Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File:                     hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier:          WhbwbMI5pPu5wk172Kd3e1V9rkIGwbWOp+I0K5EK9C4=
Subject key identifier:   62:C2:FD:74:3C:44:AD:C6:AD:51:6B:AC:0D:E0:FA:63:68:9D:BD:7D
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       01A0D0B6BD511A73454E57673AD8AA9B8B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number:          107F
Signing time:             Thu 24 Sep 2026 00:00:31 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:31 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:31 +0000
Files and hashes:         1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=)
                          2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=)
                          3: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=)
                          4: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=)
                          5: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=)
                          6: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=)
                          7: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=)
                          8: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=)
                          9: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=)
                          10: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=)
                          11: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=)
                          12: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=)
                          13: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=)
                          14: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=)
                          15: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=)
                          16: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=)
                          17: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=)
                          18: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=)
                          19: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=)
                          20: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=)
                          21: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=)
                          22: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: GmY4/TNMnCb6jqU7wUDTRbWrNUyceP8GcGCD1mE8KPM=)
                          23: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=)
                          24: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=)
                          25: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=)
                          26: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=)
                          27: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=)
                          28: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=)
                          29: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=)
                          30: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=)
                          31: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=)
                          32: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=)
                          33: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=)
                          34: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=)
                          35: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:bd:51:1a:73:45:4e:57:67:3a:d8:aa:9b:8b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Sep 24 00:00:31 2026 GMT
            Not After : Sep 25 00:00:31 2026 GMT
        Subject: CN=62c2fd743c44adc6ad516bac0de0fa63689dbd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:55:71:13:53:f5:36:0d:65:b2:d2:3f:25:
                    7b:2e:be:f4:c2:43:03:16:9c:58:34:88:ee:95:32:
                    0c:45:13:81:bd:43:af:ce:3e:4f:93:1a:65:84:0d:
                    63:16:fc:56:d0:70:d6:1e:c5:d0:b5:ac:0d:d6:7d:
                    62:1b:05:c1:d0:1a:08:e2:a8:04:cd:23:44:2d:e5:
                    cd:75:b9:99:32:41:5b:77:b7:f8:11:cc:c5:40:39:
                    77:98:01:57:28:39:9f:b7:93:7f:5a:81:b7:e3:34:
                    ab:a9:57:a5:32:57:32:b3:37:f1:c6:38:da:a6:e2:
                    87:5a:70:d3:35:2d:3f:84:54:c4:3b:90:99:2f:92:
                    e4:2a:0f:26:32:28:6c:45:81:16:de:99:97:3d:ff:
                    fe:fa:06:ef:32:03:4b:a8:e3:7b:81:1d:c8:74:9d:
                    1d:09:f5:9f:c9:6f:5a:75:67:3c:bc:f3:20:51:3c:
                    0c:ad:bd:b5:ab:3b:0f:05:70:cf:86:6d:c1:68:7e:
                    21:07:12:db:e6:d3:63:8b:71:8e:c1:8d:c3:0a:73:
                    b6:ed:c7:f8:35:5a:f9:d8:2c:b0:d6:bd:32:ab:33:
                    57:ea:96:f7:85:6a:cd:82:8f:9c:ca:b3:d4:79:81:
                    83:5c:bb:7d:8e:56:a3:79:9f:b6:ca:f9:ed:96:f0:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C2:FD:74:3C:44:AD:C6:AD:51:6B:AC:0D:E0:FA:63:68:9D:BD:7D
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:80:c2:b4:11:bd:8d:09:df:50:bb:e9:0d:ab:35:0f:b1:db:
         11:86:1e:7b:ff:5d:74:2a:5e:d1:58:ec:41:77:83:53:ed:bc:
         13:dd:75:90:46:cb:69:b8:34:33:69:b8:08:bb:8d:dc:58:fa:
         46:a9:bb:e6:00:d1:8a:7c:84:aa:fd:85:be:e7:01:ea:86:e7:
         8d:87:07:db:21:a1:b8:2e:b6:8e:70:e6:36:f4:56:66:25:42:
         30:56:00:85:f6:7f:c4:92:d8:99:53:6b:44:1a:74:18:dc:16:
         bf:af:d1:a9:8b:bc:b0:af:ec:87:79:43:85:99:a2:20:d8:31:
         ea:f7:50:1e:75:ee:1a:58:c1:80:73:5b:c8:f1:2c:47:be:c0:
         aa:d6:c3:fd:8d:fb:96:3f:5b:66:6b:0c:d3:1f:aa:48:c1:50:
         85:b8:0f:43:30:14:1f:0e:9f:8d:83:2f:43:97:f3:e3:f5:d3:
         e2:96:a7:e7:f3:6f:05:fb:7a:88:08:f2:9f:bf:ec:e1:a1:75:
         d5:e3:17:d7:4b:b6:85:b4:dd:2c:b0:8b:fa:3d:ee:eb:cb:a5:
         53:36:be:01:d0:a5:a7:c6:f7:61:a1:bd:79:94:d2:b8:90:de:
         25:41:d7:47:53:16:a4:98:47:95:85:ef:2d:92:6b:39:2c:9c:
         ed:d2:c3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:57:18 2026 by rpki-client