Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File:                     hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier:          BQMM83NZGGo5FoLBgocshCNuXSuUjT5MLuiCP2WusRI=
Subject key identifier:   10:41:71:7D:57:34:DD:A0:72:D2:FA:B6:33:01:EE:32:01:3B:5F:63
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer:       /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial:       01A18186FDAA945CE20F983F39334A60E3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number:          1A79
Signing time:             Wed 28 Oct 2026 08:01:09 +0000
Manifest this update:     Wed 28 Oct 2026 08:01:09 +0000
Manifest next update:     Thu 29 Oct 2026 08:01:09 +0000
Files and hashes:         1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
                          2: Y3J2ud7jTrX4_kZX_16f1uueVbg.roa (hash: phuOOyFdkRfonnOS6jbXwYKqxA0Iu7gFVN1SwrhDuJ4=)
                          3: dD9dHGQ8gQw13ckZppje7kWpQsM.roa (hash: r4y30mkY+vW+Z9vUf+xkdGW81b+7QGW2Rple9BpVlfI=)
                          4: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: /uRlIRC2m5w43kOc4YIUkaDGhGJrA2uRDnUr0KYuK5k=)
                          5: ztuH1Ib6x5wzUeQhgYqrotMVPQw.roa (hash: utfkpD2m+HS/flfgYbwUeyyWH7NvVuqHqyG3A5crwN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:86:fd:aa:94:5c:e2:0f:98:3f:39:33:4a:60:e3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
        Validity
            Not Before: Oct 28 08:01:09 2026 GMT
            Not After : Oct 29 08:01:09 2026 GMT
        Subject: CN=1041717d5734dda072d2fab63301ee32013b5f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:54:6d:10:09:35:45:71:67:74:ea:43:01:
                    f8:14:e9:c8:d7:67:51:f4:c3:11:83:fd:ee:55:e7:
                    4d:5d:06:b2:5a:06:0f:74:0f:75:b0:62:13:2b:52:
                    45:73:66:da:00:34:57:ae:8e:89:c3:c1:54:f8:48:
                    7d:cb:8f:a9:77:a6:ef:90:1c:ff:ed:3c:c5:1d:3b:
                    22:4e:7e:1d:ab:74:c6:4f:9e:a2:3b:4d:e6:ce:5d:
                    d7:4f:e2:ac:1a:8a:ad:05:e8:8e:c3:58:ab:d6:93:
                    06:00:10:9b:e2:a3:f1:b2:63:03:2a:a5:54:3e:a9:
                    ff:79:58:12:8a:05:7c:e7:b7:f7:78:83:7e:45:9f:
                    ce:e8:8c:09:57:9e:cd:b0:13:46:98:1c:c6:7a:43:
                    b1:72:b9:5e:3f:35:9f:fb:4e:93:6d:4b:4a:5d:8b:
                    4e:63:04:21:b3:9c:58:33:48:3b:40:89:ce:9a:1d:
                    a6:5f:a5:3c:0f:a0:4b:d2:8b:49:e3:d8:12:17:12:
                    4c:61:00:69:43:b2:1b:c9:70:d9:7a:ea:f9:91:85:
                    98:9c:99:89:ac:fa:5e:fb:9c:cf:0f:59:55:55:09:
                    4d:7f:53:4b:cd:42:7e:97:b6:ea:3d:e7:54:46:4c:
                    93:97:eb:0c:8e:45:fd:66:47:ea:61:54:a9:04:96:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:41:71:7D:57:34:DD:A0:72:D2:FA:B6:33:01:EE:32:01:3B:5F:63
            X509v3 Authority Key Identifier:
                keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:56:06:50:84:09:13:de:b7:91:7c:e2:c7:17:ea:cc:fc:14:
         fe:02:fb:46:a4:60:e0:c1:44:b2:e4:ff:c9:b7:78:c9:95:b7:
         80:0d:f6:c8:ec:b3:d5:fa:d6:63:6f:fa:af:99:4d:20:b2:95:
         39:5c:c6:36:aa:ea:d9:02:30:33:1e:40:bd:58:2d:b6:56:61:
         7d:4a:2f:e2:70:0a:dc:76:51:5d:05:32:8f:82:55:0c:d0:90:
         24:05:fb:f9:c9:3d:4c:90:01:79:af:b5:4e:cd:87:ca:c5:57:
         79:23:96:2d:8e:28:30:67:75:03:6c:a2:ac:f5:b3:63:b9:6a:
         55:8f:f3:e2:1b:66:34:81:87:42:0e:49:83:00:23:94:e5:fe:
         b9:66:e2:03:f9:dc:98:6a:31:07:71:bd:b9:99:d2:ef:bf:c3:
         79:81:88:00:91:38:8f:cd:77:33:95:03:77:40:ce:f3:af:5e:
         fb:79:9a:88:7d:1d:cc:ff:96:98:60:54:9f:b7:bc:e5:51:d4:
         79:09:89:af:03:02:b5:d7:e4:59:2b:57:ba:d8:9e:66:cf:51:
         a1:72:42:27:c4:54:79:be:26:cc:7e:45:c8:f4:62:22:d6:e3:
         7b:16:5f:b0:e6:dc:e9:7c:37:41:8f:a6:26:1e:be:cd:5d:21:
         cd:db:f2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:35:32 2026 by rpki-client