Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File:                     hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier:          MwUyy+pqG3ekGyRlqVq8wTOFVfDYvBF0mH9lYrGw4lo=
Subject key identifier:   FE:2E:B9:0C:94:66:24:B9:DE:96:89:B9:11:D4:2F:27:44:2A:56:6C
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer:       /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial:       019FACAD614B8131137A29BA1C8C6AB39572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number:          18B7
Signing time:             Wed 29 Jul 2026 07:01:11 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:11 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:11 +0000
Files and hashes:         1: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (hash: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0=)
                          2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: 71C19PjR9m5XPPPxcD0o6tLsdv/cT+TOv6gYttQR5ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:61:4b:81:31:13:7a:29:ba:1c:8c:6a:b3:95:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
        Validity
            Not Before: Jul 29 07:01:11 2026 GMT
            Not After : Jul 30 07:01:11 2026 GMT
        Subject: CN=fe2eb90c946624b9de9689b911d42f27442a566c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:14:46:a9:80:f6:d1:c6:51:14:03:1b:55:
                    56:8b:d4:73:6d:41:cd:7c:19:f2:1b:1b:3a:cc:6d:
                    2d:20:12:3c:e9:26:b7:63:5b:d1:92:61:2e:fe:12:
                    70:8e:d2:4c:be:56:fd:bc:c0:14:a5:a1:84:a9:b3:
                    24:aa:65:ed:e1:72:6e:d8:eb:a2:94:14:e1:5c:0a:
                    f2:7f:dd:73:a8:b8:f6:86:bc:1c:87:11:01:f5:a0:
                    a9:6b:b8:d5:07:60:cd:44:52:ae:8f:ea:8d:74:04:
                    fd:af:52:f5:28:f0:20:11:d9:ed:dc:56:32:81:40:
                    5a:68:bd:cb:fb:ef:6c:f0:6d:47:55:59:a1:fb:f8:
                    08:b5:cc:d0:d4:34:98:b5:0b:7b:90:e6:b9:79:e7:
                    94:9f:9b:66:91:1f:18:49:9d:9c:a8:92:5b:db:1c:
                    59:c4:55:7f:02:83:0e:6f:61:20:96:c5:5d:2f:e3:
                    9b:01:df:f3:46:4d:04:40:fd:ef:5f:72:d4:e0:46:
                    8e:86:b6:fb:60:80:6e:e0:1b:e0:25:26:bf:47:fd:
                    17:1b:9c:8b:cb:af:32:93:3e:52:cd:16:dc:fc:dc:
                    fd:c7:f4:12:8b:56:6c:7b:bf:b9:d5:3b:c4:04:86:
                    1a:66:47:5f:8e:ec:77:5c:7a:ac:f6:64:84:db:27:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:B9:0C:94:66:24:B9:DE:96:89:B9:11:D4:2F:27:44:2A:56:6C
            X509v3 Authority Key Identifier:
                keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:93:eb:82:44:40:88:bd:07:61:c5:04:c0:ad:79:12:16:
         56:4e:4f:7e:1a:ae:3c:ab:e4:b6:71:c9:75:12:98:d9:6b:cf:
         d7:32:f1:87:62:1c:07:c5:60:87:53:6b:6f:fc:ae:d7:36:86:
         ab:02:e2:9f:f0:1f:47:63:79:ac:2a:1f:f8:ed:40:0e:6e:53:
         1f:8b:2a:2a:c5:77:52:fe:a4:39:c9:b6:6b:18:ea:33:6d:06:
         83:cb:c0:2d:12:82:59:77:db:f4:27:48:fc:29:82:b2:bd:74:
         f5:94:93:81:9c:84:7a:60:82:25:fe:1e:ee:e4:79:c7:5a:37:
         76:c3:9f:d8:42:43:ca:c5:5a:68:bd:20:c2:8d:03:27:9b:f1:
         fb:43:e9:3e:c5:50:b1:27:83:94:16:fe:d4:59:23:06:f3:a3:
         d8:14:77:d2:67:4a:cc:14:e7:8e:c2:3e:01:c7:51:62:04:2b:
         8e:37:06:57:78:23:7f:98:8d:4d:8c:56:da:0f:de:d7:f8:1f:
         6e:2d:7e:5d:74:6e:8f:02:63:81:69:6b:8c:2f:d0:33:ff:c9:
         39:94:9e:88:51:d4:08:95:cc:74:06:ee:e1:ba:21:c1:7a:2c:
         e7:7b:6d:18:94:32:7d:c9:3d:2a:35:05:b0:e9:68:f5:62:d0:
         78:af:2d:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srWFLgTETeim6HIxqs5VyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjJmNGE4OTM2NTkzY2RlYzZkYWQ3ZTJlY2YxYjc5YmY2
NWMwNWEwHhcNMjYwNzI5MDcwMTExWhcNMjYwNzMwMDcwMTExWjAzMTEwLwYDVQQD
EyhmZTJlYjkwYzk0NjYyNGI5ZGU5Njg5YjkxMWQ0MmYyNzQ0MmE1NjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PEURqmA9tHGURQDG1VWi9RzbUHN
fBnyGxs6zG0tIBI86Sa3Y1vRkmEu/hJwjtJMvlb9vMAUpaGEqbMkqmXt4XJu2Oui
lBThXAryf91zqLj2hrwchxEB9aCpa7jVB2DNRFKuj+qNdAT9r1L1KPAgEdnt3FYy
gUBaaL3L++9s8G1HVVmh+/gItczQ1DSYtQt7kOa5eeeUn5tmkR8YSZ2cqJJb2xxZ
xFV/AoMOb2EglsVdL+ObAd/zRk0EQP3vX3LU4EaOhrb7YIBu4BvgJSa/R/0XG5yL
y68ykz5SzRbc/Nz9x/QSi1Zse7+51TvEBIYaZkdfjux3XHqs9mSE2ye5pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4uuQyUZiS53paJuRHULydEKlZsMB8GA1UdIwQY
MBaAFIVi9KiTZZPN7G2tfi7PG3m/ZcBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODkt
N2UxNzk0NjYyOThjLzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODktN2UxNzk0NjYyOThj
LzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4qT64JE
QIi9B2HFBMCteRIWVk5PfhquPKvktnHJdRKY2WvP1zLxh2IcB8Vgh1Nrb/yu1zaG
qwLin/AfR2N5rCof+O1ADm5TH4sqKsV3Uv6kOcm2axjqM20Gg8vALRKCWXfb9CdI
/CmCsr109ZSTgZyEemCCJf4e7uR5x1o3dsOf2EJDysVaaL0gwo0DJ5vx+0PpPsVQ
sSeDlBb+1FkjBvOj2BR30mdKzBTnjsI+AcdRYgQrjjcGV3gjf5iNTYxW2g/e1/gf
bi1+XXRujwJjgWlrjC/QM//JOZSeiFHUCJXMdAbu4bohwXos53ttGJQyfck9KjUF
sOlo9WLQeK8tPg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:39 2026 by rpki-client