Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
File:                     HWcc95_PZtKf7A13pmp9DqG7dZs.mft (raw, json)
Hash identifier:          GhMtTvA04gX9X6uul01OCv8/U9OEQMaLwQLQV3uLyVk=
Subject key identifier:   10:2A:8C:5A:23:80:C0:B8:E9:58:98:40:7B:3F:81:79:AA:F6:AF:06
Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
Certificate issuer:       /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Certificate serial:       019D2B859F1AAD5FEFC731EF6778A5C3D341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
Manifest number:          0A64
Signing time:             Thu 26 Mar 2026 19:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 19:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 19:01:10 +0000
Files and hashes:         1: HWcc95_PZtKf7A13pmp9DqG7dZs.crl (hash: NrjeyPPhUCxsNf/ZAnYGs6//YqsqaF2wDGKca+RzTYU=)
                          2: oMEOSgDbceEyhWfFRbikVx4AYfo.roa (hash: pmNBs7855rtrPbhA49sQF8g8yRzPMLTG0Bga7lNZ5Bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:85:9f:1a:ad:5f:ef:c7:31:ef:67:78:a5:c3:d3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
        Validity
            Not Before: Mar 26 19:01:10 2026 GMT
            Not After : Mar 27 19:01:10 2026 GMT
        Subject: CN=102a8c5a2380c0b8e95898407b3f8179aaf6af06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:f7:4e:34:ce:86:ca:41:d2:57:ba:d1:a8:
                    00:3e:cc:7e:90:c1:cb:88:e2:5f:02:d8:5c:7d:14:
                    87:81:c9:ea:27:6f:22:88:d2:9c:80:a7:f2:68:e9:
                    d2:22:31:a1:c7:22:63:d7:84:ae:ed:01:5f:3e:76:
                    8a:e5:a7:78:76:75:18:96:f1:f9:e1:45:78:5e:1a:
                    96:5c:d8:92:cf:f3:bf:32:3c:18:6d:98:e7:ae:43:
                    43:a1:98:e3:31:84:29:70:13:3a:78:c9:ee:e0:df:
                    37:42:b9:ac:10:32:2b:9a:af:e0:ae:f9:58:7c:48:
                    e5:cb:7a:db:72:34:7f:d5:58:f8:62:be:77:96:05:
                    38:9f:61:6b:85:03:c5:e8:fa:cd:31:00:d8:6c:bd:
                    dc:56:47:6c:d3:9d:78:b2:73:4f:ac:27:b7:7c:bf:
                    2c:cc:6e:9f:27:27:e8:c7:bd:ef:fa:71:87:41:9b:
                    2b:8c:58:c0:40:a8:dc:59:a5:22:07:7e:37:47:62:
                    f8:02:f5:e6:8a:39:23:db:82:de:3a:c1:57:03:e0:
                    61:d6:68:5b:a9:a9:24:21:8e:d6:bb:11:d1:b9:1b:
                    05:27:c6:f2:64:02:e1:ca:b2:7f:91:8b:a2:01:5b:
                    70:ac:99:d3:d9:60:73:5c:0b:c4:a8:7b:21:64:52:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2A:8C:5A:23:80:C0:B8:E9:58:98:40:7B:3F:81:79:AA:F6:AF:06
            X509v3 Authority Key Identifier:
                keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:dd:9c:59:8e:3b:37:7b:57:34:f0:33:99:8e:ad:dc:3d:dd:
         d6:46:e7:5d:6a:30:b7:a5:69:21:63:b1:a7:79:09:81:c4:77:
         b1:0d:b3:b1:49:43:57:31:bc:04:95:87:97:8e:c0:1d:0a:18:
         98:14:fd:01:50:dc:5c:59:ae:08:45:e0:72:c6:11:06:96:1e:
         0f:8c:93:4d:60:b7:84:ff:97:0c:1f:4a:ab:39:22:d5:48:a3:
         e2:bf:59:38:24:10:73:30:d8:ef:fc:17:4e:41:3d:6a:57:99:
         a4:a4:11:17:b0:75:cd:50:3f:75:d7:be:39:16:2b:9d:28:81:
         fd:e9:e6:bd:4c:cb:c2:75:7f:a8:7b:20:b0:63:52:8a:fb:0b:
         2d:a1:85:c6:0e:2e:2d:2c:62:28:9a:9b:80:f0:d3:c3:98:08:
         c4:8a:32:0e:dc:48:77:6b:1e:ea:1e:b4:24:8b:0c:2b:85:de:
         7d:0c:f7:00:b0:6d:6b:d2:c3:5a:e7:47:b6:89:ab:09:8d:53:
         47:65:5a:19:e0:91:0d:51:a5:75:bf:7b:0e:ba:0c:36:5b:5d:
         19:c3:c3:eb:95:01:17:68:29:8f:48:ae:fe:d9:82:af:aa:15:
         02:9c:e1:0b:0a:04:25:24:af:d6:4a:4a:65:f4:42:26:fb:79:
         b3:50:0a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:41 2026 by rpki-client