Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File:                     Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier:          sbQrJJNrrx5hC5UNx9tOwKIeH3nNGn+qqa1RWz6j/Ss=
Subject key identifier:   82:C8:98:29:CA:21:D5:2A:88:CB:44:7F:FF:11:31:18:E5:65:2E:0C
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer:       /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial:       01A06E707BBDC5439A2C2FC015B3B01F1E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number:          1A3D
Signing time:             Fri 04 Sep 2026 22:01:00 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:00 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:00 +0000
Files and hashes:         1: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: 790Fbfhs8XBDEEPu8+sfI1VU6hKdqa4ZvGUscEUcw9Y=)
                          2: TlSVX0-vba4I-NSKL89Ngm4tw7c.roa (hash: o/YwPV35MkVtWefJ+k8c31/h+x9nhWf+AtSwL8HvxrI=)
                          3: h0uAOEUI-ibYSxCIsCByTHYtsZM.roa (hash: 73z7ExdVrQpDFxLXve4S4EigI54vXhrIVOhvporYAcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:7b:bd:c5:43:9a:2c:2f:c0:15:b3:b0:1f:1e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
        Validity
            Not Before: Sep  4 22:01:00 2026 GMT
            Not After : Sep  5 22:01:00 2026 GMT
        Subject: CN=82c89829ca21d52a88cb447fff113118e5652e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:b9:d2:21:0c:c0:85:2e:fe:14:48:f8:a0:
                    ef:d0:57:f7:a6:f7:5f:5f:db:83:11:1a:04:ff:af:
                    ac:7e:81:31:28:b0:5e:64:9b:16:18:20:08:5b:ae:
                    b6:8c:ca:27:64:5d:55:1d:f9:75:13:c7:5b:f1:f1:
                    d0:00:70:8f:fd:11:d8:4f:3d:33:62:8c:87:ac:99:
                    9b:ca:06:f6:91:6b:cc:a2:4b:b5:25:57:7e:77:46:
                    4f:7b:6d:c1:d5:0c:17:f3:65:c5:88:9f:4d:30:37:
                    cb:e8:7b:64:33:40:ba:8f:ac:6b:5d:5e:a4:89:4d:
                    ad:49:f3:f2:1e:56:75:54:98:a7:66:37:df:15:1a:
                    63:7f:54:43:a7:03:85:92:e0:cf:c5:ff:22:e3:58:
                    cc:e4:cc:f3:02:22:3e:13:8f:f6:9c:49:7f:14:83:
                    8e:8c:23:2b:ad:66:48:36:1a:3d:85:aa:40:60:cb:
                    bf:e5:0c:53:6e:d3:a3:1f:6b:5f:10:1e:5e:0e:a6:
                    2a:31:61:d9:bf:91:31:08:a3:a7:cf:70:17:4b:51:
                    dc:e5:2e:39:f3:4e:4b:d5:09:64:5d:79:c1:bd:85:
                    ab:36:dc:8d:22:c9:5d:87:b1:dd:3c:e9:ba:be:50:
                    15:cd:9f:c2:a0:d5:cf:52:b6:13:17:e0:cf:9d:eb:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C8:98:29:CA:21:D5:2A:88:CB:44:7F:FF:11:31:18:E5:65:2E:0C
            X509v3 Authority Key Identifier:
                keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ad:cf:38:72:43:1c:9f:3e:a1:eb:da:37:c5:41:70:45:04:
         f0:28:6b:fb:f5:87:f2:5b:5f:30:fb:d6:9b:2b:c9:09:4d:9b:
         b0:04:3a:2b:3d:74:fb:f3:0b:53:f4:93:4d:59:61:bc:3b:6f:
         44:b0:9a:90:30:5d:0c:09:4f:c7:a2:ad:1d:5d:92:b0:04:b9:
         c4:2c:57:6d:ee:64:b8:b9:b7:f3:2c:a3:9b:2c:90:7e:2b:36:
         f8:c7:80:86:7f:1e:d8:3a:1e:e2:29:d8:ca:1e:c5:db:c5:62:
         57:8e:b7:5b:b5:af:8f:a3:ea:72:93:b5:26:d1:eb:38:4b:14:
         8e:f0:17:93:78:a7:24:24:eb:2c:34:c3:61:17:11:3b:41:e1:
         2b:f3:de:04:76:70:b1:65:0b:78:f4:fa:88:11:84:b2:4f:5f:
         d0:02:21:13:09:15:9d:e2:12:a8:d9:3f:8e:0d:0f:0e:20:78:
         02:a6:fb:96:e8:5f:e0:25:d7:49:2e:81:92:9b:ea:1b:89:1e:
         86:18:c8:79:09:10:47:c3:4b:f4:4b:ca:a0:40:5a:40:70:cf:
         54:7b:d1:fe:99:ec:48:c6:1d:4e:9e:27:9f:2b:b3:73:ac:be:
         4a:1c:d7:7d:8d:0f:4b:13:a6:79:fd:2f:a9:da:35:f1:b0:69:
         3d:a9:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:59:56 2026 by rpki-client