Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
File:                     1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json)
Hash identifier:          ScfjrXKOGGyKBsawknvtpLEfUJmVkIudEl/IK1oOj14=
Subject key identifier:   1B:7E:AC:8A:2B:87:6D:C6:D8:7B:90:00:F4:C5:83:1F:6F:3D:BE:A3
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       01A08ED777307B993EADEE9D2D47ADC8D619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
Manifest number:          1612
Signing time:             Fri 11 Sep 2026 05:01:20 +0000
Manifest this update:     Fri 11 Sep 2026 05:01:20 +0000
Manifest next update:     Sat 12 Sep 2026 05:01:20 +0000
Files and hashes:         1: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: f+PuVv3i2rOuudoJnoXb2SiMSpuN2+N5oXj+djVXGFQ=)
                          2: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (hash: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q=)
                          3: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (hash: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ=)
                          4: UcCqMTHisbto-8lkUT_tLgAeR84.roa (hash: MKKos7zvQxC3AHlxEIyIz2TorbEhj+M5Gg1Z5qYM5Vw=)
                          5: dKrxZh5eXZLlr4ulHUj3rX7iLKw.roa (hash: 3Y0TgUH+fONslolgRyWTVgCSVHlc4/LZlKQTJy+uJA8=)
                          6: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (hash: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc=)
                          7: zNwZgS-KWr_tdZQlJYw7r-bncj4.roa (hash: bFzYQzvtRgyI5Sf4GLvJJ0QPWEhrGxWF/aPyki12aFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:d7:77:30:7b:99:3e:ad:ee:9d:2d:47:ad:c8:d6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Sep 11 05:01:20 2026 GMT
            Not After : Sep 12 05:01:20 2026 GMT
        Subject: CN=1b7eac8a2b876dc6d87b9000f4c5831f6f3dbea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:f5:61:a0:85:e1:0d:f0:74:aa:af:d2:70:
                    ae:0c:5b:b1:4f:b4:65:3e:b1:cd:8d:9c:b6:00:bf:
                    ad:d7:30:d7:77:e0:2c:16:2f:46:30:50:b3:85:ae:
                    d3:4e:d3:47:72:6e:64:f3:89:e2:cd:a0:41:bb:af:
                    c2:ff:20:ac:52:d4:c1:1a:30:a6:af:ac:cd:a0:31:
                    ed:94:0f:a2:3a:5f:af:c8:a4:27:be:49:1d:c5:6e:
                    37:e6:db:9c:e0:cc:bc:09:d8:b8:37:51:54:b4:51:
                    9f:f7:6e:73:6a:2a:6e:c6:bc:a5:a6:98:fa:ad:65:
                    df:37:51:5b:24:63:41:d6:2c:6c:29:d4:81:31:fb:
                    1a:e7:23:6e:6b:5e:2d:1b:52:31:b7:1b:33:cd:e6:
                    14:e6:5a:6b:1d:1c:27:5e:51:4b:d2:5f:8a:24:96:
                    9d:70:f4:25:06:81:cc:77:74:01:8c:1a:99:13:59:
                    e6:77:e3:a0:0c:95:4e:0b:a4:1d:ee:b8:64:e9:4e:
                    ac:9c:cc:88:49:86:aa:fe:80:52:6e:4b:40:fe:74:
                    28:9a:b1:04:66:18:3e:40:4e:2d:a7:3f:6a:1e:6c:
                    51:92:c2:41:29:fd:ec:c5:5e:bf:2b:76:0b:28:f1:
                    98:10:e2:85:a5:58:f3:58:84:9d:0b:4b:31:36:0a:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7E:AC:8A:2B:87:6D:C6:D8:7B:90:00:F4:C5:83:1F:6F:3D:BE:A3
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:4c:fc:fe:d6:a6:6f:b2:69:01:79:24:91:80:2e:ee:92:
         84:04:a0:1e:92:d6:19:86:4e:60:2a:5a:82:f6:1c:3f:03:8b:
         76:00:89:86:2e:34:b8:1f:77:0a:08:c1:bc:6e:49:b4:6e:ee:
         6a:0e:1a:02:af:75:b2:b6:e2:66:a5:c0:66:16:37:8a:3b:43:
         37:b3:e3:0e:80:5a:9f:03:6e:b1:fc:22:8e:a9:bf:da:6f:77:
         e5:45:a6:c7:e8:f2:91:78:d4:91:d9:48:d2:01:58:bd:53:45:
         47:94:08:02:b8:6b:28:96:da:7b:5b:b4:56:82:97:cc:4a:66:
         a6:43:26:dc:00:d2:93:2f:b8:c3:e0:50:3c:6d:cd:d3:c3:7e:
         44:7f:29:eb:a9:cb:a9:95:09:7f:1d:68:80:00:61:f5:e7:70:
         c2:c1:40:b2:47:25:d5:b9:af:c6:ea:d8:1a:9a:9b:bd:c4:8c:
         9f:8f:ad:d3:f6:59:9a:01:f3:b5:78:ed:0b:16:99:bb:86:dd:
         e3:31:9f:c3:bc:d4:55:e1:59:01:ec:a7:d4:b6:c8:25:35:2c:
         de:61:66:8e:39:1c:7d:52:dd:9a:6f:89:70:8e:8b:35:20:cd:
         6f:09:1f:63:64:9e:b6:56:c7:9a:c5:64:b3:12:9d:52:9e:2d:
         bf:6a:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:35:20 2026 by rpki-client