Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          ji+5S/ObA9G6XlGALtjL5iw5Vspdi/0VYp0OtvKofoc=
Subject key identifier:   3C:5D:18:D2:C7:5A:E7:DF:94:47:B7:3C:56:47:50:92:46:25:9B:E9
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       01A03D16720D28AAEAAAB29F591CDD30B369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          1544
Signing time:             Wed 26 Aug 2026 08:01:16 +0000
Manifest this update:     Wed 26 Aug 2026 08:01:16 +0000
Manifest next update:     Thu 27 Aug 2026 08:01:16 +0000
Files and hashes:         1: 2ykxp1RC0SDW_olwDTCv-_MLiXQ.roa (hash: lHkNZLkgWFsMzYreyxJfbV91bR62pQ6AlcQ7rRHMjNM=)
                          2: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: byJR6IL8wNYDPs3rFtR614XM01eHnVm4+WmzJbeLnMs=)
                          3: Vhg0NY4jLKFZehorU_HupjxbgqM.roa (hash: ZZVk+nzM5sjrEyBiJMYznTGMxJYwAgph6Xy/eIIAOF0=)
                          4: wLlS8Jywk1Z2A3Ni9ePUaXlglZA.roa (hash: HsiaEAzxY6GNFLXp4J8wvPh2SdvP1m/Tm0n/2wRXxXs=)
                          5: zLPd6uaNhEYIigV3kvzlHJIvTH4.roa (hash: tk6Y8DqBSL9/1u7Y9F6ipEsLVlx2f1XyZLdRg6GvQEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:16:72:0d:28:aa:ea:aa:b2:9f:59:1c:dd:30:b3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Aug 26 08:01:16 2026 GMT
            Not After : Aug 27 08:01:16 2026 GMT
        Subject: CN=3c5d18d2c75ae7df9447b73c5647509246259be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:16:ab:1f:2e:26:4b:ee:ad:b7:4f:bc:fe:
                    4a:84:a2:66:98:d5:00:65:08:b2:75:b2:cf:ae:be:
                    5e:b6:ff:f0:47:53:6e:c3:b6:cd:8e:15:99:50:f0:
                    fd:18:fa:ab:8b:16:3d:df:ff:30:7c:06:96:e4:53:
                    b1:d7:74:46:83:ba:5f:fa:69:72:ef:68:86:dd:4b:
                    bc:1e:2f:53:d9:8e:8a:e4:c0:d6:39:f6:24:8b:c0:
                    67:f1:19:8c:93:cd:6c:9b:5f:5c:cc:13:f2:04:02:
                    6d:66:44:08:75:0c:89:a0:44:14:8e:fc:9f:7f:0b:
                    bb:8f:84:c5:66:a0:6e:54:df:b0:93:6f:f2:a6:c4:
                    ff:49:11:3c:83:50:f3:9f:4a:94:fa:23:20:af:bb:
                    ff:70:96:6b:8a:5b:8a:25:80:96:bc:42:26:05:b9:
                    6a:ca:e5:e9:b1:52:7b:e4:ab:bd:8a:a9:c0:91:0c:
                    bf:c8:74:b1:62:db:52:68:82:fb:ec:f5:54:e7:5d:
                    31:73:bc:25:51:c1:38:f8:6a:76:0d:c4:b2:61:05:
                    f5:bc:60:ad:df:64:0a:ff:40:df:b4:a3:0e:22:64:
                    b7:b1:8b:25:74:5e:8e:92:91:08:d8:d2:b7:07:3b:
                    6e:07:a8:eb:1f:96:85:22:1d:76:cf:e9:57:c9:78:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5D:18:D2:C7:5A:E7:DF:94:47:B7:3C:56:47:50:92:46:25:9B:E9
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:13:67:99:fc:c0:d8:76:e7:7c:62:8e:ca:76:f7:b3:68:f7:
         76:39:4e:54:f1:e8:b8:ad:7f:f3:9a:dc:5f:37:bd:3a:a2:84:
         53:47:51:67:1d:82:37:40:35:c3:b2:51:85:12:fd:a4:10:dd:
         ef:19:f8:a1:8b:ea:da:a6:46:28:8c:99:8e:27:e9:f0:11:88:
         71:45:9f:4b:9c:97:20:fd:f2:4b:11:28:7f:c3:1e:f5:07:e3:
         47:ec:6e:b3:a2:1d:f9:1b:a0:68:04:35:c2:98:26:24:79:ee:
         e6:21:ca:29:43:e8:53:6e:3f:6c:cc:d3:20:c9:98:55:de:23:
         61:d2:96:8c:95:14:d9:0d:82:ef:b2:df:5e:0c:a4:6f:f1:b4:
         fd:a9:45:bb:1c:20:d9:bb:a1:93:b7:9e:fb:14:65:99:88:24:
         72:6b:94:99:75:a2:3e:61:a6:68:e5:74:42:f9:8b:58:3c:b0:
         4f:35:e7:b2:9c:4a:fc:09:b7:9d:41:a9:e7:84:6c:af:76:85:
         a2:84:ad:a6:13:c8:65:79:39:bd:4b:da:d4:bf:06:ae:27:f0:
         03:b5:a0:62:b3:d7:d6:51:eb:d3:ce:f4:ff:6e:1c:98:5e:f5:
         13:38:8b:e2:25:a9:b2:14:85:a8:03:a0:34:62:b3:03:fc:6f:
         68:4f:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:58:21 2026 by rpki-client