Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File:                     hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier:          41bWmV//etC3eg1aTNr4qLJ01Q6e3ZnjV5s65HtinjQ=
Subject key identifier:   3C:2E:AE:9C:81:68:2E:CB:78:4F:FA:C2:4D:65:AC:AD:AD:88:90:52
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer:       /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial:       01A08C43D84B8A56909D850D7629C74E60DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number:          19FA
Signing time:             Thu 10 Sep 2026 17:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 17:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:51 +0000
Files and hashes:         1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
                          2: Y3J2ud7jTrX4_kZX_16f1uueVbg.roa (hash: phuOOyFdkRfonnOS6jbXwYKqxA0Iu7gFVN1SwrhDuJ4=)
                          3: dD9dHGQ8gQw13ckZppje7kWpQsM.roa (hash: r4y30mkY+vW+Z9vUf+xkdGW81b+7QGW2Rple9BpVlfI=)
                          4: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: PutWkVMNXywLiSXhiyvQP4k0c0cTKcsu/9vEmTGpYQI=)
                          5: ztuH1Ib6x5wzUeQhgYqrotMVPQw.roa (hash: utfkpD2m+HS/flfgYbwUeyyWH7NvVuqHqyG3A5crwN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:43:d8:4b:8a:56:90:9d:85:0d:76:29:c7:4e:60:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
        Validity
            Not Before: Sep 10 17:00:51 2026 GMT
            Not After : Sep 11 17:00:51 2026 GMT
        Subject: CN=3c2eae9c81682ecb784ffac24d65acadad889052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3c:dd:42:1e:2d:d2:6e:32:8e:12:15:f8:16:
                    e1:08:39:3b:f2:0d:98:a4:63:8b:ed:5c:62:09:a9:
                    a7:66:27:9c:2f:fc:00:84:27:21:5f:7a:85:97:1f:
                    5f:d3:cd:66:25:6e:fe:df:d8:fe:03:e9:a3:a5:2d:
                    c5:42:fd:f5:fd:07:94:7c:46:82:bb:9e:07:bd:58:
                    9a:92:c6:4f:c8:6d:f8:1b:4a:0f:9e:fd:51:de:81:
                    a8:39:5e:52:86:eb:77:0d:ae:c0:db:d0:2d:30:63:
                    31:3c:49:fc:18:7f:35:9d:5d:8d:5c:84:cf:79:e9:
                    f0:0c:34:1d:6a:f5:95:1c:5c:8c:27:ac:8a:dc:a0:
                    5f:3c:0f:65:71:ea:17:0d:4a:ae:a4:d9:e0:61:b0:
                    94:38:0e:0c:48:ca:1d:19:65:fc:6b:0d:c4:37:b2:
                    88:91:81:8d:41:66:88:ce:97:58:23:e8:d9:51:44:
                    c4:02:21:8c:10:c6:28:14:ef:3c:a3:2b:db:b6:e2:
                    9e:2c:a9:03:09:c3:06:83:ba:03:53:ac:68:d8:cd:
                    40:6c:5f:80:1e:76:91:92:05:3b:55:e3:0e:a8:22:
                    d1:79:48:4b:df:fe:b9:fc:79:5d:68:fc:6e:f4:93:
                    34:a8:41:75:b2:62:60:fc:b9:50:3f:12:1c:50:e0:
                    2d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2E:AE:9C:81:68:2E:CB:78:4F:FA:C2:4D:65:AC:AD:AD:88:90:52
            X509v3 Authority Key Identifier:
                keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:23:40:70:f0:7b:9f:e3:cf:db:cd:5d:cf:a8:3f:ac:c5:
         22:06:16:66:99:9c:93:e8:1e:61:b6:06:94:b1:2c:51:f1:b8:
         a1:79:65:d2:34:0e:45:fa:07:9d:dc:24:d3:f7:ed:62:19:53:
         f6:f8:ae:af:ce:b5:eb:79:26:94:a2:45:b2:bf:9f:4d:b3:ab:
         5d:9a:bf:cd:80:5b:fe:b7:90:cb:3c:b2:a9:ee:5e:b5:4e:9e:
         e5:c3:b0:ca:70:7a:1b:0a:3f:4c:2a:2c:04:22:88:56:a7:d0:
         22:6d:23:82:eb:f4:95:bd:2a:5c:8f:0d:5f:8a:b7:43:8d:77:
         2e:91:53:96:c6:d3:83:9b:34:4e:ec:e0:d6:ff:78:d2:b3:ed:
         d1:b8:79:f7:10:b1:6e:c3:65:bd:ab:74:a7:a6:31:a7:73:55:
         db:02:ae:4f:27:06:d4:c0:89:fb:11:27:fa:e0:b9:0d:54:be:
         99:3d:32:3d:7c:fb:4b:08:97:c3:d1:ff:d4:1d:84:78:4e:86:
         6a:02:6c:99:19:31:7b:5d:d7:52:f4:7b:b7:7f:34:49:5f:7e:
         6a:8c:21:6d:d3:f6:3e:b0:3f:a2:58:54:29:f4:3e:cf:b2:0d:
         80:90:62:83:ce:c3:88:27:66:62:90:0c:73:06:55:92:d4:d6:
         ef:38:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:54:01 2026 by rpki-client