Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
File:                     hYPpE4a3wAKken-k97f9Nf-eTgo.mft (raw, json)
Hash identifier:          vwWFHVvVEXUk3xku/uc/PhpzKy/fBjJKv0EqYWin81g=
Subject key identifier:   6A:A5:B5:59:B8:51:35:56:CF:F9:5B:07:07:A5:BF:AA:1E:E5:6D:63
Authority key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Certificate issuer:       /CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Certificate serial:       01A114BCC0D1F8762ED84E5B576C813B1677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
Manifest number:          024E
Signing time:             Wed 07 Oct 2026 05:01:16 +0000
Manifest this update:     Wed 07 Oct 2026 05:01:16 +0000
Manifest next update:     Thu 08 Oct 2026 05:01:16 +0000
Files and hashes:         1: hYPpE4a3wAKken-k97f9Nf-eTgo.crl (hash: v8KR7u8IEUYLeAz9rTWoQf6dGcniSxMT4mQc1zWYyfY=)
                          2: rdpASP2znJQvquGxJOvyDRpnmhU.roa (hash: 2K9g0ofmwtg+0wCGPKVHPvtZQPkH/atZkucjpNuBbHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:bc:c0:d1:f8:76:2e:d8:4e:5b:57:6c:81:3b:16:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
        Validity
            Not Before: Oct  7 05:01:16 2026 GMT
            Not After : Oct  8 05:01:16 2026 GMT
        Subject: CN=6aa5b559b8513556cff95b0707a5bfaa1ee56d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:cc:44:db:81:87:3f:bc:f9:e7:f1:37:ac:
                    d3:55:18:7c:0f:3a:d9:a4:6a:66:f8:47:5e:f7:0d:
                    3e:99:f0:42:75:b5:47:85:b7:54:80:40:5d:08:be:
                    0f:85:fb:a8:aa:48:41:5e:33:fa:a9:68:a7:55:80:
                    ca:08:22:27:25:f1:f8:31:1d:97:de:00:0c:93:67:
                    2f:96:45:ac:d5:41:a0:ee:cc:ad:89:16:11:74:d4:
                    eb:5b:09:5c:46:ef:57:8c:47:83:47:bb:26:b5:38:
                    6f:65:d7:bb:1a:6b:98:9d:f7:dc:72:3f:56:5b:4c:
                    ed:48:a6:7f:f8:58:8b:54:88:11:6c:a5:58:b8:2e:
                    6c:92:13:61:78:60:c2:e5:e0:d3:f6:4d:cb:26:bd:
                    0f:12:15:cc:35:02:3e:99:f5:4f:1c:96:0a:b8:00:
                    2f:9b:9a:42:f8:48:e0:e5:11:38:f0:7c:1b:27:4a:
                    6f:a0:ad:40:64:d2:aa:de:ef:df:55:90:8f:d4:c6:
                    34:41:b0:f1:cb:1c:23:ad:e5:b6:85:84:1a:41:5c:
                    b5:ed:d5:d4:f9:fb:6a:51:ef:a0:2c:3b:68:ba:af:
                    5e:9d:14:8d:36:63:a3:15:d5:bc:bf:81:0e:4b:81:
                    6d:11:29:e1:6f:d6:fe:9f:4b:71:7e:4d:ce:43:8f:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A5:B5:59:B8:51:35:56:CF:F9:5B:07:07:A5:BF:AA:1E:E5:6D:63
            X509v3 Authority Key Identifier:
                keyid:85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:84:9e:2f:59:41:ef:0f:83:8a:be:57:68:9d:34:37:cf:85:
         5a:6e:7a:7b:3a:1a:c4:07:e0:d0:f9:0b:43:c4:4c:64:fe:64:
         be:2f:f4:7d:a7:e3:9c:3e:09:14:d8:c0:b4:2e:5c:2e:02:86:
         9f:1a:c8:e0:c6:75:3d:2e:86:b2:64:8d:bd:23:5c:69:a9:b7:
         94:53:fb:f3:7e:17:84:b8:bb:b2:a4:b3:d7:d2:d7:59:4b:07:
         91:26:1e:db:5e:97:d2:42:bf:32:38:a5:86:7b:ae:48:e9:f4:
         88:80:1f:14:e4:2a:47:01:d6:1d:c7:c5:2b:28:91:7d:8d:74:
         29:53:b1:61:ae:28:5c:d1:14:63:ea:74:af:f5:c9:cc:1f:86:
         ac:82:21:f6:26:b0:38:fd:cc:04:03:d0:89:f5:90:87:2b:69:
         12:2e:aa:46:20:2c:cc:71:19:1c:a5:ec:e0:1e:b5:43:ad:da:
         69:80:d0:52:2f:ed:23:43:ee:8f:c3:bd:ec:0e:c5:66:81:ab:
         f1:22:33:61:79:b0:33:67:23:4e:b6:ef:08:8f:02:8a:30:dd:
         7f:be:ab:51:92:b6:b0:11:6c:85:2e:6a:9d:57:c9:d4:6b:06:
         11:32:13:b6:eb:f9:50:ed:4c:d1:e8:b2:90:f7:a9:b9:c4:65:
         8c:06:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:04:49 2026 by rpki-client