Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
File:                     HwCwqokkw3eInj07mWCTuHpz0OE.mft (raw, json)
Hash identifier:          SsnB0lHg9Lj76bAl19EP/Jsslsn+OIX/13mOnwdd10Y=
Subject key identifier:   9D:9C:D6:00:08:DF:A5:5D:C8:24:F2:BE:F9:CA:C0:D1:C5:08:3A:22
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Certificate issuer:       /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial:       019D26CCE755CFD12F3EAFA730E8CB6F7F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
Manifest number:          11DF
Signing time:             Wed 25 Mar 2026 21:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:55 +0000
Files and hashes:         1: Gmr6DvFecGNz7K0pxzX4Fgvg1Ek.roa (hash: vp2rFqOY6nmUicsFoLP4/cfheUkk9r3+DgY732ObGfU=)
                          2: HwCwqokkw3eInj07mWCTuHpz0OE.crl (hash: U04SmxizMu3/UtCdPeynv8YduGVOWR6jAoy279z0Ufc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:e7:55:cf:d1:2f:3e:af:a7:30:e8:cb:6f:7f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
        Validity
            Not Before: Mar 25 21:00:55 2026 GMT
            Not After : Mar 26 21:00:55 2026 GMT
        Subject: CN=9d9cd60008dfa55dc824f2bef9cac0d1c5083a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:a5:dc:e2:51:16:ad:a7:3b:6d:d8:fb:be:
                    0f:70:7e:2b:64:2c:0d:6c:4f:75:8d:9e:5a:b8:fd:
                    e6:0f:4d:01:7d:4b:6b:e7:c1:49:90:82:15:29:c5:
                    2e:bb:bc:6a:9d:35:ca:8a:59:cc:65:4e:92:ba:ca:
                    dd:d9:64:ab:a4:4d:c4:74:78:6d:b1:78:3b:05:ce:
                    ab:da:5b:b7:80:fa:77:cb:47:64:75:7c:46:86:85:
                    2b:19:04:ba:7f:87:52:6f:14:29:c1:6d:3a:0b:70:
                    42:11:76:c3:70:6d:3b:9e:a7:49:00:41:47:be:db:
                    d6:38:75:06:16:22:20:d6:8b:0a:f7:6c:82:c9:8a:
                    91:a8:30:35:8f:75:cb:bf:7b:b5:0b:db:cb:e5:42:
                    ae:8f:f0:35:3c:5e:d7:a5:d6:c6:33:97:9e:86:af:
                    4a:52:24:5d:60:51:1f:9b:4a:75:b8:ad:eb:ca:fe:
                    05:d4:7b:97:cb:ed:8e:17:24:73:96:b2:8f:2e:63:
                    24:30:1d:23:75:8a:e0:8d:3d:d2:e1:3a:02:66:4e:
                    57:c6:fe:48:8a:0e:81:5f:74:48:bd:b1:2b:42:27:
                    7a:73:d0:6c:fe:0c:f8:55:a2:ce:4b:79:87:13:f5:
                    6d:20:75:ae:f3:e1:7b:bd:b5:8f:77:d7:c8:dc:b3:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9C:D6:00:08:DF:A5:5D:C8:24:F2:BE:F9:CA:C0:D1:C5:08:3A:22
            X509v3 Authority Key Identifier:
                keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:30:e9:9c:b3:aa:16:e5:6d:ca:f9:0c:41:b0:22:9b:61:18:
         9f:f7:24:ef:4f:64:92:5c:24:40:66:57:b1:96:49:32:65:05:
         aa:51:64:ef:ff:8f:47:f8:7c:8e:17:f5:0e:d9:01:1e:ae:bd:
         99:58:9e:04:42:d4:f0:a7:d5:c4:b9:c8:f3:31:5e:d0:85:43:
         ae:34:60:fd:66:fe:5f:6c:f0:cb:99:a3:f7:b5:67:59:6a:1f:
         d1:75:af:8b:4b:ce:fa:73:59:a5:5f:3a:fc:4a:66:f3:75:9e:
         d3:f0:b0:0a:b8:c1:97:94:48:7f:84:4b:da:a6:3b:e5:2a:07:
         43:81:a6:f5:9d:f7:56:01:bb:5d:77:4a:de:d3:f2:3f:e9:06:
         3e:e9:88:5d:c8:8d:78:17:21:d4:d2:86:e3:0c:1a:3c:76:12:
         14:06:68:33:6c:9e:d1:33:22:82:e5:9a:d5:36:7b:46:56:09:
         6b:96:8d:cf:ea:68:30:a9:d1:bc:74:68:c8:65:d9:7d:89:8a:
         e0:c2:70:8f:dc:a9:1d:d4:32:c9:7b:4d:b8:e8:27:8e:3b:44:
         4a:c4:f8:2a:49:fd:71:ff:b8:b6:17:35:f8:a1:b1:73:ff:65:
         76:17:96:96:82:5c:a6:36:1b:24:a3:0c:e7:a8:a2:6d:75:c9:
         2f:8b:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:08 2026 by rpki-client