Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          olklMQhsMIDA1fntGAcaRwMhaC9bQWmSBSG+ScP3GfQ=
Subject key identifier:   3B:8E:20:35:F9:57:34:19:DB:A9:08:E9:57:A8:BF:F9:94:76:B7:41
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       01A08BD60036EE45C0CE9DD1B20A8C283E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 15:00:52 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:52 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:52 +0000
Files and hashes:         1: 3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa (hash: iEhzHIRnRxzpQUWkwXpH8+wLuqzBi2WgNixBv2cWr5c=)
                          2: 4dtT2zpOkX0M7815CYFyhrrEj7w.roa (hash: pUvuTTzJiPGDI0tk56sxaLiwIp0+DLwoX1SaGdq6b1Q=)
                          3: DPEXaJsdpwunEHWISAhP8hFXOUI.roa (hash: +8xOQY/MLqFDz3F9RapHgwM88JkcxWRhi/gr4+Z5Fes=)
                          4: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: JWOzG4pPrY7RML8jfR8iT3dq1p/zHSnFsObRBsHz6Fc=)
                          5: nJNnJik0D06rHfwp0JH-RW1i8d4.roa (hash: PZkJCh1a5eNPEm8fstSBrrfjyNUedpDjFwbI97jj8c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:00:36:ee:45:c0:ce:9d:d1:b2:0a:8c:28:3e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Sep 10 15:00:52 2026 GMT
            Not After : Sep 11 15:00:52 2026 GMT
        Subject: CN=3b8e2035f9573419dba908e957a8bff99476b741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b9:61:39:45:d4:0c:c8:fc:ce:cc:7b:91:44:
                    22:65:d1:b6:56:27:8b:8c:37:28:92:3c:1a:7c:6c:
                    25:21:12:2c:6f:20:35:50:33:35:b8:2e:1c:29:6e:
                    a8:24:50:e8:f3:d6:31:5e:f9:14:e9:e3:9d:73:a0:
                    26:25:79:30:43:04:86:2c:25:78:02:61:9c:11:0f:
                    7c:68:de:ef:a0:56:fc:ea:8c:b8:34:f2:e7:a6:66:
                    38:20:65:c4:ba:42:c4:82:ab:89:64:f8:4c:68:d1:
                    9b:bc:50:0c:da:a4:d9:68:78:a4:d7:c0:74:5e:44:
                    af:e7:e6:d2:e2:98:5d:66:7e:b9:7a:57:e1:79:13:
                    6f:cf:e4:b3:1a:5a:08:61:9c:15:82:7b:d3:86:a9:
                    9e:f6:08:7c:dc:20:9a:5e:7a:44:7c:58:53:68:0b:
                    f0:ca:eb:a2:4e:ea:3b:ac:f0:e4:e9:35:c0:6d:a6:
                    66:37:bd:13:c4:4d:46:35:a7:95:d1:88:61:27:71:
                    10:3d:89:2e:11:78:1a:92:97:aa:31:72:d2:f3:a5:
                    11:21:80:1c:ab:31:b6:20:73:66:3c:72:1c:5d:0e:
                    6f:0b:e0:9c:b8:8c:ce:a5:ef:ca:76:73:b4:1c:8b:
                    82:33:6e:b3:18:73:a7:af:dd:65:c4:91:4d:19:4c:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8E:20:35:F9:57:34:19:DB:A9:08:E9:57:A8:BF:F9:94:76:B7:41
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:93:db:31:66:fe:79:6b:ef:fe:ef:fb:47:53:72:b5:9a:
         71:b4:48:c4:57:6c:e5:a7:8b:78:af:af:5f:08:f1:8c:6a:08:
         2e:73:7e:3a:74:3a:52:04:3b:9b:9d:c3:c5:33:7c:ce:56:60:
         50:ad:ee:d3:cb:7a:d2:0c:44:b8:7c:b2:66:48:ec:13:2b:7d:
         f7:55:82:d2:66:2f:48:d5:ee:b0:73:16:e7:2a:e7:33:78:dc:
         15:b8:b3:35:66:78:a4:89:e4:59:cb:79:92:d6:82:a8:e9:43:
         ae:5f:00:da:1c:74:06:de:2d:be:3b:e2:28:e7:fd:32:d0:4f:
         36:e3:4b:82:cd:75:22:6b:16:2b:af:0e:e2:89:8d:97:82:2e:
         a9:42:20:b3:62:9d:79:9a:eb:ac:55:3d:19:9d:b7:44:47:b6:
         54:08:73:cc:83:e6:c8:33:01:e5:7e:dd:86:ca:01:b7:ab:42:
         d8:32:10:5f:13:3a:09:f3:75:b7:bc:c1:7b:26:12:f3:36:62:
         55:0a:53:2c:e6:d7:6d:35:b4:e0:9a:64:31:46:33:36:86:f7:
         14:cf:63:76:7e:b8:57:fc:d2:54:c4:75:6c:3f:1b:75:41:19:
         39:ff:29:1e:ce:a8:f1:96:35:78:a6:e3:7f:d5:e6:a6:55:e4:
         99:cb:91:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:21 2026 by rpki-client