Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
File:                     Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft (raw, json)
Hash identifier:          Y8ORGUUsuUcp5vv55p7i13hEbVaLYkYQouhSg2fcnJE=
Subject key identifier:   94:AB:1C:F9:43:47:95:32:C3:66:FE:B8:14:99:94:67:3F:99:90:14
Authority key identifier: 1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
Certificate issuer:       /CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Certificate serial:       01A17BF25425C9092BAE3CA07E0B761EF6CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
Manifest number:          013E
Signing time:             Tue 27 Oct 2026 06:00:41 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:41 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:41 +0000
Files and hashes:         1: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl (hash: 3Hwl6qCaLtLLYXFZv2bs0J2UGTns8LmFmmkGvF/c8wg=)
                          2: nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa (hash: 6zSk/eu9Fh0Y0k4njwXKHhSTfWBnk84TWmm0U218WXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:54:25:c9:09:2b:ae:3c:a0:7e:0b:76:1e:f6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ede33150c1d268dae3b04d2aa69e30430816f61
        Validity
            Not Before: Oct 27 06:00:41 2026 GMT
            Not After : Oct 28 06:00:41 2026 GMT
        Subject: CN=94ab1cf943479532c366feb8149994673f999014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:06:8b:14:94:f2:aa:20:03:74:3a:ee:45:
                    c0:13:2a:a0:ad:da:26:99:65:52:ef:1b:83:30:d3:
                    89:3d:5c:24:54:c5:ed:98:33:2c:3c:db:21:7f:f7:
                    90:2a:5f:42:e0:73:9c:ea:ee:06:b1:67:42:1d:65:
                    41:0b:82:8f:c8:47:d2:a9:99:9d:c2:b8:76:0b:d9:
                    9b:30:46:e4:09:36:f2:54:2f:30:6b:f0:ee:e4:09:
                    91:ee:9e:8e:9b:8f:8f:76:36:33:b4:ad:f0:28:a8:
                    c7:f1:40:1b:99:e7:47:f0:7d:9f:f9:4e:f8:db:04:
                    3a:b3:27:d3:19:3d:33:0e:db:db:c4:ea:bb:80:e8:
                    9a:f8:22:03:0f:00:e4:9a:38:da:5e:4d:5a:b6:ad:
                    fd:df:02:c7:38:02:cc:0c:44:84:11:d5:81:72:c1:
                    55:26:a3:59:11:20:24:68:f6:56:5f:62:03:c2:74:
                    f0:61:4b:7e:4c:24:e9:28:c2:34:a7:94:5c:67:0e:
                    99:aa:46:83:15:bb:ad:68:52:3f:b7:71:bc:45:61:
                    cd:b6:14:dc:72:68:0d:93:d9:8c:d9:04:77:c0:f2:
                    57:16:3d:d6:7f:1f:e0:a6:24:ea:60:59:bd:ce:5a:
                    15:e0:44:0f:21:48:7f:5a:14:ee:21:44:e2:31:9d:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AB:1C:F9:43:47:95:32:C3:66:FE:B8:14:99:94:67:3F:99:90:14
            X509v3 Authority Key Identifier:
                keyid:1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:c5:65:df:07:75:89:f2:a0:63:80:fa:78:29:a7:e8:7f:
         8b:7b:70:68:f7:f1:19:34:bd:34:10:99:98:36:e9:42:85:22:
         8a:3c:3f:58:71:e4:8c:28:46:57:78:55:d9:3e:2a:22:3c:1b:
         ff:3f:39:ba:12:81:0c:03:ae:89:c3:a5:7e:f9:60:97:0a:1a:
         53:12:4d:81:44:cf:62:ef:60:c8:d3:c7:4a:5b:9a:70:5e:37:
         97:21:ae:8e:a8:83:af:d4:f6:be:20:dc:01:85:72:8e:93:a0:
         62:b9:a6:2d:a2:46:3a:c6:2b:0c:0d:33:c6:9c:95:5f:2f:5f:
         66:70:af:cf:6e:48:76:e9:52:65:7a:62:6a:41:2e:c1:2a:14:
         1b:7d:73:d9:5d:c5:71:b3:ec:06:40:0a:e8:ec:28:96:5e:99:
         72:a3:f2:3b:4b:7e:d9:95:b9:69:3f:82:e9:10:91:ec:04:6e:
         32:1d:fb:55:9a:83:c0:f7:ed:6a:f5:1a:03:d8:f0:91:98:b9:
         02:e8:87:31:46:35:a9:5c:9c:72:0d:e6:14:4c:13:de:c0:b6:
         4a:03:b5:db:0f:36:4d:cf:85:00:4d:20:74:12:41:bf:ac:6d:
         78:71:7a:b0:43:ab:b6:78:0f:7e:f5:9b:42:60:ec:e6:25:12:
         12:89:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:26:19 2026 by rpki-client