Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File:                     1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier:          KULB3S4380Oo3eGCJgLO1iAUD/6toM8ZGl1GQDnxhCk=
Subject key identifier:   68:E2:4A:8A:6B:9A:0F:1F:97:6F:F6:14:BE:BA:1F:83:11:C7:57:35
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer:       /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial:       01A0024AAD8114D9C668F599D5FE03C3B81E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number:          0B3D
Signing time:             Fri 14 Aug 2026 22:00:43 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:43 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:43 +0000
Files and hashes:         1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: Dh5NimnS7gt3QXFb2yn++KVsl+1fZZQfbKJrUhS4Dw8=)
                          2: 93kiNNYoQc853Cz6ue8qioc2i3U.asa (hash: WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:ad:81:14:d9:c6:68:f5:99:d5:fe:03:c3:b8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
        Validity
            Not Before: Aug 14 22:00:43 2026 GMT
            Not After : Aug 15 22:00:43 2026 GMT
        Subject: CN=68e24a8a6b9a0f1f976ff614beba1f8311c75735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:e7:ba:7c:20:33:2c:44:1c:f2:6e:a8:1a:
                    2d:8f:1c:a5:b7:00:a2:48:fe:b4:77:ce:6c:c1:48:
                    7b:4a:5e:5b:30:68:99:42:b7:0b:2b:fb:b7:ac:ba:
                    1e:71:5c:f0:d6:66:8a:c6:39:03:0a:8e:8b:21:9a:
                    ef:58:5a:33:64:95:0d:1c:b0:6e:4c:91:3d:3a:4a:
                    67:32:9f:1b:b5:25:3b:48:ee:d3:8b:d0:54:47:50:
                    74:53:25:03:aa:4a:0c:28:e7:86:b7:0e:53:e1:c7:
                    35:64:1c:b4:26:5f:6f:84:dd:9e:9e:1c:af:a9:48:
                    65:9c:bc:02:9d:49:6e:9e:64:60:bc:02:62:76:56:
                    b0:37:aa:ee:20:ff:82:8b:4e:7d:0d:50:51:71:61:
                    db:de:f5:1e:b6:6e:9a:85:32:c8:58:ba:08:0e:b7:
                    73:5e:cc:b0:07:ed:a9:d1:5d:83:a0:6d:e1:12:89:
                    29:bc:bc:a9:47:73:a5:44:d4:dd:3d:96:d1:d2:85:
                    6d:f3:c2:6b:c4:3f:de:bc:a0:f1:16:15:e7:30:1c:
                    a2:1a:19:e4:a6:42:fc:df:1d:cd:8c:d6:eb:17:a0:
                    41:e1:df:ab:9a:53:6b:36:9a:9e:cf:ad:9c:e0:fc:
                    f2:71:be:ab:a9:7f:72:47:4d:ae:71:e6:82:2c:4d:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E2:4A:8A:6B:9A:0F:1F:97:6F:F6:14:BE:BA:1F:83:11:C7:57:35
            X509v3 Authority Key Identifier:
                keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:70:06:ec:39:d6:23:67:6c:01:ca:dc:b3:09:08:99:46:7b:
         2c:0d:f7:93:5d:d9:d6:28:d6:a9:58:26:ac:9b:89:c6:e9:4d:
         ce:e3:7b:17:27:a2:a0:b4:50:d2:65:83:25:65:8b:ff:cf:60:
         44:e9:4e:1f:1e:58:5a:cc:2d:18:a4:70:c3:8b:3b:d9:c3:f2:
         c7:5d:73:87:a6:53:06:e4:2a:d6:3f:31:23:d8:93:94:7d:d5:
         af:84:e7:24:c0:d1:4c:aa:ab:36:27:38:5e:b3:dd:a3:e1:61:
         e4:66:88:2a:eb:9f:94:0a:9c:b1:f9:c1:34:81:05:f7:67:07:
         92:25:43:23:06:43:85:37:1f:87:71:48:0b:15:ec:36:01:f5:
         a6:78:3f:f5:a9:92:1d:00:77:e8:bc:dc:fd:f8:c8:b8:35:18:
         fc:aa:62:dc:5b:f7:3f:0c:b0:92:f6:6f:3b:a3:c4:79:d8:52:
         22:ed:e2:ab:47:68:ef:ea:e3:ae:95:a2:9b:94:af:48:b7:08:
         b3:fd:f0:95:82:03:23:fc:99:8b:95:8d:08:12:94:94:83:69:
         ed:62:fe:3a:3c:43:33:13:a2:97:b3:7b:7d:00:f7:36:3d:15:
         bb:95:ca:51:e6:a3:13:e0:a3:56:27:43:2f:0b:fd:c4:69:8b:
         98:db:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:30 2026 by rpki-client