Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File:                     hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier:          lR822oSb1IqRZkWexj6rhHpYq/BcW2mqnjO1HkBx9mg=
Subject key identifier:   C9:4F:54:B3:84:A2:FB:14:8E:3C:7B:80:E3:7B:75:C8:00:61:77:3F
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer:       /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial:       019F92490E9DD2FE7E94005A5689EE6F6DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number:          0F0E
Signing time:             Fri 24 Jul 2026 04:01:29 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:29 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:29 +0000
Files and hashes:         1: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (hash: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0=)
                          2: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: J8GYh5WYNwlcL9buStQVFq5yEhhk0mu5JmhgK4TGemc=)
                          3: yk-DGGnoKxjDOyVJDYCP2Dq6RkY.roa (hash: vb19X8WJPy7+RYVMmtMqPzkvfdcm+Fk9dFoJfJFBMp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:49:0e:9d:d2:fe:7e:94:00:5a:56:89:ee:6f:6d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
        Validity
            Not Before: Jul 24 04:01:29 2026 GMT
            Not After : Jul 25 04:01:29 2026 GMT
        Subject: CN=c94f54b384a2fb148e3c7b80e37b75c80061773f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:b7:a9:71:c2:7b:7c:e2:71:c1:cb:4f:0e:
                    45:b8:13:39:e1:b1:68:3f:a1:1e:bb:7b:08:b0:b7:
                    10:fa:7b:2d:6b:a4:c8:76:79:10:49:fe:40:33:a5:
                    f2:d6:eb:b0:ed:cb:3a:0e:64:73:b1:aa:c6:62:37:
                    8e:70:59:62:5a:ef:bf:31:48:15:fc:7d:df:cb:58:
                    9e:af:ff:f6:d7:29:33:8e:d1:22:d1:18:28:7b:1b:
                    ef:82:b5:d1:82:31:00:32:85:ae:08:45:22:8e:97:
                    ad:32:14:b0:7e:fc:85:f3:f4:f7:52:5e:22:44:2b:
                    df:5f:8b:60:ea:ed:73:d7:0c:3c:79:4b:89:ed:06:
                    68:b3:bd:3d:93:10:41:4a:29:d3:8e:83:7c:b7:7c:
                    af:78:13:95:87:13:1b:e0:97:59:60:06:05:05:a7:
                    54:21:81:d1:e3:bc:9a:fd:8c:5e:21:e4:7c:46:e4:
                    3e:3d:3e:bc:83:99:23:57:be:f4:5a:c5:76:78:d2:
                    74:89:f2:0f:f9:14:01:83:58:4b:0e:f4:11:1a:a4:
                    c0:e3:06:b4:84:70:1a:f8:48:74:df:53:94:84:ab:
                    eb:68:2a:01:08:1e:a5:57:6d:43:ab:5a:8d:4b:31:
                    fe:ef:cd:a2:76:b9:96:18:02:c0:c4:43:1c:db:e0:
                    11:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4F:54:B3:84:A2:FB:14:8E:3C:7B:80:E3:7B:75:C8:00:61:77:3F
            X509v3 Authority Key Identifier:
                keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:12:61:66:51:f2:41:d8:13:0e:76:01:94:5d:3c:9c:5b:5b:
         36:00:f6:77:53:22:26:ab:31:3b:05:a1:c2:c5:7a:d6:a7:d1:
         25:66:b3:04:cd:f8:9e:b4:f9:e9:25:1e:ce:46:cc:19:f8:e1:
         b2:a7:c9:cd:a8:71:ca:ab:d9:93:ce:69:e8:82:13:95:1f:36:
         72:d3:84:29:57:c3:2c:a3:04:14:39:b8:d1:29:30:ec:fd:b3:
         b0:79:db:70:da:a8:38:fc:67:fa:6e:17:73:0d:ab:96:c3:4f:
         85:df:60:3c:62:d2:9d:85:6b:2d:54:59:59:05:bb:cd:42:3c:
         a4:49:4b:f3:84:01:2d:de:4d:13:ec:d8:f7:7b:36:87:97:40:
         8e:01:ca:bb:60:bc:58:95:97:b2:09:85:e5:bd:9e:8b:e1:e5:
         6b:38:de:c9:fa:6b:12:08:dc:9d:a1:47:34:b1:6b:e8:8a:e4:
         b1:40:2a:07:ef:ed:4f:ef:25:b4:31:6e:7c:bc:4b:98:27:72:
         66:8d:47:34:9c:e1:2e:fd:31:30:d5:71:ce:82:bf:09:8f:01:
         a2:8d:3c:61:c0:a2:e8:84:4f:b2:66:f9:ac:49:cc:22:58:0a:
         e2:78:0a:d7:d1:3c:b4:74:33:d2:82:ae:7c:5d:d0:bc:74:c7:
         62:a8:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:51 2026 by rpki-client