Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File:                     HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier:          a14c2OePHXDEHj68dnUvf3B1aIR66Y/pf++4p+XE/3Y=
Subject key identifier:   BF:0D:E6:1F:28:3B:0C:A6:91:16:EC:06:10:43:62:32:5E:32:7A:B5
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer:       /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial:       01A004A782CD9DCA91CB7DDF9C0250C9BEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number:          1A04
Signing time:             Sat 15 Aug 2026 09:01:21 +0000
Manifest this update:     Sat 15 Aug 2026 09:01:21 +0000
Manifest next update:     Sun 16 Aug 2026 09:01:21 +0000
Files and hashes:         1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: M8obOacyIP3BcTybD0kcdsI8aqXxvo9kcS0/Li6nLFg=)
                          2: oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa (hash: v1OkVWqraYOFjsEZ3LFnKjFEiGungWJLb2B2UAHBg6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 09:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:a7:82:cd:9d:ca:91:cb:7d:df:9c:02:50:c9:be:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
        Validity
            Not Before: Aug 15 09:01:21 2026 GMT
            Not After : Aug 16 09:01:21 2026 GMT
        Subject: CN=bf0de61f283b0ca69116ec06104362325e327ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:23:1c:71:98:e0:96:26:17:79:91:54:9c:
                    90:8f:a5:6c:0a:25:df:8b:63:8c:d5:5e:cb:a2:e0:
                    e8:7e:b6:12:11:ef:ce:43:6d:6b:43:e1:af:52:0a:
                    7f:e6:bb:59:46:0d:6d:f5:6b:6b:91:ac:76:a1:d7:
                    2a:26:6b:8a:ee:52:d4:f0:e4:08:f7:8c:e8:c1:7b:
                    6a:24:a6:23:52:05:12:1c:ee:d8:ad:f4:26:85:a0:
                    30:d1:a9:36:90:32:ad:be:85:ee:f9:82:ba:05:67:
                    67:73:64:03:79:5a:32:f3:96:8f:c1:0b:31:d6:0a:
                    c7:2b:f3:e2:f3:b1:ef:c1:60:7f:0d:9d:ef:68:3a:
                    eb:9e:3f:07:68:fa:81:74:f1:57:2a:82:f7:87:9d:
                    70:fc:3f:a7:1a:3b:01:79:2f:91:f1:94:1b:29:62:
                    a6:ae:a1:04:53:45:0f:ae:67:d0:4c:13:63:ad:a5:
                    6b:46:86:6b:34:27:08:94:1d:f6:32:ff:b5:c7:5d:
                    d4:bf:6b:ac:bd:91:bd:86:41:aa:45:91:d7:e0:a2:
                    61:77:e0:1e:df:6a:7f:f0:d4:fd:4b:8a:16:36:86:
                    a8:b2:89:46:a1:11:7b:ff:74:28:a1:8d:4f:8f:c8:
                    1c:ef:00:b3:e6:09:68:0c:6c:84:d6:0a:c4:79:f7:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0D:E6:1F:28:3B:0C:A6:91:16:EC:06:10:43:62:32:5E:32:7A:B5
            X509v3 Authority Key Identifier:
                keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c9:39:93:eb:b6:82:1c:33:30:47:78:1e:3c:c6:e8:bc:f7:
         98:0b:0a:6e:b3:20:ca:89:b5:eb:bc:ea:04:ad:3f:f2:86:83:
         c0:88:e7:36:f6:7b:cd:f5:e6:a5:6b:6b:36:23:9e:c7:0b:c3:
         4c:55:9a:8d:ef:7f:3f:93:f2:bb:9e:c3:8d:e3:1c:e8:4f:8b:
         28:d4:bc:25:4c:40:a5:71:01:e6:9f:20:0a:cb:39:9c:45:df:
         77:29:91:1d:90:76:a6:91:48:17:1b:be:38:70:66:21:3f:24:
         42:f5:d6:ba:d4:a4:05:7a:b2:e0:6b:23:41:27:09:4b:82:40:
         99:d4:02:00:3d:d3:3e:d5:87:34:3d:7c:0f:6a:99:2f:e8:82:
         ca:ed:39:fa:65:58:19:f4:b6:aa:60:2f:ed:69:4e:d3:ab:0e:
         af:d9:53:84:7d:d2:e5:c2:71:72:49:b5:92:87:32:1e:a5:d7:
         2e:0e:f6:17:7e:89:d1:06:e3:4c:33:ee:19:90:79:90:61:71:
         69:90:33:a2:46:6d:57:af:96:92:8a:79:5a:ca:b7:8d:2c:7a:
         10:4f:37:94:d0:70:ce:70:f5:a3:20:bb:b7:7e:51:91:d2:3d:
         ac:10:dd:30:6e:9c:c6:8e:ef:3d:5d:e0:10:07:ba:6f:1a:2d:
         53:ef:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:55:18 2026 by rpki-client