Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          r38V31YgCbs68T3aLM8wvP0oApaa9CoRe6xYSHC4tjU=
Subject key identifier:   74:1D:89:56:1D:91:1C:08:E2:0A:39:68:6A:97:7E:99:12:F2:17:4A
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       019FA90733F00D4F88866AE6CC47C071C5E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          1058
Signing time:             Tue 28 Jul 2026 14:00:49 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:49 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:49 +0000
Files and hashes:         1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=)
                          2: 4BgA-ABWSArgHx-ygbshx6JYrTY.roa (hash: bvv8kgY0ZVnm7qvnIwLD4R0xE7EezfYihSBw0uGEums=)
                          3: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=)
                          4: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=)
                          5: D9IIvAjUBeonrUuAtA9-LP_kfxg.roa (hash: 2T3Qvn8J8uK4lzJw95imN9pofbDQi2ngOHPWAgyI0Cg=)
                          6: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=)
                          7: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=)
                          8: Hhx08W6yxhRbHfCLKYdHm13ozS0.roa (hash: jwpzK3qtdotyMub/ILdIHzVfvJLpMrtxw3Hz/Tq6IYI=)
                          9: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: lMLYsCAMtII6S5791Ng6JnRSYRFSnE3tzc/CyjE468I=)
                          10: JDgMbtzm9TbQ4eWyo_rVJwWaWOY.roa (hash: v4xwFMtuHO8ayfqB5VQBenyDwKgKi5kZP3vMs+HZh4g=)
                          11: KluRcqzajt5NKKtsXPOxDda7akI.roa (hash: zGTQ13vN7lvbq3YvrqjjFmI7sRLKlEZTIN2XpYjnbW4=)
                          12: MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa (hash: pPpAjQ9/faa4QoYKDH51+jkG77bH512fpifEsnfi9LY=)
                          13: NcTDxTnFozsxKavcnlSTx2-OZis.roa (hash: QbtIW3hggcu4VmQX0Ylc1F26SWBEg6eUZGBBTmAdKG4=)
                          14: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=)
                          15: S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa (hash: jo9uW/EfFrv7avMQwhlQaDKV2tu9K+V96NtiixNAWjo=)
                          16: V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa (hash: 2mcsTNBbXliMo6Xfl43UwD6c9ZLoqqEr0U1Zz/8r+ug=)
                          17: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=)
                          18: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=)
                          19: acgv97YNnbbDPyBz44KpDWdpOkQ.roa (hash: KyAE8oZNrznG/SETxn7e5ARXLp9M42t4EPdCRxa4IjY=)
                          20: c3qNueiGWk4Qn-ykN_QlCOGM37o.roa (hash: wnA6SEQc4U9MNJjFtGtJmJio/YAYcn579hZtE+0vJ/k=)
                          21: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=)
                          22: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=)
                          23: fXJCkrL2-H_ZQ4Zt87YfhhhmOQs.roa (hash: 3C8IOTwEDVBKwzZYj72/2wGHHAb/m3FVKoIuZt999yc=)
                          24: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=)
                          25: ioRtNTdinpYrcVf_jzCS5BV23i0.roa (hash: Ka+iUbIs4jDL+lzQs7AOTwqacQczetgn601hHQNpQS0=)
                          26: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (hash: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0=)
                          27: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=)
                          28: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=)
                          29: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=)
                          30: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:33:f0:0d:4f:88:86:6a:e6:cc:47:c0:71:c5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: Jul 28 14:00:49 2026 GMT
            Not After : Jul 29 14:00:49 2026 GMT
        Subject: CN=741d89561d911c08e20a39686a977e9912f2174a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:17:8b:5a:f3:16:6a:69:df:e1:5a:c8:ee:e9:
                    29:8d:c4:da:53:39:5c:44:63:3b:05:62:d8:88:a3:
                    f0:ae:f6:03:ff:25:05:4c:66:f0:35:ed:a2:a0:70:
                    3b:de:37:c0:8d:c8:7c:1e:74:06:9b:14:67:8f:f6:
                    2b:e0:39:04:9b:9b:55:a2:0d:65:87:85:ab:a6:c5:
                    c3:be:c7:e3:0d:d6:86:79:99:6b:1d:45:5c:b2:9b:
                    11:9c:8d:be:29:49:b2:00:6a:6d:18:e5:7e:cb:45:
                    6b:31:1f:cf:ed:14:9d:36:26:75:73:ab:1f:9f:61:
                    79:5d:00:6a:ca:b4:82:4a:27:f0:ef:fc:40:6e:55:
                    19:c8:d2:e4:fe:ff:9d:b4:df:e8:46:5c:6a:b9:19:
                    04:e8:06:02:63:a6:7c:e5:b2:17:17:bc:d3:13:82:
                    de:62:96:93:fc:5e:2b:16:45:59:30:d9:8b:40:03:
                    e8:c9:6b:7e:75:0d:16:4d:48:be:45:c5:2b:11:f2:
                    72:ce:0d:61:a3:60:01:12:73:fc:37:d3:20:72:16:
                    d2:da:97:ea:43:be:e8:40:16:bc:74:94:96:9c:0b:
                    48:69:14:ca:f1:49:df:e2:37:02:8a:bf:ee:98:84:
                    65:94:8b:62:c3:54:9d:bd:c4:07:8c:c2:10:8c:bc:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1D:89:56:1D:91:1C:08:E2:0A:39:68:6A:97:7E:99:12:F2:17:4A
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:74:92:b7:38:ca:3b:f6:23:33:ac:12:3b:bb:2b:b8:b9:bb:
         82:87:23:85:36:a7:b9:64:9c:b8:b1:e6:22:6f:b2:ca:2d:4c:
         da:2f:aa:2f:23:b0:c9:36:20:25:7b:1f:80:cf:36:86:fb:ce:
         46:14:86:50:f2:6d:59:24:0f:30:71:ca:aa:f9:58:74:7a:e7:
         4d:90:94:40:6c:5f:85:d4:27:fd:f3:51:9a:ce:8f:f5:2e:09:
         d5:e8:47:6d:86:e9:8c:92:53:2b:16:31:2c:11:80:02:79:92:
         8b:ea:ae:87:a3:c8:ad:45:9c:0e:16:77:bb:2a:0a:5f:7b:3e:
         e2:d7:3a:7b:b1:14:f4:1b:41:b1:db:aa:e4:00:99:4d:0f:0c:
         d0:8d:e3:9e:f3:07:b9:79:c2:b1:17:87:47:d4:af:56:bc:bc:
         e7:5b:e3:48:e5:3a:74:b7:cb:f2:9b:3c:d5:d4:09:da:02:61:
         cc:d4:43:6a:e9:04:fa:98:6e:ba:9c:2e:f6:65:48:e1:b2:ab:
         8a:66:97:86:4b:44:63:07:92:9c:91:08:c2:af:4e:0b:cd:40:
         4b:46:61:ef:cb:d9:41:03:ab:40:79:ce:bc:28:4a:2f:5f:17:
         81:ff:41:b9:fd:26:ad:4b:0c:a1:4b:a1:16:ad:19:f7:58:d0:
         91:25:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:29 2026 by rpki-client