Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File:                     HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier:          7tuB1T4Zo0FEM7zL8ShsI5k6W5nLbYea16341kOWMd8=
Subject key identifier:   AF:8E:BB:56:63:DB:9D:5A:5E:BF:E5:C9:3C:21:7B:0F:89:D4:17:DA
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer:       /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial:       019D9818CA1216EAE6CDBD27D9CA584ECEFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number:          18C6
Signing time:             Thu 16 Apr 2026 21:00:54 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:54 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:54 +0000
Files and hashes:         1: 0MNL0uKxne1mAOLvHp-kx9a8Fdo.roa (hash: pIY3J3TKdJieQx/4M129VemTVQ361aPzoM039AQ5uwg=)
                          2: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: ECdrs3qR+CD49VZVgIrKi+cNalrXKrefvVBLsbcGfBI=)
                          3: kEw9rNT7b4WnmBTnJkhnSvQpmJU.roa (hash: 8ygbL45xfX44BSp7tVTrAniW2EqVVMi7g3VOHgdtiPg=)
                          4: p1SBAES1_gf6qDKrzWJOUPLiAnA.roa (hash: H/UDNhAVh0s/O2Wme8wDfM0n2+DjkR5j821NKKTliTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:ca:12:16:ea:e6:cd:bd:27:d9:ca:58:4e:ce:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
        Validity
            Not Before: Apr 16 21:00:54 2026 GMT
            Not After : Apr 17 21:00:54 2026 GMT
        Subject: CN=af8ebb5663db9d5a5ebfe5c93c217b0f89d417da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:44:27:2b:61:e6:cd:52:d9:5a:37:8f:a2:
                    31:79:0f:72:12:87:e6:ea:0b:2d:f1:60:77:db:c0:
                    6c:3c:59:0f:32:cc:90:ab:72:42:f7:53:5e:c3:90:
                    46:d7:15:f4:40:de:61:ee:a7:21:8f:94:fc:00:93:
                    d2:78:4a:ac:ed:38:54:a2:4c:ff:a5:17:5d:a2:1d:
                    ac:96:21:d5:4b:9f:17:83:0a:61:e7:74:d1:11:19:
                    26:96:29:f4:1a:42:73:ea:cf:46:ca:0c:69:f2:d0:
                    99:80:c6:be:9a:0c:1b:d5:17:b0:06:30:3f:3a:ce:
                    c1:c3:6f:28:c8:f1:d2:12:1f:bc:2a:30:70:d4:68:
                    f6:6b:b9:13:97:7b:d2:be:4f:12:06:67:58:60:66:
                    bc:ef:65:4a:c8:51:ba:a4:17:f2:73:66:5c:5f:04:
                    e4:a6:2a:1d:7c:d9:77:6a:99:5d:22:96:dd:77:90:
                    18:bd:a6:32:c3:bc:e0:0a:4a:5e:5c:f9:c0:71:0c:
                    a0:09:c5:fc:30:a8:15:9f:42:29:18:7b:8b:d5:08:
                    df:01:ae:8f:e6:a9:5d:be:28:b9:7b:8b:0a:66:52:
                    14:ae:32:8b:18:cf:7f:91:e4:e5:02:c8:9d:af:1d:
                    a2:40:7d:c3:55:dc:0f:bf:de:bc:e7:f8:0b:f4:8a:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8E:BB:56:63:DB:9D:5A:5E:BF:E5:C9:3C:21:7B:0F:89:D4:17:DA
            X509v3 Authority Key Identifier:
                keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:10:75:23:e2:3f:6b:93:60:91:60:72:31:51:82:92:92:
         91:88:4c:8a:c9:13:b7:13:a5:81:db:44:1c:83:cb:8f:1f:0c:
         24:50:f4:12:8e:53:e2:b3:62:d8:6a:05:27:60:e6:d2:45:8b:
         8e:b8:98:29:c6:3c:99:1d:05:54:7f:6d:60:49:df:8b:e2:54:
         c8:2e:23:62:05:74:8d:90:36:70:e6:0a:a9:e0:27:de:de:01:
         f2:78:f3:f1:0c:8b:3a:4a:0d:63:96:73:c7:47:3a:8d:58:be:
         ef:14:01:7c:59:31:d4:74:24:a4:14:4b:ff:55:56:11:68:58:
         df:d1:dc:56:c4:54:75:62:5f:c0:02:fd:cf:f4:7c:26:6b:ca:
         9d:29:8c:6d:e3:5a:42:e7:8a:3e:9f:30:7c:c5:39:a6:ea:82:
         4b:f6:c5:41:0f:84:f9:c7:ac:e5:62:cb:be:83:2b:0d:70:6e:
         97:ac:c4:69:ed:f9:1f:57:87:5a:80:31:94:9d:7a:bf:e0:be:
         2f:b3:f1:64:98:21:f4:a7:3e:55:c5:d7:0e:86:cd:93:dc:2d:
         49:c7:22:92:94:c9:9a:6c:ad:fb:17:a6:58:13:0a:a4:5c:61:
         97:6b:57:2a:3d:c4:f1:9e:75:3f:11:35:62:e7:ad:ce:79:4e:
         cc:be:7f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGMoSFurmzb0n2cpYTs77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWEyZjA4M2Y0NzFkZmI5NTA3YjRjOTczY2I1YzNhY2Q0
OTc1OWQwHhcNMjYwNDE2MjEwMDU0WhcNMjYwNDE3MjEwMDU0WjAzMTEwLwYDVQQD
EyhhZjhlYmI1NjYzZGI5ZDVhNWViZmU1YzkzYzIxN2IwZjg5ZDQxN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAFEJyth5s1S2Vo3j6IxeQ9yEofm
6gst8WB328BsPFkPMsyQq3JC91New5BG1xX0QN5h7qchj5T8AJPSeEqs7ThUokz/
pRddoh2sliHVS58Xgwph53TRERkmlin0GkJz6s9Gygxp8tCZgMa+mgwb1RewBjA/
Os7Bw28oyPHSEh+8KjBw1Gj2a7kTl3vSvk8SBmdYYGa872VKyFG6pBfyc2ZcXwTk
piodfNl3apldIpbdd5AYvaYyw7zgCkpeXPnAcQygCcX8MKgVn0IpGHuL1QjfAa6P
5qldvii5e4sKZlIUrjKLGM9/keTlAsidrx2iQH3DVdwPv9685/gL9Ip5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+Ou1Zj251aXr/lyTwhew+J1BfaMB8GA1UdIwQY
MBaAFB6aLwg/Rx37lQe0yXPLXDrNSXWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYt
MjVkNmU4NjEzZGM0LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYtMjVkNmU4NjEzZGM0
LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaE0QdSPi
P2uTYJFgcjFRgpKSkYhMiskTtxOlgdtEHIPLjx8MJFD0Eo5T4rNi2GoFJ2Dm0kWL
jriYKcY8mR0FVH9tYEnfi+JUyC4jYgV0jZA2cOYKqeAn3t4B8njz8QyLOkoNY5Zz
x0c6jVi+7xQBfFkx1HQkpBRL/1VWEWhY39HcVsRUdWJfwAL9z/R8JmvKnSmMbeNa
QueKPp8wfMU5puqCS/bFQQ+E+ces5WLLvoMrDXBul6zEae35H1eHWoAxlJ16v+C+
L7PxZJgh9Kc+VcXXDobNk9wtSccikpTJmmyt+xemWBMKpFxhl2tXKj3E8Z51PxE1
YuetznlOzL5/lA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:21 2026 by rpki-client