Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
File:                     HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft (raw, json)
Hash identifier:          cXHLIlr3y2NZzdmtnwdBlMilFT2lzbNaZt4MZXQzCeE=
Subject key identifier:   C9:42:08:4D:3C:0B:21:23:02:49:EE:CC:AF:17:49:C8:0F:B2:70:55
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Certificate issuer:       /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial:       01A08A1EC55DEE37CEB81EFA201FF97252C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
Manifest number:          1A4F
Signing time:             Thu 10 Sep 2026 07:01:07 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:07 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:07 +0000
Files and hashes:         1: CTIK34W0gV9x3uv1-r0HDqxk6oI.roa (hash: yVsgO2IBgHOLaRgSGBJBDT5TTrMQD1SCcScxIYhY8XY=)
                          2: HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl (hash: drQp5dZ/qGo0HqD+k0aoPhM5K2N+Ih23wxaeyHeOBdc=)
                          3: LegPI0LcRAcrLBTlGUY6DuF5bPU.roa (hash: NBAPRKnIYd+TgJ5/R1gZLE8ial4CZdJAp6oEz5nJrso=)
                          4: dZcFXy59OBgCvb8-LnAFu481H80.roa (hash: S71mkWocgYTtJLOJGQFJaSGFLZadtvbJJdWNegtQAMs=)
                          5: nffOhSPbCiWPAgtugzjWRyuC30E.roa (hash: ozFheVA8KcSrBcCrb3RelsPEg0hh8qk70m83xq3pSAo=)
                          6: sUCFmwpJav81ZSRKsG-SSJaCaxg.roa (hash: 9KxlfWrLv7YnnCH1Vf26DGRif8A8TjjKojTT9mB5Eaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1e:c5:5d:ee:37:ce:b8:1e:fa:20:1f:f9:72:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
        Validity
            Not Before: Sep 10 07:01:07 2026 GMT
            Not After : Sep 11 07:01:07 2026 GMT
        Subject: CN=c942084d3c0b21230249eeccaf1749c80fb27055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:22:c3:df:cb:38:3f:02:eb:8a:a9:c3:43:
                    eb:29:cf:a4:3e:73:98:09:bd:33:6b:35:39:e6:85:
                    37:6b:2d:49:93:61:b6:5b:26:07:82:25:d7:47:1d:
                    6a:c9:00:80:0e:31:63:61:f2:02:06:ed:16:f1:ae:
                    03:b5:f4:d3:77:f0:18:6f:15:02:7e:39:6a:a4:ca:
                    88:76:40:83:4a:c2:5f:c4:7e:8b:1e:d6:c7:f2:45:
                    82:df:e5:b1:8e:0d:36:c6:81:a5:fd:7a:57:49:4e:
                    56:f5:07:5d:06:43:8d:16:ac:ba:0a:be:86:08:99:
                    4b:4a:33:3a:e2:e0:5a:fe:39:32:5d:65:a4:9d:bb:
                    19:b7:c4:5e:91:7a:fc:a3:22:8a:3a:e0:fe:27:5f:
                    7b:8b:20:e9:64:69:45:aa:e7:9c:49:5d:02:a3:c3:
                    5f:0c:ee:19:df:52:00:a9:91:be:88:37:5c:2b:e6:
                    07:4c:7e:ed:9d:71:6e:4a:cf:c5:3f:09:39:41:c0:
                    ad:44:b9:a6:f9:d8:d4:79:af:f6:e5:37:a1:0a:71:
                    2d:2c:c0:e1:f8:64:bc:4d:e6:8b:5c:de:11:d9:4c:
                    23:06:2c:77:84:17:46:c3:60:e0:e0:67:4b:55:79:
                    d3:1b:02:bf:3a:04:76:eb:70:4b:4a:9f:35:08:97:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:42:08:4D:3C:0B:21:23:02:49:EE:CC:AF:17:49:C8:0F:B2:70:55
            X509v3 Authority Key Identifier:
                keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:df:aa:49:08:ed:e5:e7:be:4f:7e:e3:28:b9:3f:36:69:
         1a:8c:cb:e7:58:07:8a:30:e4:2a:25:88:6a:83:16:ff:d4:be:
         e2:87:c8:b2:cd:2d:2b:9f:7d:c8:a7:e9:0f:72:cb:57:0e:0d:
         7f:79:6b:96:6a:10:82:17:09:9e:80:a3:24:76:f3:a9:1a:77:
         03:71:fc:1c:15:ce:b3:1d:f8:88:c6:5b:e8:b4:dc:f7:8b:3c:
         2c:f0:23:e7:b7:27:31:67:e6:92:3e:56:ce:a2:52:65:01:48:
         8b:c8:87:00:8b:8d:55:d9:83:21:b4:54:67:49:be:38:41:ff:
         32:63:d3:c1:5f:fb:c2:b6:e8:15:af:25:f8:f6:19:2d:52:82:
         96:cd:b3:d5:70:5d:50:f7:9a:1c:48:d0:bb:4e:1f:7f:7d:d4:
         bc:87:b7:ff:be:47:af:23:84:5e:8d:fc:f6:f2:73:1a:da:4c:
         97:33:b6:0e:4b:3b:fb:a3:a3:8a:1b:87:0e:0c:fe:74:5f:7d:
         8d:d6:59:3c:4b:89:23:d0:db:ab:0f:72:5a:8b:7b:c6:0c:32:
         1c:8b:18:ff:07:cc:21:8c:9f:4d:24:c8:12:5e:83:ee:67:d6:
         92:a6:cf:8d:05:65:47:65:a3:84:4d:15:f3:0d:10:5a:3b:8a:
         df:2d:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:00 2026 by rpki-client