Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File:                     hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier:          8fBuAq7E8Nwrxz3K7rdWfdlF2UEaXj/ZfR88Nf8Mnic=
Subject key identifier:   A6:F8:CD:C2:A0:42:E1:E3:6B:C5:90:3D:61:E1:4C:A0:F1:50:45:CB
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer:       /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial:       019CAD22807856C8C20D9BF3EFF8F94469F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number:          1855
Signing time:             Mon 02 Mar 2026 06:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:45 +0000
Files and hashes:         1: heKnF0nPw3navL7mvVdrP7ZenfE.roa (hash: SN8nxNReThCLTC+u68FN/Bqg6og3YUjtGA8xvnnpO7A=)
                          2: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: eK4wnxXqdka+3DctFGdCZVjYKDzQs5DFlD9hEaLVZ5Y=)
                          3: o_t0N0oazoSoRUIX38zmHacjpmI.roa (hash: 5Xwms+xTtZNdTeon1Aug9x31utWCflJ+A+WQraSsVuU=)
                          4: yyMfD3yfi-5ZFDYYqCi8ooAB_tc.roa (hash: 7Ong5ksWxUUHrzJGplVQfng6ph0+MByZZx5BAhFJpLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:80:78:56:c8:c2:0d:9b:f3:ef:f8:f9:44:69:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
        Validity
            Not Before: Mar  2 06:00:45 2026 GMT
            Not After : Mar  3 06:00:45 2026 GMT
        Subject: CN=a6f8cdc2a042e1e36bc5903d61e14ca0f15045cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:e2:92:b8:e1:b8:40:ef:14:ad:ab:6c:42:
                    b4:32:51:1d:f4:64:36:69:0e:1d:79:2f:36:3c:07:
                    49:24:6a:1e:35:50:45:ff:bd:6d:a1:5c:fb:c0:cf:
                    93:41:6c:ab:8d:e7:16:70:9f:57:c4:3f:83:08:a9:
                    7b:d2:b6:c8:b1:80:e1:c9:09:25:92:53:98:1d:9c:
                    76:9a:d6:e0:91:cd:ab:d4:3a:5d:51:04:f1:c8:8b:
                    a4:06:ab:2d:13:37:d2:8b:e0:da:3f:12:d0:20:4b:
                    12:25:5f:5b:dd:31:10:66:57:41:b7:6a:28:1a:4a:
                    c5:92:29:54:f2:44:11:3d:37:07:f7:99:62:ff:8f:
                    e6:33:fa:9b:d2:98:bf:ea:55:f4:78:23:14:43:f2:
                    e9:f8:d4:22:6a:7d:e2:3e:bd:91:3d:a0:69:dc:a0:
                    76:6c:b7:cd:58:06:85:54:26:d5:ba:fe:b7:05:e8:
                    75:0d:67:b1:42:89:68:88:2d:60:f0:14:1d:11:35:
                    4c:23:13:e5:c7:a5:c8:22:1f:c4:3a:58:38:75:76:
                    4e:dc:40:8b:84:52:45:1b:f5:df:ad:13:e3:8b:81:
                    27:be:31:87:89:56:58:a6:ed:a1:c3:f4:a2:8b:00:
                    cb:d8:d8:6a:89:ab:c8:80:a7:6f:d4:9a:9d:43:d2:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F8:CD:C2:A0:42:E1:E3:6B:C5:90:3D:61:E1:4C:A0:F1:50:45:CB
            X509v3 Authority Key Identifier:
                keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:03:dc:42:3c:70:02:76:5f:7e:e1:7a:e0:1d:61:dd:53:8b:
         e2:0e:57:88:81:0a:f5:ab:e1:dc:c7:fe:85:58:8a:78:60:25:
         eb:a7:79:19:0e:95:43:82:ce:ca:7b:ad:83:87:c5:b7:16:70:
         ee:e9:a4:85:59:4b:37:33:a2:5f:ff:54:03:38:51:41:d8:17:
         20:32:ab:1a:51:7e:5e:fa:2c:7d:22:9f:b2:ea:fd:ed:db:c2:
         ab:53:28:b3:60:3b:6d:ec:4a:0b:bd:a8:37:3a:93:48:3d:fd:
         2e:92:ce:f6:25:9c:3e:13:af:2b:f3:10:5a:1e:2f:43:50:f0:
         34:32:84:92:04:ca:48:86:22:b2:bf:bc:fa:02:be:35:04:a2:
         60:31:81:cd:47:1b:ef:a2:da:cc:3f:37:72:29:3c:c6:98:4d:
         0e:9c:56:a5:bd:f5:7f:a6:91:e6:89:16:f5:39:3e:8a:98:57:
         94:97:69:32:6d:a3:75:f9:85:c5:cc:a3:33:dc:17:63:00:66:
         c2:19:e1:99:b4:2b:4b:ea:02:d1:27:fd:7a:f3:df:81:77:fc:
         ad:2e:c3:0b:2e:44:70:82:35:58:cf:e4:a0:0c:72:ca:62:b8:
         eb:b4:df:5b:98:bc:ca:54:fd:75:03:c3:e9:48:ea:0e:01:5e:
         e8:cc:74:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIoB4VsjCDZvz7/j5RGn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWUyMDFjNjVkNjU1ZWU5Y2ZlMjUxZjk1MWVhOTFiYmEx
NTQ1NjcwHhcNMjYwMzAyMDYwMDQ1WhcNMjYwMzAzMDYwMDQ1WjAzMTEwLwYDVQQD
EyhhNmY4Y2RjMmEwNDJlMWUzNmJjNTkwM2Q2MWUxNGNhMGYxNTA0NWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG3ikrjhuEDvFK2rbEK0MlEd9GQ2
aQ4deS82PAdJJGoeNVBF/71toVz7wM+TQWyrjecWcJ9XxD+DCKl70rbIsYDhyQkl
klOYHZx2mtbgkc2r1DpdUQTxyIukBqstEzfSi+DaPxLQIEsSJV9b3TEQZldBt2oo
GkrFkilU8kQRPTcH95li/4/mM/qb0pi/6lX0eCMUQ/Lp+NQian3iPr2RPaBp3KB2
bLfNWAaFVCbVuv63Beh1DWexQoloiC1g8BQdETVMIxPlx6XIIh/EOlg4dXZO3ECL
hFJFG/XfrRPji4EnvjGHiVZYpu2hw/SiiwDL2NhqiavIgKdv1JqdQ9LwxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb4zcKgQuHja8WQPWHhTKDxUEXLMB8GA1UdIwQY
MBaAFIbuIBxl1lXunP4lH5UeqRu6FUVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xM2E3MzUtM2IxYy00ZDljLThjZmEt
YThjYThlNGM3ZTc3LzEvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xM2E3MzUtM2IxYy00ZDljLThjZmEtYThjYThlNGM3ZTc3
LzEvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAPcQjxw
AnZffuF64B1h3VOL4g5XiIEK9avh3Mf+hViKeGAl66d5GQ6VQ4LOynutg4fFtxZw
7umkhVlLNzOiX/9UAzhRQdgXIDKrGlF+XvosfSKfsur97dvCq1Mos2A7bexKC72o
NzqTSD39LpLO9iWcPhOvK/MQWh4vQ1DwNDKEkgTKSIYisr+8+gK+NQSiYDGBzUcb
76LazD83cik8xphNDpxWpb31f6aR5okW9Tk+iphXlJdpMm2jdfmFxcyjM9wXYwBm
whnhmbQrS+oC0Sf9evPfgXf8rS7DCy5EcII1WM/koAxyymK467TfW5i8ylT9dQPD
6UjqDgFe6Mx0Kw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:47 2026 by rpki-client