Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File:                     HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier:          PKteghOrS8I6b9tDcAk06oakag5o1QfW+uLgaiJtSPo=
Subject key identifier:   27:FD:2F:8B:25:EE:F7:7E:02:44:59:C1:52:5D:BE:F9:61:A8:0C:2F
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer:       /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial:       01A0852F61F03632CFC74C806BEF5107385F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number:          1641
Signing time:             Wed 09 Sep 2026 08:01:09 +0000
Manifest this update:     Wed 09 Sep 2026 08:01:09 +0000
Manifest next update:     Thu 10 Sep 2026 08:01:09 +0000
Files and hashes:         1: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: o9VKTAshG+fjNz9+akhru5tJVU5vO3MGroq1UqmJYQI=)
                          2: Pa-REvh5sObWkBoz7bJgJfUNNtY.roa (hash: VTVwzFjol2i2vqCqnvi41UK4vnNgLEigWpUo/HfYOUM=)
                          3: TJCGzUQHxg4bwyTZRd9MjPgDFco.roa (hash: mDKYo4+PY4/xDJecNKQRG7i12NJwnq+4UMvwsAIjYeA=)
                          4: etcUvrpfPKP_RFS8q4I2oRGtIpU.roa (hash: QazyHRaqwRmfbynAWmgSgFTPgoxpLo3PBLZtnvBUmtQ=)
                          5: olVKrDWOXV-cZqa6YCvyS1EAmtw.roa (hash: DtRokaXbwlYUqcYONE6Ad45+vRoun3fYTMXSmpbmsOQ=)
                          6: pYGVbv4voC-r48uG-RyVLygkJXo.roa (hash: Xfgs3GY90UOV9OHOemeveUcmPpqz9KE7PoOqb01izow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:85:2f:61:f0:36:32:cf:c7:4c:80:6b:ef:51:07:38:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
        Validity
            Not Before: Sep  9 08:01:09 2026 GMT
            Not After : Sep 10 08:01:09 2026 GMT
        Subject: CN=27fd2f8b25eef77e024459c1525dbef961a80c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:00:0e:be:2c:8d:b0:de:d8:d0:e6:21:4e:
                    44:22:4b:57:99:62:e3:7c:a6:f1:ac:ab:aa:44:ad:
                    e1:54:d6:36:fd:e1:8c:6f:cd:c1:87:13:41:c9:be:
                    ad:05:7d:03:f0:11:ff:55:bf:5a:59:fb:31:f3:c1:
                    36:e4:7b:5d:1e:fa:ff:46:11:72:44:00:b3:93:ba:
                    37:d6:a4:a4:4b:6c:d3:b6:5e:0e:6a:16:a0:72:03:
                    82:36:04:de:f9:5a:f6:a8:87:e0:60:b7:45:cb:15:
                    a1:d6:90:ef:7f:3e:2d:3c:a6:b3:61:b7:9d:fe:84:
                    03:b1:6b:15:bf:d2:b2:ff:4a:37:53:18:bd:aa:38:
                    48:5f:d3:62:6c:d2:0a:54:cd:1d:64:49:03:06:6a:
                    a1:4f:b4:e6:71:f2:21:c5:93:46:00:ce:09:e4:4a:
                    5b:7b:eb:8c:0e:ad:95:49:22:d5:a5:c8:30:10:8e:
                    c9:98:ee:9b:7b:2b:f2:de:84:bd:ac:76:c1:94:55:
                    e5:f3:60:37:56:18:44:db:0b:b9:a4:a2:3b:51:23:
                    0d:db:26:af:60:ea:71:ef:48:76:80:da:20:40:5e:
                    6d:35:d2:f6:19:fb:f5:a3:dc:00:07:5f:ff:56:26:
                    1e:aa:2a:9e:d3:14:41:61:3b:d5:d8:16:30:35:9f:
                    f9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FD:2F:8B:25:EE:F7:7E:02:44:59:C1:52:5D:BE:F9:61:A8:0C:2F
            X509v3 Authority Key Identifier:
                keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:51:f1:2e:ce:ed:51:9a:c6:c8:3f:eb:24:9e:69:97:d2:aa:
         be:ee:14:64:f9:93:0e:4f:e0:ef:c4:2a:3b:6d:06:03:98:94:
         b5:96:9c:ac:bc:48:8b:66:b3:a9:b8:64:71:63:ef:e6:8f:95:
         20:90:a4:8f:d0:fe:4a:a9:c9:7f:f1:0f:6a:a4:71:c7:dc:24:
         f8:9d:92:93:77:2d:39:2a:b6:18:24:c3:6e:fb:95:b6:9d:11:
         f9:0c:70:06:50:a3:20:25:ad:91:8d:5e:53:1e:5a:7a:4b:38:
         e1:c9:2e:c6:51:fb:2e:a5:e7:9e:ac:fb:72:3b:2f:ed:7c:b6:
         c1:e2:cc:c4:54:89:1c:70:95:42:eb:7f:83:33:60:ab:9f:f9:
         52:7f:13:c3:e4:94:6f:99:47:32:f7:91:32:74:76:1c:49:3b:
         46:93:1d:b8:25:c7:00:2f:d9:1a:a2:34:3e:dd:37:36:e0:34:
         25:df:4f:89:70:b1:44:47:94:19:95:a5:6f:3d:92:79:e2:9f:
         22:a0:b1:6e:38:db:53:ee:b6:00:83:57:7a:3e:65:3e:81:2e:
         3e:b3:54:c7:78:2f:22:e7:01:59:73:96:d3:d4:ae:75:ff:e5:
         68:bb:9c:f5:de:e2:ca:70:f9:43:da:56:14:b9:33:0c:76:ea:
         83:e9:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:35:47 2026 by rpki-client