Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File:                     hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier:          66PsHRh0lvcVjNee3ViourOkIyEFL7PoROu/qvddn5I=
Subject key identifier:   4A:93:91:23:78:04:8F:FA:ED:11:0D:64:33:B1:15:28:CA:05:60:2C
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer:       /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial:       019E1DFEAC4A5BB1399AA2FE92E643E6E3A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number:          1945
Signing time:             Tue 12 May 2026 21:01:29 +0000
Manifest this update:     Tue 12 May 2026 21:01:29 +0000
Manifest next update:     Wed 13 May 2026 21:01:29 +0000
Files and hashes:         1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
                          2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
                          3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
                          4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: IaUlh/ERhTvEJLWfkMuaqaZfoN5zMl9RcoQS5UURDlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:ac:4a:5b:b1:39:9a:a2:fe:92:e6:43:e6:e3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
        Validity
            Not Before: May 12 21:01:29 2026 GMT
            Not After : May 13 21:01:29 2026 GMT
        Subject: CN=4a93912378048ffaed110d6433b11528ca05602c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:ea:65:0a:8c:d5:cc:d5:19:03:f3:14:dd:
                    65:a3:f5:f5:c1:23:a4:87:9a:4d:0f:86:5a:52:fb:
                    b8:78:72:6b:96:c8:5c:94:a4:22:c6:68:d9:9e:51:
                    40:e8:04:5b:09:82:54:ed:4a:4e:e7:48:e2:c0:3b:
                    4c:2e:1d:eb:df:1b:5c:7c:12:ca:50:31:52:d2:16:
                    1a:72:76:53:45:96:76:52:cd:c7:71:13:4c:d1:31:
                    77:57:58:ca:86:bf:f0:1e:7c:e5:27:4e:e6:45:3c:
                    d5:a0:a3:b3:9d:15:91:c9:ef:99:62:93:54:f1:67:
                    a9:16:ef:e9:00:32:81:cf:9f:fd:99:64:c4:10:8d:
                    f6:7f:fb:b9:b0:ce:6d:01:e1:3f:57:c8:42:5f:5c:
                    1a:f5:6e:aa:6a:b1:7e:c2:dd:07:45:dc:13:f3:bb:
                    e7:10:5f:67:dc:44:71:3e:ca:c5:27:fd:ce:b9:9c:
                    a6:f8:67:f1:06:49:f3:e8:24:89:58:ca:70:cf:94:
                    ed:33:34:10:2f:03:d4:df:81:c2:8f:90:68:86:19:
                    04:07:c9:16:0f:40:99:f6:b0:a0:f1:73:eb:6a:a5:
                    f8:d1:eb:72:55:18:d7:ed:0d:ca:72:a3:40:59:f9:
                    a0:58:0f:18:2c:7a:22:a0:57:6f:7b:82:56:cd:8e:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:93:91:23:78:04:8F:FA:ED:11:0D:64:33:B1:15:28:CA:05:60:2C
            X509v3 Authority Key Identifier:
                keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d7:9f:19:69:f9:55:16:04:ec:d4:75:e6:e2:f1:a3:e3:11:
         4b:d3:7b:94:98:72:c2:80:d8:2e:98:96:d3:45:a5:ce:39:ca:
         2f:ca:eb:73:3a:5a:1c:c2:f6:26:d1:2f:0a:ea:e7:4c:e6:77:
         61:0d:ef:47:bf:58:04:59:86:a0:be:ee:fc:52:c6:c4:5f:4c:
         87:b1:29:39:f0:31:c8:45:ec:1c:0c:26:22:db:6f:60:51:6a:
         dd:9d:d2:d6:4c:34:3a:f0:14:10:05:c9:38:a3:14:2c:01:16:
         2c:97:fe:d1:2f:02:14:fc:49:ff:68:21:9d:a1:93:d8:a1:b9:
         01:99:a9:d4:f9:a9:4d:aa:fe:bd:58:2d:a0:3d:95:07:12:31:
         e5:3a:c8:93:f2:d3:19:60:2f:59:a9:2a:bc:7f:d0:01:cd:e8:
         dd:dc:b1:f5:9a:c7:cc:9f:e0:70:84:98:f0:bf:92:91:1e:08:
         59:0b:37:ae:1f:d1:b9:bf:be:5d:9e:de:22:06:72:21:b7:95:
         2c:a9:08:3a:46:df:d3:4e:28:8f:b5:3b:0e:27:0c:83:f5:98:
         92:be:36:c5:8c:86:9f:e8:f7:9d:27:5a:91:34:5b:73:80:49:
         64:72:69:ac:34:cc:ea:b8:16:46:92:46:e1:db:70:41:fa:47:
         37:22:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:32 2026 by rpki-client