Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
File:                     Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft (raw, json)
Hash identifier:          PXpZXgZ6mxzh9xcPVD92o/LaK7mFMnP5VHMWoFaG8oo=
Subject key identifier:   25:77:E3:0B:7E:17:3F:C4:61:E1:31:A4:89:78:1D:CB:24:24:C1:11
Authority key identifier: 1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
Certificate issuer:       /CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Certificate serial:       01A08C7BB87D2723ABED203301D9E335EFAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
Manifest number:          C2
Signing time:             Thu 10 Sep 2026 18:01:53 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:53 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:53 +0000
Files and hashes:         1: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl (hash: pCqiHQgJ5KkHS81MFbSqHHNiL8QCOVgxExOS2jl237w=)
                          2: nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa (hash: 6zSk/eu9Fh0Y0k4njwXKHhSTfWBnk84TWmm0U218WXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:b8:7d:27:23:ab:ed:20:33:01:d9:e3:35:ef:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ede33150c1d268dae3b04d2aa69e30430816f61
        Validity
            Not Before: Sep 10 18:01:53 2026 GMT
            Not After : Sep 11 18:01:53 2026 GMT
        Subject: CN=2577e30b7e173fc461e131a489781dcb2424c111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:fe:c6:3f:84:54:70:01:cd:6c:5f:47:be:
                    35:7f:62:4d:67:1c:5e:8b:86:85:29:7e:2a:f0:6d:
                    65:2b:5f:cb:10:90:e7:b9:3c:11:34:81:65:05:b2:
                    a4:64:90:d5:b1:21:17:82:55:1a:7d:84:bb:29:d6:
                    fd:78:15:11:06:5d:d2:86:90:d9:65:39:8f:69:02:
                    da:fb:0a:4e:ab:51:46:dd:f8:71:12:a7:97:b6:c1:
                    25:44:72:63:a8:57:c0:6a:a5:ec:de:25:b9:fc:18:
                    52:1a:a2:ac:ec:bc:d8:8f:35:89:86:68:78:de:82:
                    70:d3:bb:3a:31:0d:47:95:37:d2:c7:bd:69:ac:b5:
                    98:d7:11:b3:62:5c:4e:23:72:71:1f:5e:1d:80:d9:
                    be:73:89:c8:6f:2f:57:6f:31:72:03:8f:97:82:a9:
                    f2:20:39:67:3d:fc:07:46:31:a3:bc:7b:65:46:46:
                    7a:04:17:d6:e2:25:41:db:8b:24:71:4d:23:d7:2c:
                    06:99:49:34:06:e9:a5:bd:25:17:e3:2b:47:98:5f:
                    cb:54:31:2e:74:10:f7:fc:52:9a:1a:0b:81:7b:21:
                    eb:2a:fa:7a:05:b6:6a:16:6d:8b:9f:e8:16:9f:cf:
                    ec:cc:7c:19:d5:2f:ad:8b:ee:7a:28:3b:21:a6:bc:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:77:E3:0B:7E:17:3F:C4:61:E1:31:A4:89:78:1D:CB:24:24:C1:11
            X509v3 Authority Key Identifier:
                keyid:1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:97:2d:94:80:47:7f:38:59:4f:96:dd:7e:8c:d2:03:88:81:
         78:5e:c2:4c:bd:ee:05:9e:20:45:b3:1c:3f:7b:80:7c:d7:23:
         94:bd:54:6d:40:07:34:ab:a7:dd:6d:95:12:56:90:c0:c8:3b:
         a8:22:18:cd:5d:46:e0:25:4e:8e:0c:73:d8:11:4e:5e:67:c9:
         9c:10:09:10:c4:46:85:14:78:33:a3:86:0c:3a:d2:a7:e2:1f:
         96:07:dc:45:af:bc:54:28:01:a0:52:ab:d5:c0:9a:89:a6:f6:
         54:23:52:1e:84:7a:56:bd:2e:a7:1f:17:62:40:b0:4f:4e:ec:
         3e:c2:49:72:3f:1d:c2:1c:59:41:6e:1c:f3:45:7a:fb:12:21:
         33:d2:45:76:dd:b2:e3:d0:3a:4c:c7:36:db:c9:fb:e3:ad:9d:
         d9:95:6f:48:9d:99:b4:34:ca:d7:d3:cc:ef:ea:85:d5:97:03:
         48:3c:79:70:c7:7b:b7:2a:28:aa:4d:45:db:29:9c:25:c4:a6:
         23:7b:6f:42:83:6e:5e:48:db:3d:59:11:a7:1b:9f:a0:dc:b7:
         9f:f5:61:ec:4d:87:43:5c:92:51:90:03:3f:ef:dc:30:06:8a:
         3f:9e:9d:c3:87:08:4c:0c:db:3e:4f:aa:20:8e:62:00:9d:76:
         a5:80:f8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:04 2026 by rpki-client