Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File:                     hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier:          FbeyxXx3oDGeWk1Y2zM52Xq0ZMxZ1Zi7MUSFyccPIL0=
Subject key identifier:   3C:2B:57:47:C9:EB:26:36:5A:01:D5:CB:CD:4D:FE:AE:46:9C:68:64
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer:       /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial:       01A13ECB918AADB154802293AD70C3A216B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number:          0F96
Signing time:             Thu 15 Oct 2026 09:01:30 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:30 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:30 +0000
Files and hashes:         1: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (hash: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo=)
                          2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: rOqpwUes9N6EGYIMc0OEscaJjGtvcT7Aj867WcoPqxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:91:8a:ad:b1:54:80:22:93:ad:70:c3:a2:16:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
        Validity
            Not Before: Oct 15 09:01:30 2026 GMT
            Not After : Oct 16 09:01:30 2026 GMT
        Subject: CN=3c2b5747c9eb26365a01d5cbcd4dfeae469c6864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6b:42:ef:81:f9:90:14:64:de:be:84:8f:84:
                    03:69:ec:af:36:e2:d5:5b:7e:1c:79:73:c4:27:de:
                    86:c7:10:3e:57:5e:c7:7a:fe:1b:cd:b2:f0:3d:5d:
                    3f:95:96:83:92:2b:b7:c8:d7:2e:80:5b:ce:db:47:
                    dd:ed:d3:58:ff:fc:54:b4:d8:c7:10:9c:5d:b9:5e:
                    ce:ea:58:4c:64:11:17:e6:0a:33:57:40:8c:10:d1:
                    81:7f:3c:b0:3a:72:e3:2f:7e:6b:8a:3f:a7:8e:32:
                    77:24:dd:27:27:c3:bf:26:32:64:66:57:91:b7:ae:
                    33:31:c0:d4:9c:b1:57:c9:02:11:e0:f9:59:45:92:
                    dc:7a:bf:b4:df:c5:c8:2d:ab:de:45:5c:20:a5:4a:
                    db:45:89:8d:2f:5d:fa:a0:a0:07:93:00:fa:29:7e:
                    ef:31:48:49:24:07:dc:2a:31:c5:a5:e8:cf:d0:9d:
                    cb:55:58:fb:f9:bc:04:e8:19:01:a3:a4:5a:53:1c:
                    ec:46:0f:d9:d4:6e:13:ec:16:c6:a3:3d:7b:6b:08:
                    50:fd:cb:f0:9f:aa:c1:6e:24:cd:fa:61:a4:9b:ae:
                    60:73:e8:23:58:8e:04:e4:3e:16:5e:b8:90:90:bb:
                    af:20:b4:2f:69:b7:aa:ee:94:4d:58:74:c9:68:da:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2B:57:47:C9:EB:26:36:5A:01:D5:CB:CD:4D:FE:AE:46:9C:68:64
            X509v3 Authority Key Identifier:
                keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:c7:82:25:7f:9c:09:24:35:b6:75:a7:7f:b6:1a:ce:b5:00:
         94:56:83:e0:48:05:52:28:e1:f2:63:fc:c8:46:e3:d9:e9:00:
         ff:13:d5:0b:7a:63:86:2d:1a:7b:1e:6e:ad:ee:90:db:7d:3d:
         ba:49:d5:ff:09:b0:09:56:05:4a:9a:44:b0:35:af:f9:98:c3:
         a6:d4:6e:ca:ea:51:5b:fd:f3:a9:e2:38:19:4f:92:dd:57:ba:
         c6:4f:df:8b:76:75:ad:ed:6a:30:01:cd:f7:e6:8e:f7:bd:f0:
         ad:0b:b1:8c:2d:4f:b4:13:25:90:b6:70:9e:c3:0e:5c:59:d0:
         0f:3b:eb:0e:3d:27:ec:08:0a:9f:7e:ae:df:da:ef:bb:e1:07:
         3f:38:59:48:99:16:b1:e2:d1:12:44:f7:fd:54:cd:a2:f6:05:
         0e:3d:b3:16:10:d5:5a:9a:27:c2:ba:b2:ec:16:b8:64:53:c4:
         e2:ac:1c:69:04:b6:32:db:81:a1:dd:89:24:bb:81:15:11:ee:
         10:7b:7b:2c:19:9a:6f:11:d3:a0:74:5c:e5:41:ac:62:17:6a:
         cb:7e:76:e3:4a:62:e9:30:28:f2:fc:b3:67:82:34:ec:b0:7a:
         4b:85:dd:2d:1c:5c:ad:63:fa:f1:a5:15:7d:8a:9d:84:9a:4c:
         77:c6:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:08 2026 by rpki-client