Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File:                     HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier:          5SD0E4FkmTs05pvYW+fNsQ8ihuJ7Z1fWeT5UHcZIqhE=
Subject key identifier:   4E:9C:DA:B1:E2:90:62:A0:03:BD:09:D2:F7:DD:6D:6F:53:C1:6E:61
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer:       /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial:       01A0B689ABB88F5C97D9778536F26519B2C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number:          0CAE
Signing time:             Fri 18 Sep 2026 22:01:10 +0000
Manifest this update:     Fri 18 Sep 2026 22:01:10 +0000
Manifest next update:     Sat 19 Sep 2026 22:01:10 +0000
Files and hashes:         1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: jOTOT5NvEJT7WwndkmzCR+Xy92LPlO4IK3JLIJAzdAM=)
                          2: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (hash: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA=)
                          3: ehIM4r7y0MNk_6X7PPB_Xq7ctEo.roa (hash: x9UHBy6St0JPZwyF+fAa8ymLClmistFAKiLBfqM/Jyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:89:ab:b8:8f:5c:97:d9:77:85:36:f2:65:19:b2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
        Validity
            Not Before: Sep 18 22:01:10 2026 GMT
            Not After : Sep 19 22:01:10 2026 GMT
        Subject: CN=4e9cdab1e29062a003bd09d2f7dd6d6f53c16e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:f7:db:84:a2:c2:1a:fb:3d:6e:95:0f:58:
                    17:e0:3e:d6:23:0b:70:75:a7:33:05:f6:93:68:4c:
                    f4:37:68:1e:3e:33:94:be:50:c3:cf:68:03:18:f9:
                    0c:f3:7d:c1:79:bc:f9:24:1f:89:d6:26:96:c8:2e:
                    08:e6:f3:3d:f4:1e:6d:52:7b:fd:3d:5d:f5:77:69:
                    75:0b:c5:f8:6d:a5:d5:74:b7:f3:73:75:d9:3d:85:
                    23:ba:bd:11:2a:c8:af:2a:67:23:1d:84:c8:b1:c2:
                    b1:c4:b2:1a:14:2e:c4:2c:bc:48:4f:b5:b4:71:1d:
                    b0:ae:1d:63:45:6a:89:5b:1e:89:a7:70:5f:21:34:
                    08:da:07:78:c3:4f:c0:c9:c0:77:e5:34:fc:42:32:
                    13:3b:29:fe:17:da:cb:c1:54:a1:03:92:5e:c8:00:
                    13:a8:23:f3:2c:55:d3:30:94:68:a8:f8:91:17:8d:
                    94:cf:f4:40:ab:4a:cc:d9:bc:3b:b2:a3:d3:f2:33:
                    41:be:2f:f0:91:ff:39:42:80:da:67:23:8c:d1:47:
                    18:e8:cb:10:7c:ba:68:6a:fe:d2:1a:6a:c0:7f:7c:
                    77:de:d8:e4:36:6f:e4:cb:2b:92:70:05:4d:e0:df:
                    1b:51:d6:b2:5e:e0:72:14:1e:63:0d:5a:09:9e:ec:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9C:DA:B1:E2:90:62:A0:03:BD:09:D2:F7:DD:6D:6F:53:C1:6E:61
            X509v3 Authority Key Identifier:
                keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b7:10:41:6a:39:34:f1:61:00:60:a6:ba:99:3a:42:c3:9f:
         62:a1:c5:70:e5:21:38:f6:dd:7a:98:5d:75:13:29:58:de:e6:
         af:26:5c:11:c7:10:47:16:21:b1:52:49:8f:3b:18:18:c5:fb:
         86:0b:93:f6:18:b7:34:2b:68:e4:03:8f:7f:44:43:15:82:d8:
         a7:53:9f:2d:6e:87:36:13:fa:9a:5b:58:ad:16:ab:bd:de:b8:
         b8:91:8e:07:e4:91:81:4e:ff:73:fe:a3:9d:d8:73:e8:87:a2:
         6b:42:2f:c7:ad:39:53:2d:39:25:4f:ff:a2:44:ea:93:d4:e4:
         4d:a0:a6:86:5a:a5:25:14:56:21:d3:36:24:94:5d:55:30:0a:
         48:3d:9c:77:83:7f:01:d1:9c:01:61:ef:da:09:ce:59:3b:62:
         7d:6d:cd:df:48:ed:fa:81:ff:85:83:62:55:94:8a:99:e2:89:
         31:58:ac:b2:b8:a6:94:97:a7:3b:80:69:25:ea:fc:5f:e9:c0:
         f7:f0:5f:8f:37:74:aa:4d:9c:98:8f:66:f1:d4:2d:08:49:3b:
         ad:a9:7c:0e:e5:a8:c7:6a:24:ed:9c:b1:14:49:c5:93:22:db:
         49:19:7a:5d:74:83:e6:fa:48:b0:92:ff:6a:0f:4d:c2:03:9a:
         a1:b8:c7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:11:51 2026 by rpki-client