Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
File:                     V-HUowlen6i5N9f6pDdZNyfSOTI.mft (raw, json)
Hash identifier:          +YkaqTqOrUriw5FnbzqD63OjzkW3sdaCwnhcx2nf37w=
Subject key identifier:   1A:05:E1:30:6E:03:E8:EF:15:E5:A2:5F:01:51:C9:B6:79:6F:C6:02
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Certificate issuer:       /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial:       019D284E6E23FFCE7498DB43996F93ED714E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
Manifest number:          07CB
Signing time:             Thu 26 Mar 2026 04:02:01 +0000
Manifest this update:     Thu 26 Mar 2026 04:02:01 +0000
Manifest next update:     Fri 27 Mar 2026 04:02:01 +0000
Files and hashes:         1: UAe6hHF4tY5tJRAZ4zl4Keq33hE.roa (hash: 4qhi3u98mfE9B0D9RD9MOTzasDKVZY5O0ywJYLJl2BU=)
                          2: V-HUowlen6i5N9f6pDdZNyfSOTI.crl (hash: z7k4YhgCaPZ23OIUQOi2JznMkex69+sDryEwJO3BpzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:6e:23:ff:ce:74:98:db:43:99:6f:93:ed:71:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
        Validity
            Not Before: Mar 26 04:02:01 2026 GMT
            Not After : Mar 27 04:02:01 2026 GMT
        Subject: CN=1a05e1306e03e8ef15e5a25f0151c9b6796fc602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:5c:9c:3e:c8:d4:d2:33:d2:6c:0f:24:03:
                    92:55:95:28:21:7b:e2:0c:f7:49:83:28:43:76:14:
                    43:3e:72:4e:fc:4d:77:4a:77:37:5d:ba:23:f2:32:
                    3b:df:25:9e:64:be:94:56:78:82:95:5f:79:8c:c1:
                    0e:a2:e3:d5:c2:db:88:bc:1a:48:0a:69:78:b4:1c:
                    47:65:07:e7:78:1b:a9:3e:e3:51:cd:6e:c0:0f:94:
                    2e:20:92:92:5a:90:7c:c9:a0:24:e7:29:6a:38:61:
                    7e:a1:9f:32:3c:fb:45:69:42:4e:7d:61:87:c8:67:
                    de:5e:76:1d:4c:18:72:69:33:e7:cf:37:e9:be:39:
                    26:a5:69:69:ea:45:55:91:6f:36:8e:26:1d:72:b4:
                    f7:d4:df:c9:40:63:90:98:be:78:6f:a5:57:85:b7:
                    8f:02:4b:48:60:4a:27:cc:99:76:5e:06:0d:45:22:
                    9d:cc:a2:68:88:96:31:3d:b9:c7:f5:9d:d3:c3:85:
                    4d:ff:1a:59:26:75:32:80:86:c8:8f:0f:9a:85:61:
                    ff:20:32:bf:42:91:44:61:5b:4c:f3:78:3f:49:a3:
                    b1:24:e4:57:20:cd:1c:01:c7:6b:98:44:f3:23:b5:
                    ea:20:4d:28:4c:3b:f7:8c:7d:4a:9e:f2:66:13:e8:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:05:E1:30:6E:03:E8:EF:15:E5:A2:5F:01:51:C9:B6:79:6F:C6:02
            X509v3 Authority Key Identifier:
                keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:20:04:39:7e:cd:22:d9:79:8a:2e:79:75:1b:b0:aa:58:
         d6:fa:1e:b9:10:81:88:f3:4a:aa:d1:bd:cf:73:f8:f3:88:ca:
         51:59:a4:59:c4:05:15:38:96:ac:38:49:1b:e2:21:4a:a9:c1:
         dd:34:fd:ea:15:50:1d:e2:76:4a:98:99:0f:05:6e:4d:4a:55:
         b8:48:f9:0f:7f:60:c0:1d:2f:55:58:06:ba:ee:d6:d8:1f:43:
         8f:fd:7b:11:82:59:3f:1c:49:55:b5:38:9d:91:70:e5:8b:1a:
         9e:49:7c:0d:b4:ee:6d:70:32:9f:d2:4a:91:d3:b3:98:c8:f2:
         e4:70:52:68:31:74:9f:47:76:72:5e:da:a0:bf:5e:a5:76:0b:
         01:1b:16:04:1c:a1:04:69:aa:ae:53:fc:1e:21:e1:a4:40:bb:
         bd:36:18:9d:bc:ad:42:97:51:00:39:89:2a:e9:43:bb:a4:50:
         5d:fc:22:e1:d8:f4:6a:7a:af:4f:55:fd:f7:18:f5:67:85:8e:
         fe:38:5d:30:3e:a5:28:2d:d7:2c:03:a1:1f:44:78:2a:6f:83:
         95:ac:69:f9:8d:ed:f9:b8:fa:38:7c:06:24:53:a8:19:b9:e0:
         de:c1:88:d0:a4:5d:af:0d:54:52:af:eb:0f:9a:40:7c:a1:b6:
         9d:c3:86:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTm4j/850mNtDmW+T7XFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTFkNGEzMDk1ZTlmYThiOTM3ZDdmYWE0Mzc1OTM3Mjdk
MjM5MzIwHhcNMjYwMzI2MDQwMjAxWhcNMjYwMzI3MDQwMjAxWjAzMTEwLwYDVQQD
EygxYTA1ZTEzMDZlMDNlOGVmMTVlNWEyNWYwMTUxYzliNjc5NmZjNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArChcnD7I1NIz0mwPJAOSVZUoIXvi
DPdJgyhDdhRDPnJO/E13Snc3Xboj8jI73yWeZL6UVniClV95jMEOouPVwtuIvBpI
Cml4tBxHZQfneBupPuNRzW7AD5QuIJKSWpB8yaAk5ylqOGF+oZ8yPPtFaUJOfWGH
yGfeXnYdTBhyaTPnzzfpvjkmpWlp6kVVkW82jiYdcrT31N/JQGOQmL54b6VXhbeP
AktIYEonzJl2XgYNRSKdzKJoiJYxPbnH9Z3Tw4VN/xpZJnUygIbIjw+ahWH/IDK/
QpFEYVtM83g/SaOxJORXIM0cAcdrmETzI7XqIE0oTDv3jH1KnvJmE+hhAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoF4TBuA+jvFeWiXwFRybZ5b8YCMB8GA1UdIwQY
MBaAFFfh1KMJXp+ouTfX+qQ3WTcn0jkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1IVW93bGVuNmk1TjlmNnBEZFpOeWZTT1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTYyNmItY2M4OC00N2MyLTgzNWUt
NGQ3NTI4MmNlMmViLzEvVi1IVW93bGVuNmk1TjlmNnBEZFpOeWZTT1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84NTYyNmItY2M4OC00N2MyLTgzNWUtNGQ3NTI4MmNlMmVi
LzEvVi1IVW93bGVuNmk1TjlmNnBEZFpOeWZTT1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHsgBDl+
zSLZeYoueXUbsKpY1voeuRCBiPNKqtG9z3P484jKUVmkWcQFFTiWrDhJG+IhSqnB
3TT96hVQHeJ2SpiZDwVuTUpVuEj5D39gwB0vVVgGuu7W2B9Dj/17EYJZPxxJVbU4
nZFw5Ysankl8DbTubXAyn9JKkdOzmMjy5HBSaDF0n0d2cl7aoL9epXYLARsWBByh
BGmqrlP8HiHhpEC7vTYYnbytQpdRADmJKulDu6RQXfwi4dj0anqvT1X99xj1Z4WO
/jhdMD6lKC3XLAOhH0R4Km+Dlaxp+Y3t+bj6OHwGJFOoGbng3sGI0KRdrw1UUq/r
D5pAfKG2ncOG+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:32 2026 by rpki-client