Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File:                     HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier:          +CD/3ld3T3tO47NRhjT84lem/tBYQUOPwVfJ4mVcsKc=
Subject key identifier:   CC:8B:AB:E7:3A:BD:A6:04:5D:B6:83:64:E9:62:E4:51:15:12:BB:C4
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer:       /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial:       01A0016FA53B27D73E640C4BFB8A96C31EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number:          0F22
Signing time:             Fri 14 Aug 2026 18:01:28 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:28 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:28 +0000
Files and hashes:         1: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: 4IABodNkCdP4L/g3qSIPaxb7rWgCRukwtaacSlgdNL8=)
                          2: bdOQfAWdL7wiwVEQoYOuUBY_f9o.roa (hash: nNRgBnyPBnuWyk/W/uELLwEd7uoijhFF49TNbx1XS78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:a5:3b:27:d7:3e:64:0c:4b:fb:8a:96:c3:1e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
        Validity
            Not Before: Aug 14 18:01:28 2026 GMT
            Not After : Aug 15 18:01:28 2026 GMT
        Subject: CN=cc8babe73abda6045db68364e962e4511512bbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:e2:0c:78:05:f2:70:df:e3:0a:95:65:73:
                    4f:97:1d:f8:bd:f9:80:f4:0b:de:ab:01:47:81:63:
                    d5:c6:b6:59:a4:a7:47:df:dc:15:e3:96:62:24:f8:
                    00:5b:a3:df:bd:40:9b:af:f2:e4:22:1e:1f:6f:00:
                    3e:46:b6:c3:5e:38:a4:78:ee:f5:28:b1:72:0a:c6:
                    ef:39:eb:c5:6f:bd:1a:ad:1b:e9:d7:4a:be:c4:60:
                    60:01:01:56:4c:8a:9f:77:76:4b:3b:f0:c2:a5:b9:
                    89:15:aa:78:43:eb:1e:03:39:5f:1d:79:b4:19:ac:
                    1b:69:d3:ec:64:02:23:f6:fb:d6:c7:e2:25:bd:92:
                    d6:ba:6f:4f:4b:0d:3f:60:ed:94:d9:f9:ef:11:26:
                    3f:1d:bb:b1:3a:c1:1d:47:b4:b9:3d:c0:53:50:d9:
                    44:d0:df:16:91:df:be:ce:67:64:ac:67:a2:5d:9b:
                    9c:c8:5b:62:90:d4:22:ea:4f:73:01:ab:9f:5e:3d:
                    66:d5:67:76:ff:19:36:5c:8a:92:a5:24:ca:da:d8:
                    1d:85:90:13:9c:26:0f:d0:91:8d:f3:53:13:83:3d:
                    ca:2c:3a:f3:a1:b8:6b:aa:bf:37:a7:6d:5a:4a:67:
                    8c:97:43:18:64:bd:c0:22:1f:39:61:cb:9b:ab:79:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8B:AB:E7:3A:BD:A6:04:5D:B6:83:64:E9:62:E4:51:15:12:BB:C4
            X509v3 Authority Key Identifier:
                keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c4:9b:41:70:ed:d1:b0:0a:14:75:49:9f:43:e7:9c:bd:4c:
         7f:c4:99:84:97:7e:d4:59:39:84:b7:49:9a:33:4f:fb:a0:98:
         5c:22:a7:8b:8e:2d:f6:c3:65:5d:f4:61:54:9c:86:db:49:ef:
         82:b8:8a:3b:44:9b:be:fa:47:19:a4:fa:23:64:8d:b6:5e:cf:
         f9:ff:77:8c:78:1f:af:9d:42:38:62:6a:79:d1:eb:38:93:ec:
         08:58:cb:bc:da:f1:25:f7:98:ea:e2:69:13:44:77:f1:e2:d6:
         37:68:ef:62:c1:18:a4:73:b9:46:e4:d7:20:ae:e8:64:16:87:
         22:65:db:31:e1:b1:00:4b:71:41:91:ed:47:86:c8:d0:52:ce:
         81:3a:d2:f4:ea:c8:17:46:92:da:82:1c:88:03:de:b6:ec:8e:
         5a:29:11:14:96:e2:90:ac:7f:f3:ba:c1:48:06:a0:3c:22:f1:
         47:59:6b:a1:58:e4:76:97:1e:dd:e2:fc:f8:95:5c:23:f2:a2:
         a5:12:86:54:a2:40:a6:95:aa:dc:7a:57:d2:e0:88:22:ee:f3:
         2c:2d:94:25:8e:32:9d:73:54:43:98:d0:99:05:f5:c0:32:75:
         fd:d6:b1:07:42:ca:90:ef:9b:6a:b3:8a:3f:f6:e4:e8:9e:31:
         c2:c9:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:00 2026 by rpki-client