Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File:                     HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier:          3SV3EUNYjUqPAtA35o6zicktCfu1OD/z9RgDBcLlCXs=
Subject key identifier:   D7:19:30:4F:8B:56:A6:9F:65:14:88:B1:6C:DF:53:BC:B5:80:95:7D
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer:       /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial:       01A154AE560E166D6F56C2D87402B4A7B139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number:          17F5
Signing time:             Mon 19 Oct 2026 15:01:13 +0000
Manifest this update:     Mon 19 Oct 2026 15:01:13 +0000
Manifest next update:     Tue 20 Oct 2026 15:01:13 +0000
Files and hashes:         1: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (hash: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c=)
                          2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: 01DNtW0ttowmlllK3ELnKFeb4pRYxrn3qS5IW6ONlaU=)
                          3: lJxYVzr-KS-fYsC57OKvflP8A4c.roa (hash: 4pvbPMsGzdgVlC585Dyoz1kyokZkz2DdP27jl7Yydb4=)
                          4: r-1SzrZjoEXcWaVFk74aF23TjJ0.roa (hash: sRjFv0mWTbb1HZj7c7GM888be2VPScRA9imdmTy3Guc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:ae:56:0e:16:6d:6f:56:c2:d8:74:02:b4:a7:b1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
        Validity
            Not Before: Oct 19 15:01:13 2026 GMT
            Not After : Oct 20 15:01:13 2026 GMT
        Subject: CN=d719304f8b56a69f651488b16cdf53bcb580957d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:7e:80:3f:02:e1:72:a1:a0:a0:44:2d:80:
                    b6:89:e6:df:d5:a2:05:ad:67:4a:8e:9b:2c:da:23:
                    f0:2d:ff:8d:87:90:ae:9d:d0:b5:96:06:7c:7f:3a:
                    c2:fd:ba:66:b5:a0:91:88:e1:c5:47:d9:61:fb:b5:
                    9c:48:fd:a8:60:3c:b3:09:36:e2:03:3e:93:8d:d3:
                    f8:a7:88:be:f7:8a:8d:89:97:5f:11:44:26:23:94:
                    30:59:0c:26:91:c4:ee:93:7c:3d:28:3a:4a:e9:4e:
                    63:98:73:b3:de:4b:40:4c:f1:20:4e:fd:5d:05:41:
                    3d:9d:1b:de:4e:17:36:d7:8b:14:b8:9a:9a:db:df:
                    cf:6a:4d:d7:05:9c:ef:04:64:07:4f:ef:3d:42:a4:
                    b4:c7:72:24:5b:3f:da:25:fe:9c:08:60:c8:b7:ca:
                    dc:87:64:84:17:c5:dd:57:99:e8:a0:19:86:a4:95:
                    70:01:80:ac:30:6d:60:df:c5:25:40:ff:09:19:e5:
                    84:31:da:35:36:2f:d2:fb:25:db:31:e1:b5:5a:a7:
                    f0:d6:6f:c3:d9:f0:a0:2d:73:2f:f4:70:7a:d0:8b:
                    c9:77:87:9e:e1:bc:cb:b2:19:95:28:2e:72:91:5b:
                    ea:bb:bc:ab:49:98:f3:ae:48:cf:b9:b4:07:0a:27:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:19:30:4F:8B:56:A6:9F:65:14:88:B1:6C:DF:53:BC:B5:80:95:7D
            X509v3 Authority Key Identifier:
                keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:44:85:bc:bb:13:71:6e:94:f7:16:db:59:ea:b8:f0:b2:f3:
         3d:10:0e:8d:b3:91:d9:79:a7:df:82:62:57:e9:13:69:08:58:
         86:e4:ce:c1:14:ad:41:75:ae:08:38:c8:55:6d:f2:12:c0:f8:
         73:c0:c0:f1:12:f0:b6:31:41:c4:0e:6f:43:49:ab:63:42:c0:
         4b:26:9d:61:dc:83:df:fe:40:26:5a:fb:3e:c6:8e:cd:5e:82:
         c9:30:1d:49:4a:28:47:03:66:c6:54:65:17:e6:59:4f:30:b3:
         8b:c7:cc:66:68:d9:06:87:c3:9f:bf:87:fc:2d:97:c8:55:d1:
         af:25:10:99:fb:de:7a:05:51:b4:38:d4:cc:1b:45:33:b2:5a:
         3a:60:03:2a:52:6b:02:b0:d7:c1:21:79:ec:a9:90:24:c3:98:
         ae:bb:54:ed:44:c7:20:aa:28:c2:31:77:1d:d7:89:7c:a0:c0:
         ed:78:85:91:af:20:f8:27:ff:f2:34:9f:61:bc:79:d9:e2:60:
         47:fe:3d:bc:80:11:a1:95:9e:2c:2c:cc:c8:db:2b:60:1b:ae:
         1c:ec:dd:6a:cd:a1:ca:49:44:51:ad:4f:76:26:7f:9f:7b:31:
         c1:d2:75:b4:4d:96:ef:69:87:83:4a:a8:f8:f5:68:4c:91:a0:
         29:09:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:43:00 2026 by rpki-client