Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          /jH/a4zZoseWyX3oX84rh5b+IJke/rTjS/26zsL3Dz0=
Subject key identifier:   62:03:FA:43:7B:2C:29:E4:83:2F:06:08:86:4B:10:23:DC:98:CB:C9
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       019E1F47A6D86BD03F583C8FCF9D00066463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          0F1A
Signing time:             Wed 13 May 2026 03:00:49 +0000
Manifest this update:     Wed 13 May 2026 03:00:49 +0000
Manifest next update:     Thu 14 May 2026 03:00:49 +0000
Files and hashes:         1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=)
                          2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=)
                          3: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=)
                          4: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=)
                          5: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=)
                          6: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=)
                          7: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=)
                          8: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=)
                          9: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=)
                          10: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=)
                          11: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=)
                          12: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=)
                          13: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=)
                          14: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=)
                          15: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=)
                          16: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=)
                          17: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=)
                          18: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=)
                          19: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=)
                          20: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=)
                          21: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=)
                          22: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: vRbXC1Viw2rcJmBYZQuHS0x7KVdHsipgI7ZFiz2dVfg=)
                          23: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=)
                          24: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=)
                          25: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=)
                          26: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=)
                          27: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=)
                          28: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=)
                          29: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=)
                          30: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=)
                          31: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=)
                          32: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=)
                          33: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=)
                          34: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=)
                          35: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:a6:d8:6b:d0:3f:58:3c:8f:cf:9d:00:06:64:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: May 13 03:00:49 2026 GMT
            Not After : May 14 03:00:49 2026 GMT
        Subject: CN=6203fa437b2c29e4832f0608864b1023dc98cbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:ae:2a:b9:f0:6b:a4:5c:15:16:ce:b5:5c:
                    89:16:67:e8:7d:72:7c:cc:87:83:65:6f:58:aa:ad:
                    7e:a7:1d:5c:52:df:7b:38:b2:cb:04:f4:e1:e3:ae:
                    9b:cb:7e:f3:ec:2d:91:c6:42:9f:85:59:56:9f:33:
                    59:0e:a1:ac:ac:e1:71:27:18:2f:4d:92:07:0e:87:
                    da:b3:fc:17:0f:93:bc:77:cc:f0:7d:37:73:8b:ba:
                    dd:6f:cb:2b:d8:dd:2c:d2:f5:50:44:71:2b:43:3e:
                    b0:29:91:0a:f9:93:1d:8e:ce:a2:23:33:5f:e7:23:
                    b6:ba:1c:45:da:9a:12:41:22:49:c7:c9:12:a6:39:
                    91:d8:14:76:6c:bb:fa:43:7c:e4:98:4f:4b:b4:ab:
                    9a:ab:66:d1:74:39:af:9b:43:27:1b:f1:ee:39:a4:
                    ee:f7:bc:2f:6a:b7:45:da:7d:70:e8:e4:65:df:4d:
                    f0:b7:dd:61:6e:11:6a:84:0c:2a:d6:c7:b8:cf:a9:
                    63:d0:34:a1:3e:08:57:2a:44:0d:5a:1f:9e:9b:6a:
                    8f:06:c4:48:72:ec:44:35:cf:54:5a:ee:9c:9a:7d:
                    d1:b1:5f:cb:99:46:f2:e3:d3:af:fb:ac:30:a7:f8:
                    71:36:6f:c7:1e:36:cb:be:10:fe:10:ee:a2:89:2e:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:03:FA:43:7B:2C:29:E4:83:2F:06:08:86:4B:10:23:DC:98:CB:C9
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4e:37:75:e5:44:64:63:c0:cc:bf:a4:57:42:db:3b:08:7e:
         37:77:d9:71:43:88:a4:16:a5:a3:66:05:4d:74:b7:ac:94:5d:
         b1:e7:0b:2c:65:1f:b9:f0:17:a3:1a:aa:9e:16:bd:6d:d8:f4:
         2d:f7:bf:7e:09:e8:37:50:cd:bf:a6:4f:9f:62:df:51:15:a6:
         bd:f3:9d:81:18:db:ea:72:f3:f7:47:54:23:28:c5:8c:a9:28:
         2a:a8:6e:fe:8a:2b:26:b4:a2:0f:d0:44:ed:8c:2a:0a:4b:ee:
         27:cb:10:2f:d7:09:57:c3:bb:1c:6e:ac:4f:f9:33:e3:9c:ba:
         95:ba:53:4d:1c:0d:92:90:ff:45:19:d9:21:6f:9a:12:68:f0:
         c0:4a:15:30:2f:4a:09:7e:67:97:69:58:1f:c2:c4:a7:df:6b:
         9e:0a:b8:db:ef:5a:d3:19:36:5e:11:38:ae:97:f3:a6:7d:5d:
         02:ad:f0:db:05:5c:ad:a2:dd:22:4d:c3:29:c1:5a:a9:d5:aa:
         c1:9f:02:a1:36:99:fb:bf:1e:fe:9a:32:33:84:f9:37:9e:96:
         2a:00:9b:2a:41:dc:32:11:64:fe:a2:36:a7:92:d3:8d:cc:bc:
         62:95:00:6c:0c:b9:1c:14:bd:bd:ee:24:a4:3e:11:e8:f2:fc:
         69:47:16:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR6bYa9A/WDyPz50ABmRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjYwNTEzMDMwMDQ5WhcNMjYwNTE0MDMwMDQ5WjAzMTEwLwYDVQQD
Eyg2MjAzZmE0MzdiMmMyOWU0ODMyZjA2MDg4NjRiMTAyM2RjOThjYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYquKrnwa6RcFRbOtVyJFmfofXJ8
zIeDZW9Yqq1+px1cUt97OLLLBPTh466by37z7C2RxkKfhVlWnzNZDqGsrOFxJxgv
TZIHDofas/wXD5O8d8zwfTdzi7rdb8sr2N0s0vVQRHErQz6wKZEK+ZMdjs6iIzNf
5yO2uhxF2poSQSJJx8kSpjmR2BR2bLv6Q3zkmE9LtKuaq2bRdDmvm0MnG/HuOaTu
97wvardF2n1w6ORl303wt91hbhFqhAwq1se4z6lj0DShPghXKkQNWh+em2qPBsRI
cuxENc9UWu6cmn3RsV/LmUby49Ov+6wwp/hxNm/HHjbLvhD+EO6iiS4mxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGID+kN7LCnkgy8GCIZLECPcmMvJMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsk43deVE
ZGPAzL+kV0LbOwh+N3fZcUOIpBalo2YFTXS3rJRdsecLLGUfufAXoxqqnha9bdj0
Lfe/fgnoN1DNv6ZPn2LfURWmvfOdgRjb6nLz90dUIyjFjKkoKqhu/oorJrSiD9BE
7YwqCkvuJ8sQL9cJV8O7HG6sT/kz45y6lbpTTRwNkpD/RRnZIW+aEmjwwEoVMC9K
CX5nl2lYH8LEp99rngq42+9a0xk2XhE4rpfzpn1dAq3w2wVcraLdIk3DKcFaqdWq
wZ8CoTaZ+78e/poyM4T5N56WKgCbKkHcMhFk/qI2p5LTjcy8YpUAbAy5HBS9ve4k
pD4R6PL8aUcW7g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:05 2026 by rpki-client