Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File:                     HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier:          xrEE40cMCVTLbNPSJazBH7Ezx6zQDuQRQMQJKpl51nQ=
Subject key identifier:   FD:46:30:3B:46:D0:3C:2A:8F:6F:66:32:00:2A:DB:16:84:98:AE:9A
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer:       /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial:       01A0D94D8BC4882918C003ACE576CC849AE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number:          1705
Signing time:             Fri 25 Sep 2026 16:02:12 +0000
Manifest this update:     Fri 25 Sep 2026 16:02:12 +0000
Manifest next update:     Sat 26 Sep 2026 16:02:12 +0000
Files and hashes:         1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: 9Cl3mhHU+DwfQQFBjK1cGGABN19KQu/qy4zHEvKctLA=)
                          2: OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa (hash: JuywCKLI+PPdkKSGBeKBQF3KYZjcO8aSfG1zgtriXEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:8b:c4:88:29:18:c0:03:ac:e5:76:cc:84:9a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
        Validity
            Not Before: Sep 25 16:02:12 2026 GMT
            Not After : Sep 26 16:02:12 2026 GMT
        Subject: CN=fd46303b46d03c2a8f6f6632002adb168498ae9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:49:af:97:dd:66:99:dc:12:8c:e6:28:47:
                    70:ad:4f:65:64:56:cc:5e:20:2f:1a:cd:aa:63:90:
                    5d:c9:55:ed:ce:95:77:60:4f:d9:7c:72:7a:07:1d:
                    6d:df:7d:bc:9d:4d:68:6c:d1:f7:3a:27:b3:c4:51:
                    43:dd:57:29:05:52:3c:37:7f:09:95:4a:77:23:b9:
                    cf:b6:16:b6:c4:a1:75:bf:8b:16:52:61:e9:d6:ba:
                    16:42:a5:29:49:4c:5b:61:30:62:76:1b:a5:54:6c:
                    cc:36:08:7e:99:50:c2:67:5b:88:66:18:89:85:e2:
                    88:15:d6:fe:04:20:ab:c3:2d:70:5f:b1:29:be:27:
                    53:1b:63:8e:2f:c6:bf:ee:12:38:39:ad:8e:c2:84:
                    64:1a:5c:c5:83:7a:62:29:b1:e2:71:72:31:f2:e6:
                    1c:5c:65:e0:7d:c2:e8:8d:e7:04:eb:1d:19:22:d5:
                    ad:3e:85:df:f5:32:0f:67:e5:ab:22:44:5c:56:d4:
                    06:f0:46:d6:07:ee:52:27:93:ef:5f:e4:de:58:85:
                    56:ca:f1:43:61:03:e6:d7:1b:d2:db:94:b0:6c:6c:
                    94:ae:47:ce:14:af:59:a3:0f:b4:5f:9e:b5:fe:84:
                    db:b3:a1:23:25:e1:af:74:fc:a8:b1:95:9d:01:95:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:46:30:3B:46:D0:3C:2A:8F:6F:66:32:00:2A:DB:16:84:98:AE:9A
            X509v3 Authority Key Identifier:
                keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:97:6e:39:0a:6e:ee:68:be:be:61:68:36:d9:15:57:0f:ab:
         4f:a6:25:3d:42:ca:f7:ab:42:4a:f3:45:f9:0f:34:6b:41:ea:
         b6:58:eb:64:cb:09:eb:f1:42:6a:30:20:c2:cd:9e:24:98:6f:
         c7:fb:b4:08:12:21:43:03:8f:e5:33:a0:6f:bb:5e:a3:77:f0:
         b0:3f:60:40:ad:17:32:6b:37:fa:9c:0b:c6:ef:1a:4a:d1:05:
         74:17:1d:be:c4:2d:ff:23:49:6e:82:7c:02:f9:5a:8b:05:78:
         ca:d7:3d:8c:f1:16:ba:fb:13:40:52:c5:ca:4b:71:c1:3b:15:
         1d:50:5d:8b:be:90:78:17:44:a5:81:50:3e:1e:65:35:3f:e9:
         92:98:4b:a9:02:c0:9f:59:c0:b3:b0:36:73:8d:48:1a:c6:19:
         35:7e:c9:53:5c:16:2e:c0:d1:84:e9:9e:c6:af:07:b9:a8:5b:
         d7:1f:e8:98:9c:57:be:34:d5:c6:45:ec:6e:33:de:0b:19:4b:
         cd:e4:6d:26:86:98:b6:0b:05:94:36:10:67:ce:c2:47:f1:63:
         e2:e5:44:fb:71:68:00:59:47:fa:ec:b2:22:e6:b3:ab:24:b0:
         2e:de:fe:0b:dd:1e:d3:64:84:b3:5b:b8:41:1c:2c:96:48:51:
         3b:36:2b:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTYvEiCkYwAOs5XbMhJroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNmQ5Y2NiMDI3MTU4NDliM2ExZWNiY2QzNGI2ODg3ZjY0
OTk0MGYwHhcNMjYwOTI1MTYwMjEyWhcNMjYwOTI2MTYwMjEyWjAzMTEwLwYDVQQD
EyhmZDQ2MzAzYjQ2ZDAzYzJhOGY2ZjY2MzIwMDJhZGIxNjg0OThhZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBNJr5fdZpncEozmKEdwrU9lZFbM
XiAvGs2qY5BdyVXtzpV3YE/ZfHJ6Bx1t3328nU1obNH3OiezxFFD3VcpBVI8N38J
lUp3I7nPtha2xKF1v4sWUmHp1roWQqUpSUxbYTBidhulVGzMNgh+mVDCZ1uIZhiJ
heKIFdb+BCCrwy1wX7EpvidTG2OOL8a/7hI4Oa2OwoRkGlzFg3piKbHicXIx8uYc
XGXgfcLojecE6x0ZItWtPoXf9TIPZ+WrIkRcVtQG8EbWB+5SJ5PvX+TeWIVWyvFD
YQPm1xvS25SwbGyUrkfOFK9Zow+0X561/oTbs6EjJeGvdPyosZWdAZXApwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1GMDtG0Dwqj29mMgAq2xaEmK6aMB8GA1UdIwQY
MBaAFB1tnMsCcVhJs6HsvNNLaIf2SZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDkt
MTE0ZmZjMjBmOWFhLzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDktMTE0ZmZjMjBmOWFh
LzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5duOQpu
7mi+vmFoNtkVVw+rT6YlPULK96tCSvNF+Q80a0HqtljrZMsJ6/FCajAgws2eJJhv
x/u0CBIhQwOP5TOgb7teo3fwsD9gQK0XMms3+pwLxu8aStEFdBcdvsQt/yNJboJ8
AvlaiwV4ytc9jPEWuvsTQFLFyktxwTsVHVBdi76QeBdEpYFQPh5lNT/pkphLqQLA
n1nAs7A2c41IGsYZNX7JU1wWLsDRhOmexq8Huahb1x/omJxXvjTVxkXsbjPeCxlL
zeRtJoaYtgsFlDYQZ87CR/Fj4uVE+3FoAFlH+uyyIuazqySwLt7+C90e02SEs1u4
QRwslkhROzYrwQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:58:14 2026 by rpki-client