Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File:                     HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier:          CwKXLI9wakD0ijvyx2D5pZvEwp60osi0MhSzJ5yytM0=
Subject key identifier:   73:54:6D:B7:D7:CB:67:30:DD:47:A5:DC:6D:17:48:49:7A:3C:B9:10
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer:       /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial:       019D284DF88E660342015B5FB655500466F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number:          1777
Signing time:             Thu 26 Mar 2026 04:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:31 +0000
Files and hashes:         1: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (hash: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q=)
                          2: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: JlDhtR12qQQnjpOiJzYcGDblBypaniU6ZD073006tWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:f8:8e:66:03:42:01:5b:5f:b6:55:50:04:66:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
        Validity
            Not Before: Mar 26 04:01:31 2026 GMT
            Not After : Mar 27 04:01:31 2026 GMT
        Subject: CN=73546db7d7cb6730dd47a5dc6d1748497a3cb910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:c2:01:11:d1:3a:47:8c:ca:37:c5:34:70:
                    b7:7a:4a:64:2d:82:3c:31:e6:9e:0d:3a:29:66:1f:
                    c7:85:33:be:4b:2e:ae:7d:66:7a:8c:47:61:36:8b:
                    32:82:fc:d0:7f:b6:40:95:14:a9:e1:a6:f0:26:2d:
                    f6:60:d5:7a:cf:1d:cd:3c:24:d0:a9:2b:d9:24:73:
                    bf:8d:35:59:0a:38:e3:e1:62:98:42:ea:7f:c7:23:
                    8e:a9:f5:0a:1c:ad:91:6b:4b:bb:7a:0b:7f:42:90:
                    c6:fb:66:bc:aa:e5:e4:d1:51:83:6a:da:a9:d1:d8:
                    c3:b1:67:90:d9:60:fe:cc:29:58:b1:dd:2c:29:1e:
                    21:25:fb:c3:e3:2e:eb:b7:b1:3f:ec:8f:eb:c7:1f:
                    4f:ad:30:e4:53:34:28:9c:08:c9:75:a0:a7:38:1c:
                    c7:bb:90:12:55:d2:4f:58:cf:89:cc:a5:7e:60:e1:
                    d6:67:4c:e1:98:3d:52:91:b5:ad:83:52:ec:cf:de:
                    8f:cb:cf:e7:bc:69:69:f1:02:12:cb:5a:e5:7e:43:
                    1e:3d:2f:f6:d5:46:87:02:d0:2b:c1:40:5e:79:3d:
                    a7:96:e4:07:05:eb:90:83:56:ea:ff:3e:22:b2:49:
                    f4:8a:ed:17:08:fe:72:59:86:16:31:1c:7e:cb:1a:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:6D:B7:D7:CB:67:30:DD:47:A5:DC:6D:17:48:49:7A:3C:B9:10
            X509v3 Authority Key Identifier:
                keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:34:9e:fc:42:74:6e:f6:7d:b8:5d:50:05:2c:d4:d8:7c:6b:
         38:34:29:f0:48:2f:e6:7a:cb:9e:7a:dd:9d:c0:35:2d:f3:3c:
         c1:64:37:c8:ef:c3:6c:5f:36:58:e2:74:02:1d:11:c3:7c:fe:
         45:73:f8:92:61:b1:ae:a4:7f:48:41:cd:a6:0f:4e:d5:06:79:
         42:70:21:5b:23:db:96:1f:84:67:00:20:ce:19:22:c0:f4:7b:
         51:b1:2c:03:a8:ef:f3:15:01:df:07:af:38:41:e7:0b:72:1f:
         d6:69:5c:f1:06:8a:21:1f:41:a3:85:51:62:bf:5c:c9:00:f6:
         da:56:4f:d4:1d:ac:f5:27:c8:bf:19:ee:8b:c0:27:0c:1f:ed:
         1b:3d:18:34:d0:0c:7d:6c:43:b4:ef:38:04:34:ba:67:3e:be:
         d8:0e:82:54:95:7a:06:e7:89:7d:8e:66:9c:fc:4d:49:db:2d:
         6c:df:e6:27:63:54:b8:ef:14:1b:a0:10:9e:df:e6:58:9b:4d:
         27:30:72:e4:f2:c7:4a:a0:fa:b9:74:c9:09:94:31:e9:6d:96:
         a7:0e:35:33:04:5b:54:20:4d:1b:71:6c:3c:27:5f:80:9b:e0:
         fa:49:d8:fe:2d:c9:53:c3:cd:a4:cb:f9:ee:2a:22:20:f9:61:
         f7:60:99:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTfiOZgNCAVtftlVQBGbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYjQ2NGJhMDM4YmMwYmJiZWU0MDBmM2U5MDhkZjUxNDgy
YzUxYmIwHhcNMjYwMzI2MDQwMTMxWhcNMjYwMzI3MDQwMTMxWjAzMTEwLwYDVQQD
Eyg3MzU0NmRiN2Q3Y2I2NzMwZGQ0N2E1ZGM2ZDE3NDg0OTdhM2NiOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbTCARHROkeMyjfFNHC3ekpkLYI8
MeaeDTopZh/HhTO+Sy6ufWZ6jEdhNosygvzQf7ZAlRSp4abwJi32YNV6zx3NPCTQ
qSvZJHO/jTVZCjjj4WKYQup/xyOOqfUKHK2Ra0u7egt/QpDG+2a8quXk0VGDatqp
0djDsWeQ2WD+zClYsd0sKR4hJfvD4y7rt7E/7I/rxx9PrTDkUzQonAjJdaCnOBzH
u5ASVdJPWM+JzKV+YOHWZ0zhmD1SkbWtg1Lsz96Py8/nvGlp8QISy1rlfkMePS/2
1UaHAtArwUBeeT2nluQHBeuQg1bq/z4iskn0iu0XCP5yWYYWMRx+yxoQiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNUbbfXy2cw3Uel3G0XSEl6PLkQMB8GA1UdIwQY
MBaAFBy0ZLoDi8C7vuQA8+kI31FILFG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEt
YmIyNjE0M2M1ZWRjLzEvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEtYmIyNjE0M2M1ZWRj
LzEvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjSe/EJ0
bvZ9uF1QBSzU2HxrODQp8Egv5nrLnnrdncA1LfM8wWQ3yO/DbF82WOJ0Ah0Rw3z+
RXP4kmGxrqR/SEHNpg9O1QZ5QnAhWyPblh+EZwAgzhkiwPR7UbEsA6jv8xUB3wev
OEHnC3If1mlc8QaKIR9Bo4VRYr9cyQD22lZP1B2s9SfIvxnui8AnDB/tGz0YNNAM
fWxDtO84BDS6Zz6+2A6CVJV6BueJfY5mnPxNSdstbN/mJ2NUuO8UG6AQnt/mWJtN
JzBy5PLHSqD6uXTJCZQx6W2Wpw41MwRbVCBNG3FsPCdfgJvg+knY/i3JU8PNpMv5
7ioiIPlh92CZPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:06 2026 by rpki-client