Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File:                     HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier:          dND6VH0jHuLxb+YMxUnuu4eI5owd8Cxyn3TYhHpLgGo=
Subject key identifier:   44:37:ED:F3:10:1E:C9:5F:15:A9:3A:F5:04:CB:B1:69:7D:84:99:67
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer:       /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial:       01A14D2BA34BF07F758BF487E3B610349EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number:          05B3
Signing time:             Sun 18 Oct 2026 04:01:07 +0000
Manifest this update:     Sun 18 Oct 2026 04:01:07 +0000
Manifest next update:     Mon 19 Oct 2026 04:01:07 +0000
Files and hashes:         1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: MNBpJv8aeRr9yFcW75AB8h0Z73l06VNWOHk50K58cbk=)
                          2: jj4p-t17R-_1G4MNsVWsKf7lxt8.roa (hash: gxtd056u5s+5E72I3IyM1AJXXx0KOPdQmubbLYFzxYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:2b:a3:4b:f0:7f:75:8b:f4:87:e3:b6:10:34:9e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
        Validity
            Not Before: Oct 18 04:01:07 2026 GMT
            Not After : Oct 19 04:01:07 2026 GMT
        Subject: CN=4437edf3101ec95f15a93af504cbb1697d849967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:12:c6:bd:2e:a6:a2:ae:18:e0:23:b1:e5:
                    86:5b:98:5b:51:10:c7:f9:2f:7e:d8:a4:5e:95:4a:
                    1c:73:e8:55:2a:e6:50:b6:b5:80:6e:46:96:51:93:
                    a7:1f:b8:fb:ec:0c:8d:aa:2b:0e:95:b4:bc:44:d6:
                    d7:ae:7b:9a:ea:5b:af:c1:f9:87:61:67:6d:2d:28:
                    e7:ef:5e:f6:7d:94:85:53:bc:c0:a8:aa:e0:1c:43:
                    dc:1a:a3:a4:7b:a1:24:3b:84:9e:3a:c0:dc:49:14:
                    a8:19:b7:e7:89:04:9c:74:15:fa:73:f4:7d:94:3b:
                    75:8b:be:91:2b:b6:47:7c:c0:82:55:31:85:68:29:
                    ec:e1:d8:a0:a2:30:ba:d2:eb:6f:4e:dc:f6:dc:bc:
                    75:90:df:e3:60:aa:88:5b:56:36:23:7e:cd:6c:36:
                    f3:1c:f3:cb:c7:00:45:75:c9:4b:f2:e3:42:7c:53:
                    5d:b1:e1:71:39:85:5a:76:71:48:74:ce:be:42:fe:
                    4f:c1:13:c7:f9:46:fd:9d:29:87:14:54:27:15:30:
                    eb:8d:1a:a9:ac:73:02:fd:94:0f:48:1e:60:af:0c:
                    b2:4a:e1:87:c4:a1:55:eb:6c:16:9a:ba:e5:c0:2c:
                    01:54:66:da:2a:96:83:52:fc:9b:dd:5e:4d:82:18:
                    5e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:37:ED:F3:10:1E:C9:5F:15:A9:3A:F5:04:CB:B1:69:7D:84:99:67
            X509v3 Authority Key Identifier:
                keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:ab:1a:80:f8:b3:67:3e:7f:13:39:0f:53:c5:63:6c:d8:f4:
         f7:90:f6:95:d2:28:ad:19:63:3d:52:02:fb:2a:8c:36:6f:76:
         46:8f:2b:a1:ff:12:bc:45:5e:d8:6c:c7:4f:c0:a2:0b:6b:d5:
         f7:79:11:57:d5:ad:32:56:27:7d:62:d3:c3:7c:76:a5:fc:4d:
         7b:c7:e3:5b:25:27:5e:6c:7b:10:3e:54:67:a6:da:27:3d:bf:
         ef:de:80:73:28:8c:b5:df:12:df:e1:ad:84:e6:64:0f:1b:fa:
         ab:e9:fc:f9:dd:2f:c8:e8:99:d9:43:e5:cb:19:ee:4a:4b:f5:
         24:61:d2:30:b2:1d:34:df:2e:5f:a5:14:96:94:e2:7a:ac:43:
         d4:36:99:4d:f8:56:2e:dd:32:2f:81:23:0b:e6:e3:71:33:06:
         f7:c6:f2:5a:b5:18:54:bc:4f:e9:fe:2e:ac:ab:9a:b9:40:32:
         f9:35:0e:7b:7a:20:54:73:9d:e6:77:ad:c9:5b:43:f1:ca:d2:
         9d:7c:fc:d3:66:76:6b:b4:1c:01:df:2d:18:ba:4a:b2:fd:6f:
         f8:33:52:d8:00:a7:94:06:53:3a:b3:2f:93:60:b8:13:c2:87:
         4b:89:2f:93:09:41:7b:55:02:6f:0c:8b:ca:cb:e8:06:3b:8f:
         ef:82:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:10:25 2026 by rpki-client