Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
File:                     hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft (raw, json)
Hash identifier:          PzA2bVPEd7XmClasKqX/0o7jZ0uWq6O+dNCLe/72BNU=
Subject key identifier:   52:3C:55:72:0F:BC:DD:F6:5C:59:3E:95:9F:B2:E3:F0:B7:EB:3D:FD
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Certificate issuer:       /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial:       01A06EDE301C02896B25554300849C5ECA0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
Manifest number:          0D54
Signing time:             Sat 05 Sep 2026 00:00:50 +0000
Manifest this update:     Sat 05 Sep 2026 00:00:50 +0000
Manifest next update:     Sun 06 Sep 2026 00:00:50 +0000
Files and hashes:         1: GPPNPmR8KUY_sEY8Xyw8dhEolxg.roa (hash: JjmXr+ibRaRGfx0pfBbomv1IH9Jgiuy25aSKoWiXJmg=)
                          2: hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl (hash: zNh3s4qzjvdy15/LEQpno0eY1RYSqp3NEwwhraWKq0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:de:30:1c:02:89:6b:25:55:43:00:84:9c:5e:ca:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
        Validity
            Not Before: Sep  5 00:00:50 2026 GMT
            Not After : Sep  6 00:00:50 2026 GMT
        Subject: CN=523c55720fbcddf65c593e959fb2e3f0b7eb3dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:2a:34:e9:2e:cb:a4:4b:c9:b4:cd:76:28:
                    b0:3f:95:42:7f:81:f4:1a:38:ce:86:9c:dd:8e:08:
                    95:53:21:f1:e0:03:9f:b8:9b:2e:49:b0:f1:97:4c:
                    d8:31:97:f9:07:53:38:73:4e:62:59:10:b4:b5:fc:
                    9e:f7:06:3b:02:41:61:46:a1:0b:d1:64:23:04:4c:
                    96:e0:77:aa:63:2f:07:c1:45:85:a6:34:ae:62:e7:
                    ef:46:ca:72:a7:db:77:b4:f1:dd:99:ea:fd:2a:14:
                    17:1c:bd:6f:26:f1:f3:08:e8:17:83:33:6b:38:58:
                    78:36:d8:36:bd:7a:55:64:73:09:d5:d7:65:eb:64:
                    c7:eb:6c:be:60:ac:57:08:fd:63:22:f9:67:94:eb:
                    c5:bb:8b:c3:86:56:4c:b4:b0:0d:97:57:8a:ee:02:
                    d9:c6:db:dd:87:56:cf:50:7c:db:25:36:fc:c5:d7:
                    eb:72:cf:09:14:75:19:15:24:ef:c7:86:f1:45:b9:
                    5d:66:fb:9d:6c:52:47:63:e4:7f:75:37:c0:fb:f3:
                    0c:68:04:cc:8f:64:a7:5b:63:79:69:4d:8e:1e:45:
                    7e:41:26:6d:d3:a0:c9:38:5c:63:46:d9:57:b0:a3:
                    b5:86:51:57:c0:66:0b:21:9f:f4:fd:51:dd:b1:6d:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3C:55:72:0F:BC:DD:F6:5C:59:3E:95:9F:B2:E3:F0:B7:EB:3D:FD
            X509v3 Authority Key Identifier:
                keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:96:5a:a2:5a:f5:b9:b0:10:a9:70:71:fd:0c:b0:20:98:
         99:9c:65:35:dd:5b:61:44:4e:5b:f9:39:57:c2:b5:90:aa:50:
         2c:ab:e2:ac:cf:fa:08:e6:68:f6:1d:31:8a:fe:0d:a1:4f:c0:
         c9:5e:4c:8b:02:91:9f:d3:eb:23:fd:35:3d:da:e3:e5:ad:d3:
         bd:6c:9a:07:27:cc:c4:d4:78:bc:89:a2:fd:a5:18:c0:71:8e:
         d8:ae:6d:11:07:5b:ad:9f:29:d7:32:85:8c:c1:9f:1e:6b:70:
         49:ef:f5:2b:90:56:24:d3:64:3e:ac:02:1f:d6:0e:fe:36:7e:
         94:80:a2:90:f7:0e:2c:b8:7b:10:16:79:fd:93:62:e8:16:e4:
         a8:0b:16:54:90:12:32:f3:d8:1d:4c:d9:83:13:e1:0b:e6:09:
         52:67:8b:58:0e:24:cb:9d:5a:5d:2a:39:13:48:7b:f2:51:54:
         cb:9e:6e:0b:32:a3:f2:02:fe:fb:1f:4c:68:d6:d1:60:c7:0f:
         c7:4d:06:7d:ea:cf:8a:23:72:82:2e:50:73:24:ca:69:45:f1:
         34:49:1f:34:a2:80:51:6d:09:cb:5e:57:4e:f5:2b:81:8b:9f:
         51:f2:81:59:5f:c9:53:1c:22:85:76:2f:73:7c:0d:76:41:7c:
         c8:0a:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:55:49 2026 by rpki-client