Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File:                     Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier:          qQyR8oc+oY8CcTzViAc1NV1talY/9LpG5Vpr7yt6JCA=
Subject key identifier:   82:48:E9:D0:D6:73:31:AB:59:EC:27:AA:F7:D0:E8:21:20:4A:B8:71
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer:       /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial:       01A08B30E50D0AD366BC0E4C13469A88C638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number:          112C
Signing time:             Thu 10 Sep 2026 12:00:32 +0000
Manifest this update:     Thu 10 Sep 2026 12:00:32 +0000
Manifest next update:     Fri 11 Sep 2026 12:00:32 +0000
Files and hashes:         1: GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa (hash: kAQmoNaAQulFXJOFBcFbnsHdNI15L9bljvuL0WjJrFg=)
                          2: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: YepomrU/O5ZDZ+bcf8Ko9eCL0lW+4uvlKq0VDr1OXs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:30:e5:0d:0a:d3:66:bc:0e:4c:13:46:9a:88:c6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
        Validity
            Not Before: Sep 10 12:00:32 2026 GMT
            Not After : Sep 11 12:00:32 2026 GMT
        Subject: CN=8248e9d0d67331ab59ec27aaf7d0e821204ab871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:dc:3b:0a:16:3e:60:03:67:ac:93:0a:71:
                    a6:dd:7a:6e:dc:20:70:49:86:30:6e:73:79:58:d8:
                    db:74:77:02:d4:4b:cb:48:08:23:95:1d:22:bc:e2:
                    3a:2d:fa:a8:cf:cf:f3:44:19:44:48:ad:fc:82:f4:
                    e8:f9:1a:7d:6c:42:4f:98:1b:38:1d:c2:51:26:e9:
                    79:1e:cc:b8:ad:70:7b:08:e3:42:5f:29:68:31:ff:
                    fd:f6:bf:c8:14:32:74:29:77:1a:46:06:e9:9c:61:
                    4d:29:f2:ca:09:e6:d8:e7:e2:f1:92:fe:7a:2a:e9:
                    d6:6a:58:3d:97:c9:c7:4b:12:e4:e4:2c:6c:dc:04:
                    c1:15:ae:be:38:d6:6b:af:1b:e0:30:40:34:e0:3d:
                    e3:35:79:67:ec:5f:88:db:7f:0d:cd:df:62:39:8a:
                    38:1a:a0:0b:42:2e:f6:41:f1:78:49:1b:80:c9:c3:
                    1d:c3:d8:ee:5d:98:5e:be:e8:2d:8f:26:f2:a8:52:
                    8d:5f:da:96:c4:aa:a0:95:7b:99:0e:65:b8:71:c4:
                    96:28:94:06:11:50:2c:0a:70:99:24:98:ae:24:33:
                    9d:32:a5:9d:d2:06:7e:eb:38:cf:2e:de:54:cf:73:
                    1e:8d:85:6d:37:ca:d3:f3:5c:15:f2:08:c0:f6:0d:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:48:E9:D0:D6:73:31:AB:59:EC:27:AA:F7:D0:E8:21:20:4A:B8:71
            X509v3 Authority Key Identifier:
                keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:db:b7:4a:59:72:d2:3c:cd:cf:0c:8b:6e:6a:6b:44:c1:17:
         bb:cd:ae:8b:25:bb:3b:69:40:1a:1f:ea:52:bc:0c:16:e5:42:
         94:d0:22:4e:d2:c9:4d:47:c4:d4:0a:ff:45:71:e4:e9:23:d0:
         f6:80:9b:60:11:7d:3d:2f:3d:31:89:99:19:8a:14:35:a8:fd:
         1a:12:b0:5d:39:54:4c:c9:3b:7e:3d:9d:a5:7c:62:ac:c2:9c:
         44:d0:55:3b:e6:cb:da:5d:cb:4a:e9:89:79:d9:18:a2:c4:35:
         02:cd:ed:04:87:fa:34:42:d4:e4:be:15:12:91:22:17:e7:77:
         3e:c6:b7:b2:db:4d:93:c3:b6:51:e9:16:c6:ff:cd:fa:63:0d:
         d5:9e:0b:59:15:f5:21:6f:fe:66:e4:e6:bc:b0:98:11:02:5b:
         79:61:d2:5b:53:d4:73:cc:b0:5d:e8:d4:6e:ff:87:c4:23:eb:
         0f:85:20:3b:f4:a9:a8:34:ef:1c:e7:71:26:72:ab:ee:b5:fe:
         db:38:b9:dc:3d:b0:7d:ce:ef:71:27:f7:1b:ec:35:d9:2f:bb:
         58:2d:9a:db:a4:bf:18:14:32:b7:fa:73:7c:35:e3:a8:0b:b5:
         e4:58:31:e6:1d:1f:24:a5:7b:3e:f1:a4:7c:6d:18:a6:82:60:
         58:a7:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:40 2026 by rpki-client