Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          1TwPiTXS3SfIPXG1Ig77Vvp0MhIT5PV9egP2t/pp//0=
Subject key identifier:   D9:A1:D9:C6:82:24:F0:58:5F:44:C5:20:9D:86:D8:CD:A9:E8:11:3D
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       019F91A39832FE8A4112DFC5886D4EE24C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          104A
Signing time:             Fri 24 Jul 2026 01:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:45 +0000
Files and hashes:         1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=)
                          2: 4BgA-ABWSArgHx-ygbshx6JYrTY.roa (hash: bvv8kgY0ZVnm7qvnIwLD4R0xE7EezfYihSBw0uGEums=)
                          3: 5fcx8obVEyoTorLpIgirYEHl1Q0.roa (hash: m4mpP2IxkbLqcnmIfpJCCUpjWCW4dvvjytcLKpNKEZ4=)
                          4: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=)
                          5: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=)
                          6: D9IIvAjUBeonrUuAtA9-LP_kfxg.roa (hash: 2T3Qvn8J8uK4lzJw95imN9pofbDQi2ngOHPWAgyI0Cg=)
                          7: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=)
                          8: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=)
                          9: Hhx08W6yxhRbHfCLKYdHm13ozS0.roa (hash: jwpzK3qtdotyMub/ILdIHzVfvJLpMrtxw3Hz/Tq6IYI=)
                          10: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: 2k2znj2yYOP9ME6xP8n2dqFg5W7r5O04enTPJdgArNs=)
                          11: JDgMbtzm9TbQ4eWyo_rVJwWaWOY.roa (hash: v4xwFMtuHO8ayfqB5VQBenyDwKgKi5kZP3vMs+HZh4g=)
                          12: KluRcqzajt5NKKtsXPOxDda7akI.roa (hash: zGTQ13vN7lvbq3YvrqjjFmI7sRLKlEZTIN2XpYjnbW4=)
                          13: MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa (hash: pPpAjQ9/faa4QoYKDH51+jkG77bH512fpifEsnfi9LY=)
                          14: NcTDxTnFozsxKavcnlSTx2-OZis.roa (hash: QbtIW3hggcu4VmQX0Ylc1F26SWBEg6eUZGBBTmAdKG4=)
                          15: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=)
                          16: S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa (hash: jo9uW/EfFrv7avMQwhlQaDKV2tu9K+V96NtiixNAWjo=)
                          17: V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa (hash: 2mcsTNBbXliMo6Xfl43UwD6c9ZLoqqEr0U1Zz/8r+ug=)
                          18: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=)
                          19: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=)
                          20: acgv97YNnbbDPyBz44KpDWdpOkQ.roa (hash: KyAE8oZNrznG/SETxn7e5ARXLp9M42t4EPdCRxa4IjY=)
                          21: c3qNueiGWk4Qn-ykN_QlCOGM37o.roa (hash: wnA6SEQc4U9MNJjFtGtJmJio/YAYcn579hZtE+0vJ/k=)
                          22: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=)
                          23: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=)
                          24: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=)
                          25: ioRtNTdinpYrcVf_jzCS5BV23i0.roa (hash: Ka+iUbIs4jDL+lzQs7AOTwqacQczetgn601hHQNpQS0=)
                          26: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (hash: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0=)
                          27: mzjreCh1UKp6Tw01JHK_gKRYkGg.roa (hash: 8KHhl+lFh6yPZptHPK8f1cx7zO0RSCaz8HUst/vhTr0=)
                          28: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=)
                          29: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=)
                          30: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=)
                          31: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:98:32:fe:8a:41:12:df:c5:88:6d:4e:e2:4c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: Jul 24 01:00:45 2026 GMT
            Not After : Jul 25 01:00:45 2026 GMT
        Subject: CN=d9a1d9c68224f0585f44c5209d86d8cda9e8113d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:cb:46:9f:af:ea:2b:cc:9d:f1:09:01:4d:
                    1c:a8:c5:23:c5:82:17:4e:e9:ae:82:e4:7e:f4:50:
                    92:eb:61:d5:a9:92:f5:00:c8:2b:fc:3d:ac:60:b4:
                    8f:1d:a7:fc:77:1d:5b:90:99:67:38:51:67:af:05:
                    06:06:68:b0:f5:0b:d2:bb:63:d7:73:48:6d:d2:da:
                    a4:f2:b5:ff:bb:e7:1e:cf:16:b5:95:4d:d9:17:3d:
                    27:cc:80:29:32:8c:32:fb:c0:a9:95:cc:66:91:4e:
                    84:69:fc:e9:a1:33:9e:98:b5:d8:2e:59:db:3c:11:
                    d5:0d:1d:7b:b2:69:f6:69:7a:8c:db:13:73:d1:b3:
                    f0:92:14:19:5c:a0:8d:4f:7d:57:cf:9b:5f:b8:a1:
                    89:64:17:d2:19:5f:28:c9:81:70:d2:65:60:ce:b9:
                    bf:1a:0a:9a:a5:16:d9:b4:e0:52:07:72:03:ed:c9:
                    2b:e0:81:67:d9:1e:85:b1:30:a0:13:56:9f:6f:34:
                    5b:59:50:8f:9e:8d:81:19:f1:f7:ca:17:f9:2a:27:
                    50:44:e5:15:26:54:ac:80:31:24:63:d8:77:b8:3f:
                    82:16:d0:99:1a:5f:77:d8:df:ca:56:ed:cc:6c:59:
                    82:ce:c6:59:26:49:37:64:70:8b:ee:cf:b2:c7:e5:
                    2b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A1:D9:C6:82:24:F0:58:5F:44:C5:20:9D:86:D8:CD:A9:E8:11:3D
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:aa:3b:0d:82:a7:ec:a8:d6:76:93:c5:34:aa:80:25:59:51:
         cf:ba:f8:61:74:12:11:6f:b5:ae:58:33:41:05:be:49:9c:0e:
         5b:6c:f7:b5:21:58:16:79:e7:22:e1:7a:9e:f1:7c:66:b6:fd:
         6c:a8:ff:08:05:5f:01:a3:1f:7e:5e:b5:3b:7a:79:40:32:fd:
         38:5b:0f:97:37:00:6a:b3:d4:66:00:bb:d7:d1:7b:08:63:31:
         3f:87:fc:90:71:9a:11:f8:28:f1:1f:f9:82:dc:89:6a:54:8b:
         47:a9:48:24:77:aa:4c:d4:c2:0c:69:10:53:0c:87:3d:95:04:
         33:f2:2c:e1:e7:78:1e:e5:45:ca:b8:c4:1f:4d:27:c0:64:f4:
         77:57:f0:a3:ad:72:ac:4b:88:d0:c5:be:c7:7d:12:d3:6a:8d:
         56:b2:45:ff:21:bf:04:e6:02:39:11:a8:db:c6:d9:c1:4f:21:
         b5:40:ce:ec:87:4a:4b:63:c8:78:63:05:58:83:d2:e9:b3:23:
         73:fc:dc:31:73:52:7d:f4:28:a9:f9:1f:5f:d7:4f:77:2f:0d:
         27:19:c4:f0:80:d4:ea:bf:9e:0e:b1:a3:2f:3d:47:9c:d3:54:
         d7:34:5b:1d:9a:74:20:9d:32:5c:90:44:dc:6a:7f:c8:bc:01:
         20:55:3f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:18:42 2026 by rpki-client