Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
File:                     htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json)
Hash identifier:          l9JtC5L5QIvcG9HXCnuUTplAjH+6c5GAnpHbBPeGHWw=
Subject key identifier:   16:E4:89:C6:FC:23:CE:F0:D5:7D:5A:71:77:4F:B1:5B:6D:AC:B6:6B
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Certificate issuer:       /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial:       01A11A86F0E129ABF3DADE348266BEFC8173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
Manifest number:          03BB
Signing time:             Thu 08 Oct 2026 08:00:13 +0000
Manifest this update:     Thu 08 Oct 2026 08:00:13 +0000
Manifest next update:     Fri 09 Oct 2026 08:00:13 +0000
Files and hashes:         1: AL6_iNyYf5_-8MNJEgieEgNDMIY.roa (hash: 0+d8aJSNzAigR1rPUuhEaaIGr2KsvOX77RXS9BnQQ0E=)
                          2: Ri6eR0hyModJmhU4qRXYfOTF-Qg.roa (hash: vp43LSqg4UfumRnhKAC/q4lMv6KhCs9VlzcPfCyPdH4=)
                          3: SNSZyMcxHfPqzsZovpnv0TS4kEk.roa (hash: 6uX+ryYbLRIBx9RtsjWqz+fa+ZH7FgeP5Ku25N+gV9g=)
                          4: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: EEeLcS5e3K0s/+8wZ7FTd4iFNziVAKsieCFuLc4WjzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:86:f0:e1:29:ab:f3:da:de:34:82:66:be:fc:81:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d963844f8205d1369434531c998600c15781a1
        Validity
            Not Before: Oct  8 08:00:13 2026 GMT
            Not After : Oct  9 08:00:13 2026 GMT
        Subject: CN=16e489c6fc23cef0d57d5a71774fb15b6dacb66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:0d:36:95:1e:67:93:27:b0:2a:75:16:09:
                    f8:0c:0e:f3:bf:f0:38:de:ee:53:ed:be:74:2e:d6:
                    ca:3c:01:02:04:13:38:76:e0:99:f4:07:62:b6:86:
                    d9:50:cf:bd:04:a1:c2:7c:cb:db:f1:6e:28:13:20:
                    9b:57:c5:90:24:b1:65:be:0a:21:be:a8:03:48:dc:
                    d3:75:45:75:86:74:2b:55:78:07:45:be:36:6d:ac:
                    65:8c:b5:77:88:72:3a:cb:0b:6f:0b:80:bf:0e:ee:
                    65:0a:61:1f:8d:ec:2f:7d:c1:b3:21:47:05:87:c1:
                    8e:cd:4a:8b:09:9d:c0:b8:32:dc:ca:bf:95:76:07:
                    53:53:13:e3:31:11:71:b8:e5:a7:b0:5f:ff:5a:30:
                    08:03:11:2b:a0:2d:0a:6c:e4:db:03:a2:45:cb:d5:
                    d3:b2:f6:99:78:ce:c3:a2:2f:ff:4b:5a:ac:1a:c9:
                    19:e4:2b:5a:ef:47:93:b8:3e:f7:db:18:00:80:91:
                    ee:4b:82:d4:dc:21:99:7a:b2:e0:7c:a9:68:11:1c:
                    5e:5e:fb:e3:70:6f:be:0c:eb:75:d3:5f:4c:f5:98:
                    34:e7:b0:3f:f5:18:b8:c6:6f:e3:64:32:dc:90:8b:
                    fd:14:f1:ba:f6:fc:6c:35:43:29:f2:2a:25:6b:45:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E4:89:C6:FC:23:CE:F0:D5:7D:5A:71:77:4F:B1:5B:6D:AC:B6:6B
            X509v3 Authority Key Identifier:
                keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:80:ec:a4:fc:f9:97:1e:a1:51:8a:fe:96:a2:c2:d6:4b:2f:
         d0:68:2b:bb:ac:65:7b:91:1a:c3:5a:28:4c:96:16:31:86:c5:
         4f:27:4d:92:c3:7b:dc:b2:9e:c9:91:73:75:1c:e4:5c:fb:26:
         fd:9f:b6:73:f8:3a:ea:70:d0:9b:8b:d7:74:8a:56:57:41:4d:
         69:06:ee:be:8e:f5:87:03:c9:cf:c3:47:d9:97:ff:e9:86:0d:
         1b:f2:69:aa:b6:ee:28:ab:53:d6:34:04:82:31:21:0b:3e:ae:
         ee:60:88:08:59:f3:a9:23:20:42:3f:85:6b:b2:be:2d:68:92:
         aa:b1:2f:34:79:6a:22:b4:d5:13:27:cb:88:a5:75:54:4d:b5:
         14:44:b5:a7:ea:ba:31:1f:ab:00:fa:8a:dd:14:29:ad:cb:b2:
         69:c8:82:ae:91:b5:c8:c1:63:da:b1:de:9d:2e:e8:a3:cd:85:
         5a:02:e7:46:27:6f:17:7f:25:d3:b4:f0:3b:45:45:9d:15:b6:
         34:a7:60:1c:29:7b:5f:b8:e9:85:8e:87:80:bf:89:ca:89:6b:
         7e:76:cf:4e:78:a9:e8:d3:2e:de:c3:b9:3b:35:2e:ca:fa:57:
         79:dd:16:c3:36:98:82:1f:f7:8c:3b:95:4f:3a:f2:74:7e:44:
         d2:a3:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:51:25 2026 by rpki-client