Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File:                     HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier:          cnW3I+lw8skYejOss+7rUOLwn3NobSNLfxQ74N8MGRw=
Subject key identifier:   E9:DE:01:D4:13:60:9E:39:41:56:F4:7E:91:F5:36:41:EA:68:1E:75
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer:       /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial:       01A17739B1D98F6A737878C3E9B1522B1C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number:          1A78
Signing time:             Mon 26 Oct 2026 08:00:32 +0000
Manifest this update:     Mon 26 Oct 2026 08:00:32 +0000
Manifest next update:     Tue 27 Oct 2026 08:00:32 +0000
Files and hashes:         1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: u4jjeVXAnb15JQhI1FzuA+rEeB6TVwCk5P8hU9NTtnQ=)
                          2: rEkkspT-t1acu0Gj9pI1cB5NvQM.roa (hash: 90e8BKkH1L1Ce8jWwpqnzgICGLSdnM4iehMTZrxu/+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:39:b1:d9:8f:6a:73:78:78:c3:e9:b1:52:2b:1c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
        Validity
            Not Before: Oct 26 08:00:32 2026 GMT
            Not After : Oct 27 08:00:32 2026 GMT
        Subject: CN=e9de01d413609e394156f47e91f53641ea681e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:a5:74:27:5c:65:4c:12:41:39:81:67:d4:
                    b9:0b:b8:68:23:b8:60:9f:6b:78:22:28:5a:69:91:
                    6c:c7:7a:f7:c4:bc:49:c1:e8:5b:f2:f9:f2:d7:f3:
                    65:5e:77:dc:e9:47:54:8b:60:9a:68:8c:8d:e6:9a:
                    4e:75:d2:db:bc:01:1a:a7:ae:d1:e5:57:8b:4c:50:
                    37:76:d0:a3:29:ef:73:49:13:f5:00:c0:30:a0:65:
                    f5:5b:c0:8a:d7:bc:74:db:4b:9d:8b:a2:07:2b:92:
                    c5:53:d8:f7:70:a9:ff:9e:43:05:a1:f6:91:6e:46:
                    e9:95:d4:ab:25:df:cf:21:d5:01:47:48:2a:31:01:
                    14:18:f5:a2:10:99:2d:40:6f:c7:14:04:93:33:58:
                    4a:4d:c3:55:33:5f:74:14:9e:0f:91:09:21:20:59:
                    40:47:0f:6c:df:fb:37:02:60:c7:4b:7b:df:e1:85:
                    f8:ca:b6:31:0e:a3:48:04:73:16:68:c9:ac:53:38:
                    eb:28:88:b2:6d:69:e0:b8:91:2f:e8:c7:87:c3:05:
                    a7:8d:ab:3c:08:e1:ee:16:d5:08:fb:b0:e2:b9:aa:
                    ef:35:62:14:86:d4:ce:7d:07:44:6b:04:d3:3a:99:
                    5a:70:83:46:48:31:11:ae:69:6d:43:74:95:79:9f:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DE:01:D4:13:60:9E:39:41:56:F4:7E:91:F5:36:41:EA:68:1E:75
            X509v3 Authority Key Identifier:
                keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:7c:1e:c2:d9:fe:3b:db:e8:2a:fa:32:83:07:fc:07:a0:
         22:5b:bb:a7:11:ad:76:c3:e8:e1:f2:0f:e6:a3:b0:9b:ef:40:
         81:b1:60:89:be:b9:65:5f:d3:60:7d:b4:9d:a5:a1:95:f8:98:
         93:ad:3b:8e:72:d6:26:b5:55:42:82:3d:97:55:e8:a8:21:2c:
         b7:c6:3a:d8:21:e0:38:42:a8:5a:e9:59:40:e0:e6:ff:c8:0c:
         77:db:d8:3d:0b:ec:0c:da:5c:5d:e4:9d:c9:71:60:76:7b:89:
         fc:5d:73:6e:5d:00:6c:99:d1:34:4c:da:0e:55:b4:8c:5d:21:
         9b:f5:12:d3:79:99:f5:c7:43:b9:6e:c4:05:de:6d:f7:a7:ce:
         be:14:59:0a:0c:0c:59:16:0e:ff:e3:6b:5b:f4:3c:65:20:0c:
         46:8b:bc:18:96:e6:27:66:61:9c:f1:7d:b8:39:71:83:bb:d6:
         ef:7a:fd:7a:d1:c1:7a:bf:84:57:72:0e:ec:16:5d:72:a1:81:
         77:87:a5:ab:8b:5a:15:c5:be:99:36:51:7b:07:e1:ab:76:ec:
         0a:78:47:39:cb:db:01:be:4c:43:d6:b3:2d:b0:5a:3c:04:1b:
         ea:3b:53:46:46:7d:c4:47:15:f4:76:85:f4:dc:ad:b4:56:00:
         73:28:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:43 2026 by rpki-client