Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File:                     HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier:          h2YEt+b7inj1icpgzipl3ChcXtF8vlPwSn0PpIsJqY4=
Subject key identifier:   6D:3B:B3:9B:17:92:D4:8C:2F:A3:A1:A8:BB:8E:B7:D3:C6:B4:EB:9A
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer:       /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial:       019E1EDA2B01D49D1A263797E758FD36A820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number:          1433
Signing time:             Wed 13 May 2026 01:01:14 +0000
Manifest this update:     Wed 13 May 2026 01:01:14 +0000
Manifest next update:     Thu 14 May 2026 01:01:14 +0000
Files and hashes:         1: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: dCcImzEzECtgZ8D10SizN7DXhc5Ir/IsUCkhgsA8uIw=)
                          2: MUqDsVkna7G4MyO1lSn72i-Jbow.roa (hash: IVcowk46pxZyKS0pkiAyx+n+WI60LUgzwvxTDQ5wrNc=)
                          3: N4IzrH0qD40Woupyn9pXT2Z1eMg.roa (hash: Day6JScG9JRnBC85UOxG3a1DX4Ksh0LMtFWjdlB6gU0=)
                          4: dRHnWg8xgMV7IsHlZGz8N74fQIs.roa (hash: gSF6LAUwiGyd8EI+BN4CEzTlS4d9BOM234ihF2xKvGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:2b:01:d4:9d:1a:26:37:97:e7:58:fd:36:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
        Validity
            Not Before: May 13 01:01:14 2026 GMT
            Not After : May 14 01:01:14 2026 GMT
        Subject: CN=6d3bb39b1792d48c2fa3a1a8bb8eb7d3c6b4eb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:16:62:13:75:56:6d:ea:c1:a9:4d:e3:e6:eb:
                    27:b5:5a:26:5f:6f:f4:e5:b0:de:78:27:78:2c:5e:
                    e9:70:cd:58:bc:4a:9b:d2:c1:89:6e:49:b7:62:3f:
                    23:53:e2:1e:28:c9:12:0b:4d:a2:fe:a7:66:ed:1f:
                    85:21:bb:33:d0:05:38:53:a3:90:96:c0:ba:8c:20:
                    e7:bb:3f:62:9b:58:8f:40:bb:69:f0:63:71:d6:d0:
                    b0:33:04:95:20:df:71:ba:13:59:30:d5:88:46:82:
                    b7:71:39:19:76:92:0f:45:7e:72:9f:8f:a9:2d:ba:
                    19:28:f8:13:07:b9:70:d8:1e:44:9f:fe:9b:93:62:
                    c5:20:94:5a:69:c5:80:cc:6a:32:6b:85:19:1a:3c:
                    4f:0c:6c:de:e8:67:a7:cb:99:d3:a7:86:49:18:1e:
                    03:ab:15:59:fa:04:9e:e1:00:c2:19:41:c1:92:6a:
                    c3:eb:7f:c1:99:f4:a1:e0:4e:c6:78:f1:92:a8:e7:
                    bc:f8:ab:35:96:ee:f4:ac:1b:69:04:45:3c:8e:af:
                    da:7f:5f:8e:6d:35:a6:a8:f7:84:a6:e6:02:ec:76:
                    40:09:52:e5:e2:dd:7a:4c:4b:7d:d7:bc:90:6d:53:
                    f9:34:70:ed:11:84:10:62:a7:1d:dc:17:4e:e7:54:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3B:B3:9B:17:92:D4:8C:2F:A3:A1:A8:BB:8E:B7:D3:C6:B4:EB:9A
            X509v3 Authority Key Identifier:
                keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:2b:a2:a5:99:27:77:8a:f4:c2:0e:4b:10:00:0e:b3:96:
         3e:ab:24:1d:19:66:dc:31:7b:fd:4d:ca:70:69:da:b3:13:e5:
         c6:1a:82:a6:0e:95:2b:95:8b:43:88:63:a3:3f:77:bb:71:82:
         6a:1a:1f:13:37:17:d1:f1:42:57:d6:7a:fc:cf:c1:aa:f3:2c:
         21:69:f5:ae:ed:45:b5:b0:1f:1b:c3:b8:b1:52:cb:4c:2f:a3:
         14:e4:b8:bb:8a:6c:e7:fd:bb:5f:99:a4:1f:c8:bc:dd:79:8e:
         51:6e:7f:03:0e:34:38:bd:6b:84:8e:49:e5:fe:c4:db:30:b0:
         b1:50:fe:2b:a5:ec:bf:69:ef:fb:3c:c7:52:75:8c:f1:8e:29:
         9b:52:58:e2:0b:85:a1:a7:86:2a:1b:29:fe:8d:6d:16:6c:cc:
         eb:d7:a0:92:e9:3d:c6:05:31:4e:f2:3e:25:d4:26:0b:e4:c0:
         e0:78:3b:46:b5:d4:49:14:34:8d:6a:32:19:2a:c2:45:01:74:
         63:9a:1b:9e:e3:11:0a:e9:4e:29:2d:79:7b:ff:92:4a:32:29:
         ed:a6:5e:db:c0:bc:46:3e:36:fa:c7:22:2b:8b:7c:18:29:bb:
         1a:21:5b:1e:56:6c:3f:67:0c:8a:84:70:8a:65:28:ec:c6:de:
         76:fc:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:47 2026 by rpki-client