Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File:                     HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier:          ivnX26HGWTkFDv204r91HAyQh9hfHkbQaVcjkYol+lM=
Subject key identifier:   F1:05:E0:3C:45:F6:AF:0A:82:98:91:E4:25:CF:77:6D:4C:C6:8C:32
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer:       /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial:       019E1F1189D80BB6D89416B5BC38598F7FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 02:01:43 +0000
Manifest this update:     Wed 13 May 2026 02:01:43 +0000
Manifest next update:     Thu 14 May 2026 02:01:43 +0000
Files and hashes:         1: 2r56-7c4rzlH_MkXpf4EVQxFefI.roa (hash: hSJijlNMgIG+anYeveOsK+OFXlzwcZe8DVit+XV01Ts=)
                          2: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: Ywj/2Ut/oBSC5gBPwRg+v/OA5clYSkjUIPSmMWc1s18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:89:d8:0b:b6:d8:94:16:b5:bc:38:59:8f:7f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
        Validity
            Not Before: May 13 02:01:43 2026 GMT
            Not After : May 14 02:01:43 2026 GMT
        Subject: CN=f105e03c45f6af0a829891e425cf776d4cc68c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b4:64:37:83:ee:60:02:6b:d5:eb:dd:2e:8f:
                    7d:44:e8:a5:94:41:fe:20:0d:96:64:0b:1a:7f:5d:
                    7e:ca:e7:6f:1a:66:9e:ce:6e:9a:c0:12:b3:59:7f:
                    27:52:0a:9e:68:f9:a8:14:8a:f0:e2:2b:62:45:39:
                    d7:44:a5:48:35:de:41:09:55:18:30:20:d7:7d:b3:
                    e9:ca:e4:0f:49:51:c2:c3:a6:75:2a:bc:bb:e4:9a:
                    b9:16:36:3b:0d:a6:98:8a:48:05:3c:b0:41:85:5a:
                    1b:cb:b3:43:b2:b9:70:8c:25:da:06:10:db:f9:f4:
                    c8:72:13:2d:f0:42:52:ea:42:fa:62:cc:2e:d6:61:
                    ea:61:2e:aa:d4:38:d3:25:13:dc:5b:d0:18:ef:7d:
                    36:65:c5:ee:48:de:c0:59:b0:1f:bc:aa:28:bd:36:
                    6f:6d:d9:20:88:fa:9e:c7:70:0a:c4:0d:37:07:9c:
                    ab:62:f4:a8:30:27:7a:7a:94:05:a5:51:e7:d3:2d:
                    0f:4f:23:0a:6a:b1:f0:89:1c:12:d8:9c:ed:e1:b8:
                    5e:96:99:99:7f:d0:d2:83:c3:2a:f6:24:70:22:e8:
                    36:8b:9c:e6:ed:61:69:07:cb:ff:b1:f4:6b:ed:64:
                    0d:3d:36:08:a6:67:59:be:a2:91:81:57:69:eb:97:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:05:E0:3C:45:F6:AF:0A:82:98:91:E4:25:CF:77:6D:4C:C6:8C:32
            X509v3 Authority Key Identifier:
                keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:90:d5:5f:c1:79:49:61:d2:a4:9f:9a:2e:a7:13:45:2b:ce:
         59:d1:5b:4c:9f:55:c9:23:39:31:fc:e2:28:8a:13:f2:9d:cd:
         bc:a8:79:1a:cc:c6:1d:b9:c2:7f:3e:67:9c:7b:93:82:8f:f2:
         16:1b:7c:b7:87:ba:29:9f:23:b9:03:21:c7:2a:0a:fc:da:34:
         62:f0:28:24:13:a3:e3:64:51:b3:4d:79:ad:22:bd:6a:72:08:
         84:9f:8f:b4:bb:cb:c9:53:71:8d:28:62:60:3c:d4:0b:10:64:
         a2:93:ce:06:0f:f9:0f:d0:9c:f7:05:51:7b:86:a5:79:26:20:
         a4:a9:51:d7:54:e9:4a:86:7c:9e:fb:1b:da:8f:3d:a5:a8:7f:
         5e:f1:07:b2:e4:52:51:d0:c1:de:8c:6e:63:66:25:f4:60:af:
         42:f1:e4:44:e5:e5:ac:b8:84:98:57:97:7d:9a:6b:d3:23:ef:
         61:08:40:b5:77:cb:38:a9:0f:fc:00:56:79:5e:a5:89:e0:23:
         2b:36:47:7a:4d:59:a5:0a:df:f7:92:b1:0f:ca:74:93:2d:9c:
         32:2f:13:41:8e:27:f4:6b:2e:d1:cf:e1:c4:d6:8d:91:0f:2b:
         5c:4c:9f:d6:4e:b4:b1:fd:1c:0b:7f:e2:65:ee:d2:a5:3f:d7:
         9a:b2:5f:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEYnYC7bYlBa1vDhZj3/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZmMyYjM2NTE0MTYzZDM4OWVlOGZlMThmOGUyMzQzZmE0
ZGRjOTkwHhcNMjYwNTEzMDIwMTQzWhcNMjYwNTE0MDIwMTQzWjAzMTEwLwYDVQQD
EyhmMTA1ZTAzYzQ1ZjZhZjBhODI5ODkxZTQyNWNmNzc2ZDRjYzY4YzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrRkN4PuYAJr1evdLo99ROillEH+
IA2WZAsaf11+yudvGmaezm6awBKzWX8nUgqeaPmoFIrw4itiRTnXRKVINd5BCVUY
MCDXfbPpyuQPSVHCw6Z1Kry75Jq5FjY7DaaYikgFPLBBhVoby7NDsrlwjCXaBhDb
+fTIchMt8EJS6kL6Yswu1mHqYS6q1DjTJRPcW9AY7302ZcXuSN7AWbAfvKoovTZv
bdkgiPqex3AKxA03B5yrYvSoMCd6epQFpVHn0y0PTyMKarHwiRwS2Jzt4bhelpmZ
f9DSg8Mq9iRwIug2i5zm7WFpB8v/sfRr7WQNPTYIpmdZvqKRgVdp65fsrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEF4DxF9q8KgpiR5CXPd21MxowyMB8GA1UdIwQY
MBaAFB38KzZRQWPTie6P4Y+OI0P6TdyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYt
MDFiZWQ4NzgyYzdmLzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYtMDFiZWQ4NzgyYzdm
LzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpDVX8F5
SWHSpJ+aLqcTRSvOWdFbTJ9VySM5MfziKIoT8p3NvKh5GszGHbnCfz5nnHuTgo/y
Fht8t4e6KZ8juQMhxyoK/No0YvAoJBOj42RRs015rSK9anIIhJ+PtLvLyVNxjShi
YDzUCxBkopPOBg/5D9Cc9wVRe4aleSYgpKlR11TpSoZ8nvsb2o89pah/XvEHsuRS
UdDB3oxuY2Yl9GCvQvHkROXlrLiEmFeXfZpr0yPvYQhAtXfLOKkP/ABWeV6lieAj
KzZHek1ZpQrf95KxD8p0ky2cMi8TQY4n9Gsu0c/hxNaNkQ8rXEyf1k60sf0cC3/i
Ze7SpT/XmrJf3w==
-----END CERTIFICATE-----
Generated at Wed May 13 12:33:32 2026 by rpki-client