Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File:                     HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier:          T0TYRIEmZNDKuPaw53QBKkhJ8yhZRBj4cRQP1JeHyG0=
Subject key identifier:   DE:4B:D3:30:73:E1:BF:58:19:44:C2:FD:AB:0E:62:6D:39:BD:EB:B8
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer:       /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial:       019E20FFCDAE6F90B7BBC34F39A72C9C59A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number:          1910
Signing time:             Wed 13 May 2026 11:01:35 +0000
Manifest this update:     Wed 13 May 2026 11:01:35 +0000
Manifest next update:     Thu 14 May 2026 11:01:35 +0000
Files and hashes:         1: 6dv_L1DDphVKsaPUbNVgrio2mco.roa (hash: u/UqpDhbgxCW0Bpgwy3j9fMc8sf/q9V3Bh/vCaaYoAQ=)
                          2: FLGDI-HNGLyavIFHPkaqz0x2dyA.roa (hash: p43U03mDQXL/wNzoMe4V67qrIM7B3GFIc1QcZlkxGyI=)
                          3: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: hutpGtP3rJtp/Zimt4B/g8aw/aAqBCOhPBDuwLw18ck=)
                          4: SNT8hJvMVBfYKWPwF8E6mRsCbIk.roa (hash: fIUVYcxClsJOGEyEKMH1vBZ+eD6MkSZpeWY8XXK6vEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:cd:ae:6f:90:b7:bb:c3:4f:39:a7:2c:9c:59:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
        Validity
            Not Before: May 13 11:01:35 2026 GMT
            Not After : May 14 11:01:35 2026 GMT
        Subject: CN=de4bd33073e1bf581944c2fdab0e626d39bdebb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:bc:97:00:5a:8d:3c:8d:91:a3:b5:de:10:
                    2f:6a:88:3c:51:07:d6:4f:4c:70:d6:e3:c4:2a:46:
                    55:4c:d8:d6:53:16:ff:ac:ba:85:61:eb:6a:ef:b3:
                    11:98:c9:50:05:b8:e6:d5:b7:4e:f1:4f:50:27:5d:
                    ab:25:83:c0:9b:f4:f8:32:11:07:7a:11:35:f5:c3:
                    c5:c8:a0:b0:fc:e3:40:0d:71:df:0a:b0:63:3d:06:
                    d2:62:02:1e:94:5c:c6:3a:12:18:4e:86:39:22:93:
                    e5:74:9c:44:83:41:a1:04:47:47:93:01:58:f6:18:
                    87:8f:2b:fd:e3:76:04:c9:c5:57:f9:38:80:40:16:
                    a5:c3:8c:1a:de:41:44:f9:e0:8f:8d:33:a9:2e:a0:
                    1d:87:91:f8:9c:9e:ae:65:4c:66:33:f8:9c:27:ef:
                    21:61:f8:c8:6d:55:f1:49:6e:e5:31:55:fc:41:fb:
                    b1:3a:ff:cf:1d:5b:a8:68:0a:1d:84:61:8e:cc:76:
                    f6:7e:15:9f:9a:da:17:81:c2:31:05:b2:24:d4:1f:
                    8f:72:13:f4:de:71:c9:92:7e:e7:1f:30:13:e5:32:
                    30:b8:be:6a:17:2b:0c:76:21:70:3a:f3:7e:54:3d:
                    90:66:d5:35:75:87:a2:73:02:5b:b7:37:f1:8b:63:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4B:D3:30:73:E1:BF:58:19:44:C2:FD:AB:0E:62:6D:39:BD:EB:B8
            X509v3 Authority Key Identifier:
                keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5d:8e:47:6a:98:29:8b:90:da:66:57:72:a0:8c:67:f9:23:
         e4:93:f0:cc:e5:38:e8:b1:ea:66:41:b5:84:13:81:c1:ea:b1:
         9a:ae:a5:1d:03:7c:2d:d5:07:df:2d:94:8a:e4:06:8d:00:4a:
         0a:b3:06:cc:0f:4a:ec:b3:14:46:d0:22:31:2c:fb:0b:26:38:
         a5:38:ec:9c:28:ed:1b:91:8d:d8:5b:7e:cd:8f:ef:dd:81:90:
         ae:a7:ae:8a:a9:90:ef:3d:21:97:96:be:1b:3b:13:57:72:bf:
         0d:f5:6c:1f:f3:76:30:f7:fb:52:a3:e6:17:62:0b:17:c9:b5:
         16:67:64:92:aa:c8:fe:db:74:dd:12:66:6a:d9:fc:87:fe:28:
         35:cd:2c:b9:72:7d:4b:97:62:8a:05:11:d8:be:e7:c6:21:5e:
         c0:bf:42:70:52:c8:1f:df:65:b2:6d:2a:06:ca:4e:77:29:b3:
         03:c3:68:50:76:9e:df:6d:0d:e8:cd:d1:a9:07:96:92:d4:8f:
         36:1e:01:c4:0c:4f:a6:fa:95:cb:fb:88:38:b2:7b:df:fb:69:
         a7:62:09:b7:dc:66:c6:ac:35:09:7b:ef:bf:14:a2:f4:47:23:
         97:ab:10:87:f5:24:36:f9:03:3c:23:48:dd:50:db:7b:4e:15:
         9b:e1:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:08:34 2026 by rpki-client