Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File:                     HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier:          30vDHuHo3bBLW4XYFDVrHY2hLyLsFs8569nXQU7Aog8=
Subject key identifier:   24:62:0B:98:E0:A9:68:B2:D3:5D:F6:65:44:55:F7:50:EA:0C:89:18
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer:       /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial:       01A001A6822381EA32E06A1C6F6376379061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number:          05B5
Signing time:             Fri 14 Aug 2026 19:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:24 +0000
Files and hashes:         1: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: q/rC2EIIfXkf0IcctxJKVEcB83xKhuMGdHp9S99npF8=)
                          2: Q9htSrwG6pkTTK4J8GAyJuvwEME.roa (hash: X86U45F7zuolSOXKOHxqC0QODorNzo7dvfR/mN9i/fw=)
                          3: s5Tf9Er97Itqjoj6gqrk-vynCFo.roa (hash: a498PFlcS5thKhXutLYebI+i2DuF8/7C5m6zZZ7mAe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:82:23:81:ea:32:e0:6a:1c:6f:63:76:37:90:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
        Validity
            Not Before: Aug 14 19:01:24 2026 GMT
            Not After : Aug 15 19:01:24 2026 GMT
        Subject: CN=24620b98e0a968b2d35df6654455f750ea0c8918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fc:c2:35:15:e4:f0:b8:43:34:b9:3b:63:f5:
                    1f:44:e8:c2:65:60:b0:37:b9:0b:20:29:be:b7:c5:
                    95:2a:f8:4d:7b:bb:3e:d8:43:70:50:f2:be:bb:60:
                    e2:91:fb:83:55:f9:e0:fb:c4:1f:07:29:4a:26:b1:
                    eb:8e:3e:92:13:23:af:55:ea:e7:d2:d9:46:35:cb:
                    95:d0:f6:38:18:a7:66:19:2c:ba:97:b5:be:45:7c:
                    13:53:3c:18:56:ec:eb:6f:d6:10:a5:14:39:4a:b0:
                    e6:9d:6d:aa:98:48:88:fe:1d:d7:a3:72:d7:b8:a1:
                    e9:4f:2f:6f:73:66:a3:92:4e:b3:81:a3:f6:85:ac:
                    72:18:a1:d1:ae:b5:5a:fe:2c:9f:68:31:3c:ce:b2:
                    93:41:c1:22:7e:36:d8:ca:a4:ee:8c:2a:f9:c0:1e:
                    32:48:ab:0e:d2:6e:5f:65:eb:ce:ec:4a:45:5b:91:
                    90:6c:29:24:ac:11:89:94:28:9a:cc:ca:8a:e1:fb:
                    ee:d5:81:dd:f4:9f:ef:38:a1:8e:ae:af:ec:40:b9:
                    25:ca:78:b6:80:ee:a2:db:3e:6c:32:96:06:05:57:
                    03:39:05:e5:65:27:f3:15:96:6c:96:f2:5e:f1:eb:
                    dd:56:e7:d5:ad:99:bc:d2:45:c6:13:00:69:52:30:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:62:0B:98:E0:A9:68:B2:D3:5D:F6:65:44:55:F7:50:EA:0C:89:18
            X509v3 Authority Key Identifier:
                keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:42:cf:a5:a1:ea:c3:e1:05:58:49:cf:30:93:f7:9d:39:a4:
         52:c2:b8:04:8b:d2:e0:9b:49:40:56:6b:a7:02:2d:64:ae:6c:
         9f:14:45:d0:9d:98:6d:df:9d:96:b7:85:0f:9e:63:e2:28:bc:
         2a:cc:a1:b6:ac:d7:84:90:a0:fc:9e:cc:dc:ee:76:a1:01:bf:
         be:74:c1:76:5c:46:41:b4:1a:5f:a9:93:05:28:f1:68:14:c1:
         00:fa:a8:39:fb:21:0e:c3:09:55:9b:d9:82:c3:de:c4:00:67:
         6f:dc:63:b3:1d:7b:d9:9f:5e:19:3d:af:00:8f:dc:5b:93:cb:
         c7:7a:fd:4d:21:ff:ae:82:54:da:53:65:e3:fd:46:10:59:8a:
         58:96:78:24:81:9f:c5:10:04:73:c8:25:08:3d:78:32:4e:e2:
         8a:b9:23:ec:3e:a6:fe:b2:ca:f4:9e:14:de:1f:68:c8:3e:80:
         0d:d7:16:86:46:98:c7:1a:b4:d8:47:04:52:f9:97:81:98:85:
         d7:ba:03:2d:23:6b:d3:10:53:d7:08:65:27:35:7b:ec:99:79:
         7a:06:1d:7d:ca:78:02:e3:81:4a:6d:42:67:2c:82:3e:8d:77:
         d3:e1:c5:30:75:2c:47:27:63:b2:76:e9:0c:c0:26:a7:da:36:
         b0:63:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:23 2026 by rpki-client