Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
File:                     HTHgIH7TynaEoD6I-aHeKSLdRd4.mft (raw, json)
Hash identifier:          cKXNfoQqNR5tu72y4kNbvngwifrQfRabSJPlbZlVD5A=
Subject key identifier:   9B:19:F5:F7:8D:42:E4:FF:66:10:1A:3C:8B:91:D4:7A:54:0B:F1:34
Authority key identifier: 1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
Certificate issuer:       /CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Certificate serial:       019FF9B5E624A2B7C2F3176C49F4CEE53609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
Manifest number:          05A5
Signing time:             Thu 13 Aug 2026 06:01:15 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:15 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:15 +0000
Files and hashes:         1: HTHgIH7TynaEoD6I-aHeKSLdRd4.crl (hash: msU+SaN8dvWYYeYgFfH+6ajaIpFbru3kGFNtgJuLdH4=)
                          2: JF1S5nChkcbeHK1YmZzl8eEwqB8.roa (hash: wmxaRB1M5Kn+LV3DtXz/lQpX7fY1n782f7y8VXUfVvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b5:e6:24:a2:b7:c2:f3:17:6c:49:f4:ce:e5:36:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
        Validity
            Not Before: Aug 13 06:01:15 2026 GMT
            Not After : Aug 14 06:01:15 2026 GMT
        Subject: CN=9b19f5f78d42e4ff66101a3c8b91d47a540bf134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:8e:04:0c:7f:55:88:f7:78:27:6d:ea:be:
                    9e:c4:e9:4e:2e:39:03:ed:fe:66:dd:53:f7:f9:b1:
                    20:4c:a9:c6:56:7e:b9:d7:61:35:47:27:fe:c2:88:
                    e4:8d:50:cf:11:1b:22:2f:14:37:5f:91:fd:b7:0b:
                    c7:9b:c5:04:c3:b3:16:ab:fc:c3:37:1f:b6:38:3d:
                    98:02:3e:c5:43:4e:c4:a7:92:93:fe:e4:7a:a5:b0:
                    59:b5:4f:7a:5b:1b:d0:1b:61:a6:08:fe:15:28:c7:
                    ad:68:e7:52:29:53:59:87:7e:c3:80:3d:87:fa:98:
                    e0:72:c9:9d:41:eb:8b:27:85:f0:54:aa:55:df:16:
                    ab:d7:b7:ce:70:f7:a5:01:2d:ec:f9:02:75:c6:90:
                    3d:f7:0b:34:19:38:2d:21:d7:7f:d9:e2:84:93:37:
                    49:61:ed:d3:35:15:b5:02:fd:16:4d:89:db:14:49:
                    05:98:1f:b0:88:7a:f7:8b:ab:d5:f3:07:e3:79:34:
                    0f:43:65:4f:0b:2f:b7:ee:16:b8:02:08:89:38:e0:
                    c7:2d:f3:86:80:cc:59:d1:19:0c:32:54:89:90:f3:
                    28:01:55:24:eb:8c:3d:6a:a0:39:cf:91:d9:59:16:
                    40:90:8f:ab:18:79:b6:02:df:0c:52:8a:c3:07:fa:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:19:F5:F7:8D:42:E4:FF:66:10:1A:3C:8B:91:D4:7A:54:0B:F1:34
            X509v3 Authority Key Identifier:
                keyid:1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:be:0b:8c:23:3c:fc:5a:2a:d7:19:a7:59:aa:13:38:65:00:
         72:11:b9:1d:18:6b:d0:23:24:17:c5:85:5f:9a:d9:7d:dc:5d:
         38:54:8d:44:a3:3f:8c:17:54:6b:ec:d3:9a:96:9b:8f:42:1c:
         60:87:04:9e:1f:75:a1:c2:6a:66:26:8f:1a:f4:22:f0:d8:26:
         94:87:10:e3:58:c3:ac:f2:b4:57:f9:2b:4d:e7:ec:fa:f8:ea:
         fb:7b:f8:7c:23:e9:a9:b7:0d:f9:36:3f:d8:d0:03:61:3a:9f:
         34:3c:e5:53:ee:73:ef:71:47:d6:39:4b:5b:a5:9f:56:87:71:
         8d:4b:63:e1:3e:6e:6c:9e:63:60:a0:1e:57:3d:5b:db:a7:6c:
         16:3f:7e:44:f8:67:ba:af:c7:ef:51:a8:dd:93:51:22:28:51:
         d4:28:d8:09:49:ff:c6:23:d5:38:1e:12:b6:70:8c:3d:da:bb:
         39:fd:2b:8f:5c:54:84:6d:b4:03:7d:24:01:eb:01:e9:4b:8a:
         a1:32:85:f8:33:be:8b:c2:4e:a7:20:d2:f2:ec:8a:02:29:5f:
         d3:6a:22:3c:ec:d7:9a:45:41:96:b5:60:23:3e:59:57:48:1e:
         0f:b3:45:58:43:1e:23:9d:b6:08:02:65:9c:92:b1:93:cb:fb:
         6d:23:c2:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5teYkorfC8xdsSfTO5TYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzFlMDIwN2VkM2NhNzY4NGEwM2U4OGY5YTFkZTI5MjJk
ZDQ1ZGUwHhcNMjYwODEzMDYwMTE1WhcNMjYwODE0MDYwMTE1WjAzMTEwLwYDVQQD
Eyg5YjE5ZjVmNzhkNDJlNGZmNjYxMDFhM2M4YjkxZDQ3YTU0MGJmMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUGOBAx/VYj3eCdt6r6exOlOLjkD
7f5m3VP3+bEgTKnGVn6512E1Ryf+wojkjVDPERsiLxQ3X5H9twvHm8UEw7MWq/zD
Nx+2OD2YAj7FQ07Ep5KT/uR6pbBZtU96WxvQG2GmCP4VKMetaOdSKVNZh37DgD2H
+pjgcsmdQeuLJ4XwVKpV3xar17fOcPelAS3s+QJ1xpA99ws0GTgtIdd/2eKEkzdJ
Ye3TNRW1Av0WTYnbFEkFmB+wiHr3i6vV8wfjeTQPQ2VPCy+37ha4AgiJOODHLfOG
gMxZ0RkMMlSJkPMoAVUk64w9aqA5z5HZWRZAkI+rGHm2At8MUorDB/p5MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsZ9feNQuT/ZhAaPIuR1HpUC/E0MB8GA1UdIwQY
MBaAFB0x4CB+08p2hKA+iPmh3iki3UXeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRIZ0lIN1R5bmFFb0Q2SS1hSGVLU0xkUmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83MzBlMzgtZmY4OS00M2UxLTk0ZmUt
YTFiNzc4ZjRkMDdkLzEvSFRIZ0lIN1R5bmFFb0Q2SS1hSGVLU0xkUmQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83MzBlMzgtZmY4OS00M2UxLTk0ZmUtYTFiNzc4ZjRkMDdk
LzEvSFRIZ0lIN1R5bmFFb0Q2SS1hSGVLU0xkUmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArL4LjCM8
/Foq1xmnWaoTOGUAchG5HRhr0CMkF8WFX5rZfdxdOFSNRKM/jBdUa+zTmpabj0Ic
YIcEnh91ocJqZiaPGvQi8NgmlIcQ41jDrPK0V/krTefs+vjq+3v4fCPpqbcN+TY/
2NADYTqfNDzlU+5z73FH1jlLW6WfVodxjUtj4T5ubJ5jYKAeVz1b26dsFj9+RPhn
uq/H71Go3ZNRIihR1CjYCUn/xiPVOB4StnCMPdq7Of0rj1xUhG20A30kAesB6UuK
oTKF+DO+i8JOpyDS8uyKAilf02oiPOzXmkVBlrVgIz5ZV0geD7NFWEMeI522CAJl
nJKxk8v7bSPCWg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:22 2026 by rpki-client