf3JxUk8UshiNHdJBL53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mN2YxN2MtYzI3ZC00MDhmLTk5YzEt
YzQ3MzZjYTVjMjVhLzEvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mN2YxN2MtYzI3ZC00MDhmLTk5YzEtYzQ3MzZjYTVjMjVh
LzEvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6hUEni7
fIXwPQZCBZ9qoJpfXP9JcoKssi86tUIG+x9RSTBBbEEo4Oc9GcZCv8ymNuuwstFt
dR++v0oa9HC1sB/aAJ6KEJACKOtGDOmWk4vujBUK1jmPPLFNzro6AeHXCTic8qmN
ZKiFUZgymCZN7U6XvAHH/HmFSinYs5kFcq6pgFsjaTiQhafACSlb6S5rtuo5Mx2q
NKl0FPhwFLMQN1ogYqv1WcUvvndqPuDHakp/kz4xIm/HN+G6PQcFqICXvUNMW5kt
K1TIglOaoUGhn8e0gH1uo4eJGm3hEcEekb37zqwvCbe9mKb1hEfIHg9n0rUH7eHg
MpvrXoOKPwmJUg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:48 2026 by rpki-client