Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File:                     HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier:          IyIbgT1yknBudcvhh0CO71bq6AHa9xq/+dIg/VtD+7M=
Subject key identifier:   1D:13:86:E0:F5:B2:D6:DB:47:C3:DE:46:C5:78:10:01:49:E9:FC:44
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer:       /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial:       019D2A04D391AC0095D1C86E357E00A38F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number:          11E4
Signing time:             Thu 26 Mar 2026 12:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:52 +0000
Files and hashes:         1: CvlT8XgWCNuSSaYILqFrDUnlk8Q.roa (hash: /PY60x69f1RFb1+VeQA4srQb3VpoSBgqHMBssXQXw/A=)
                          2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: 7qW5tWsAZtdcn2dl3eiIc0BciJW+Y840FUuQjEIBw6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:d3:91:ac:00:95:d1:c8:6e:35:7e:00:a3:8f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
        Validity
            Not Before: Mar 26 12:00:52 2026 GMT
            Not After : Mar 27 12:00:52 2026 GMT
        Subject: CN=1d1386e0f5b2d6db47c3de46c578100149e9fc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:1a:dd:58:ad:21:cb:c3:11:a8:73:7a:4e:
                    d1:9f:21:9f:ba:ea:00:74:1c:97:f7:19:6e:01:e3:
                    8d:e7:6b:d4:0f:a5:ae:ff:d9:0a:6f:ea:75:e9:7e:
                    b6:21:3c:ce:12:21:28:70:c0:6f:a4:d9:9b:d7:99:
                    85:79:8c:c4:77:fb:53:61:96:67:e3:2d:db:fb:ef:
                    e2:ad:9b:b1:7b:a9:cf:6e:c5:2b:54:3a:6b:44:f3:
                    a3:58:4b:96:5f:bb:a8:3d:b8:d3:5b:29:9e:42:7f:
                    06:4e:92:20:6f:fe:37:97:1b:3e:be:43:cb:af:89:
                    99:9f:04:2f:e3:e3:5f:fa:ea:f7:d5:f0:7d:7e:4c:
                    fd:75:bb:fc:14:1a:af:c7:90:b4:b9:f5:32:a8:8e:
                    0c:63:e3:f5:67:a7:21:84:af:c9:2d:a9:4b:de:fd:
                    d0:5a:16:71:07:24:38:29:37:5a:2c:c1:35:62:e6:
                    8e:6e:39:51:6a:82:66:49:1c:6d:f6:58:1a:6a:9d:
                    ad:65:41:e6:8a:0c:fa:f2:39:a4:3b:30:c7:65:92:
                    3d:fa:83:5d:41:33:a9:66:5e:0a:5f:68:ad:04:71:
                    ac:7a:56:e6:2b:7a:b4:78:ff:07:bd:a6:d8:9b:8b:
                    72:48:98:d7:2e:52:2d:a5:74:7e:aa:0d:25:9d:67:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:86:E0:F5:B2:D6:DB:47:C3:DE:46:C5:78:10:01:49:E9:FC:44
            X509v3 Authority Key Identifier:
                keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:33:a8:44:63:fd:a1:e0:97:0e:b2:01:58:37:67:21:10:
         33:7e:fb:d2:31:31:0a:02:cd:70:7f:f0:4d:8e:0a:ab:e7:52:
         8c:15:d0:21:26:21:e3:91:76:c3:d2:6c:5b:58:71:d8:03:39:
         c0:61:e7:56:09:8e:cd:44:08:29:6f:87:e8:f9:05:eb:96:06:
         be:25:68:b3:e4:1b:41:40:02:33:56:f1:8c:14:06:2d:26:5c:
         de:ba:b3:e0:cb:ee:63:ae:dc:3a:ef:d8:7a:9d:62:96:fa:ce:
         74:64:ae:c5:4d:15:6f:ce:c2:50:ef:bc:21:0c:dc:cb:5f:90:
         09:9d:64:a4:fd:92:85:8b:bf:37:b0:bb:8c:d5:05:27:1b:71:
         13:43:a7:0a:29:a8:52:6d:40:03:cc:a6:29:47:95:99:41:17:
         e3:94:a3:35:c6:86:55:37:c8:9b:28:46:16:12:f5:da:66:7b:
         fe:9d:0b:bd:87:75:95:0a:e3:db:39:94:45:4d:a3:33:30:c2:
         01:d4:fe:ab:c0:07:37:f9:1b:2a:91:49:f1:cc:1e:90:23:4b:
         2b:56:9f:48:27:7f:8a:8a:c0:40:f2:8c:32:8f:5e:83:e2:f6:
         6d:0f:13:a6:15:ee:6a:3b:86:71:fd:3a:55:3f:fa:37:db:30:
         51:6a:b3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBNORrACV0chuNX4Ao480MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOWMwYjFkMjE0NDIxNGVhNDkxM2M3ZDYzYjI2ZmUyNmE0
NzJlZmUwHhcNMjYwMzI2MTIwMDUyWhcNMjYwMzI3MTIwMDUyWjAzMTEwLwYDVQQD
EygxZDEzODZlMGY1YjJkNmRiNDdjM2RlNDZjNTc4MTAwMTQ5ZTlmYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt40a3VitIcvDEahzek7RnyGfuuoA
dByX9xluAeON52vUD6Wu/9kKb+p16X62ITzOEiEocMBvpNmb15mFeYzEd/tTYZZn
4y3b++/irZuxe6nPbsUrVDprRPOjWEuWX7uoPbjTWymeQn8GTpIgb/43lxs+vkPL
r4mZnwQv4+Nf+ur31fB9fkz9dbv8FBqvx5C0ufUyqI4MY+P1Z6chhK/JLalL3v3Q
WhZxByQ4KTdaLME1YuaObjlRaoJmSRxt9lgaap2tZUHmigz68jmkOzDHZZI9+oNd
QTOpZl4KX2itBHGselbmK3q0eP8HvabYm4tySJjXLlItpXR+qg0lnWdYpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0ThuD1stbbR8PeRsV4EAFJ6fxEMB8GA1UdIwQY
MBaAFBycCx0hRCFOpJE8fWOyb+JqRy7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEp3TEhTRkVJVTZra1R4OVk3SnY0bXBITHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDg1MTQtMGVlNS00Y2RiLWIwNzgt
ZjY1YTkzZjQ4MGE4LzEvSEp3TEhTRkVJVTZra1R4OVk3SnY0bXBITHY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZDg1MTQtMGVlNS00Y2RiLWIwNzgtZjY1YTkzZjQ4MGE4
LzEvSEp3TEhTRkVJVTZra1R4OVk3SnY0bXBITHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdYzqERj
/aHglw6yAVg3ZyEQM3770jExCgLNcH/wTY4Kq+dSjBXQISYh45F2w9JsW1hx2AM5
wGHnVgmOzUQIKW+H6PkF65YGviVos+QbQUACM1bxjBQGLSZc3rqz4MvuY67cOu/Y
ep1ilvrOdGSuxU0Vb87CUO+8IQzcy1+QCZ1kpP2ShYu/N7C7jNUFJxtxE0OnCimo
Um1AA8ymKUeVmUEX45SjNcaGVTfImyhGFhL12mZ7/p0LvYd1lQrj2zmURU2jMzDC
AdT+q8AHN/kbKpFJ8cwekCNLK1afSCd/iorAQPKMMo9eg+L2bQ8TphXuajuGcf06
VT/6N9swUWqzyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:07 2026 by rpki-client