Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File:                     HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier:          0GdlftJOmFpmqbkGOpTdfHXrDqdFAzSpfvrBXYncnyw=
Subject key identifier:   E1:BF:21:2E:83:70:EC:81:02:F6:BE:A8:CF:AB:73:AC:4C:42:79:DF
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer:       /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial:       019D2BBC6AC27890EA4AC9C1505E5BDE6ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number:          1891
Signing time:             Thu 26 Mar 2026 20:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 20:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 20:01:01 +0000
Files and hashes:         1: 6dv_L1DDphVKsaPUbNVgrio2mco.roa (hash: u/UqpDhbgxCW0Bpgwy3j9fMc8sf/q9V3Bh/vCaaYoAQ=)
                          2: FLGDI-HNGLyavIFHPkaqz0x2dyA.roa (hash: p43U03mDQXL/wNzoMe4V67qrIM7B3GFIc1QcZlkxGyI=)
                          3: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: Q5S3M6iWsXovOB6yzwgbBIL3xfhAl0iJqYyxhcmIQ5g=)
                          4: SNT8hJvMVBfYKWPwF8E6mRsCbIk.roa (hash: fIUVYcxClsJOGEyEKMH1vBZ+eD6MkSZpeWY8XXK6vEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:bc:6a:c2:78:90:ea:4a:c9:c1:50:5e:5b:de:6a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
        Validity
            Not Before: Mar 26 20:01:01 2026 GMT
            Not After : Mar 27 20:01:01 2026 GMT
        Subject: CN=e1bf212e8370ec8102f6bea8cfab73ac4c4279df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:77:a1:38:27:05:58:99:14:78:76:e3:fd:
                    17:9a:05:48:f7:26:24:48:b0:d8:cd:30:ca:96:74:
                    d3:a6:29:67:ba:1b:61:51:41:a1:04:10:54:c1:a3:
                    36:2f:ad:f9:3e:b2:cb:92:67:f9:80:a4:75:35:e1:
                    87:62:5a:26:76:8f:92:1c:9a:ee:de:08:07:22:f2:
                    53:b7:15:37:8c:87:e9:61:f9:5e:a7:8e:69:c8:94:
                    30:56:f2:93:64:72:65:a2:31:59:5f:7a:21:44:cb:
                    be:a5:e6:b2:a6:97:41:cd:b0:21:ec:69:d7:e7:46:
                    43:15:9c:46:39:76:08:c1:d8:b4:05:79:e0:61:88:
                    ee:f1:c0:95:95:3f:17:ed:71:a2:52:66:af:e8:30:
                    27:17:eb:44:29:85:b3:18:71:68:4d:97:1d:8e:48:
                    ad:f7:c1:1b:67:72:24:f9:c4:2b:c8:25:a7:80:97:
                    b9:4a:da:94:28:9e:e4:14:e1:b3:27:f7:04:e8:79:
                    c3:25:a0:36:9f:bb:49:5f:5e:1a:c4:85:fa:02:75:
                    4b:e0:9e:10:85:4e:b2:bf:80:d3:a5:14:12:63:28:
                    39:39:ca:15:d2:33:30:fa:a7:24:69:ac:bb:10:e5:
                    a0:6f:41:d6:e3:8c:25:08:74:50:dc:1e:84:31:1b:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BF:21:2E:83:70:EC:81:02:F6:BE:A8:CF:AB:73:AC:4C:42:79:DF
            X509v3 Authority Key Identifier:
                keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:87:bf:a8:99:a3:dc:45:34:97:23:df:1c:f4:23:e4:35:
         98:e6:9a:56:e7:8a:9c:c7:e5:e7:db:15:48:68:4f:6f:1a:eb:
         86:c5:72:e6:85:5e:dd:d5:ad:ec:1c:4a:3a:41:7d:ea:6d:e5:
         69:48:d6:fd:fe:60:f3:31:ea:98:99:2d:2c:9b:71:af:78:34:
         8e:12:99:8f:5a:56:cb:7c:cf:a0:9a:fd:8f:73:f1:de:45:bc:
         3f:7b:78:62:da:a7:3c:0a:54:5d:d8:c6:8c:e1:8c:9b:11:92:
         26:4c:85:a6:0b:cc:b4:75:db:33:09:6f:20:5c:56:fc:65:ca:
         28:d0:3c:2c:06:aa:aa:16:35:ad:56:cf:2a:24:ac:d4:4b:f0:
         46:50:81:c4:64:2d:03:66:63:b6:63:d1:77:37:10:62:9e:2f:
         9b:e7:f4:ac:c2:7a:2b:87:68:11:8f:81:fb:01:03:a4:e8:51:
         18:2d:49:b2:69:25:7c:81:eb:39:c3:31:f5:dc:fd:1e:77:92:
         a4:95:ad:2b:15:e6:9f:c9:fe:6f:e0:1d:7c:ac:6c:f9:c0:e3:
         e2:91:47:b8:65:42:3f:3c:66:5d:86:77:0a:37:3c:6b:d7:a1:
         62:86:47:f7:ba:eb:30:6d:38:b4:7e:7e:ba:13:fb:32:01:a2:
         a5:ce:c1:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rvGrCeJDqSsnBUF5b3mrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz
ZmNkYzIwHhcNMjYwMzI2MjAwMTAxWhcNMjYwMzI3MjAwMTAxWjAzMTEwLwYDVQQD
EyhlMWJmMjEyZTgzNzBlYzgxMDJmNmJlYThjZmFiNzNhYzRjNDI3OWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBR3oTgnBViZFHh24/0XmgVI9yYk
SLDYzTDKlnTTpilnuhthUUGhBBBUwaM2L635PrLLkmf5gKR1NeGHYlomdo+SHJru
3ggHIvJTtxU3jIfpYflep45pyJQwVvKTZHJlojFZX3ohRMu+peayppdBzbAh7GnX
50ZDFZxGOXYIwdi0BXngYYju8cCVlT8X7XGiUmav6DAnF+tEKYWzGHFoTZcdjkit
98EbZ3Ik+cQryCWngJe5StqUKJ7kFOGzJ/cE6HnDJaA2n7tJX14axIX6AnVL4J4Q
hU6yv4DTpRQSYyg5OcoV0jMw+qckaay7EOWgb0HW44wlCHRQ3B6EMRsL7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG/IS6DcOyBAva+qM+rc6xMQnnfMB8GA1UdIwQY
MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt
OGZjMzczNzU3Njg0LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0
LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5qHv6iZ
o9xFNJcj3xz0I+Q1mOaaVueKnMfl59sVSGhPbxrrhsVy5oVe3dWt7BxKOkF96m3l
aUjW/f5g8zHqmJktLJtxr3g0jhKZj1pWy3zPoJr9j3Px3kW8P3t4YtqnPApUXdjG
jOGMmxGSJkyFpgvMtHXbMwlvIFxW/GXKKNA8LAaqqhY1rVbPKiSs1EvwRlCBxGQt
A2ZjtmPRdzcQYp4vm+f0rMJ6K4doEY+B+wEDpOhRGC1JsmklfIHrOcMx9dz9HneS
pJWtKxXmn8n+b+AdfKxs+cDj4pFHuGVCPzxmXYZ3Cjc8a9ehYoZH97rrMG04tH5+
uhP7MgGipc7BAg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:53:44 2026 by rpki-client