Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
File:                     hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft (raw, json)
Hash identifier:          wRSAQaAQVDLnQSjjHrzAq/w1se3Aw2SI5+uFIdHScSA=
Subject key identifier:   F3:05:79:3A:05:80:C7:05:8C:23:FB:9A:EE:D1:D6:57:4D:61:A4:65
Authority key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
Certificate issuer:       /CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Certificate serial:       01A025446EC28831D569BC5280BE789D9C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
Manifest number:          0345
Signing time:             Fri 21 Aug 2026 17:00:36 +0000
Manifest this update:     Fri 21 Aug 2026 17:00:36 +0000
Manifest next update:     Sat 22 Aug 2026 17:00:36 +0000
Files and hashes:         1: 82t5-hxlbBokWJ95cU6-iNwwzGE.roa (hash: /vM2wNO4llhGTKJMkB3GroMrqeVphHqzb5ESd4v5N4Q=)
                          2: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl (hash: xAKO104NLH3sEkuEnXU65fTAdS8Ge1EapJWMJSJd2Fk=)
                          3: pvFUrI_A5H0R-SC8Obxd0M4wuXA.asa (hash: ClaCHktyajo1QODXjIflQSjewdTjeYxeK2EbW8lhLgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:25:44:6e:c2:88:31:d5:69:bc:52:80:be:78:9d:9c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842e1583c6d2b94878c5a9839ef67f56144b8565
        Validity
            Not Before: Aug 21 17:00:36 2026 GMT
            Not After : Aug 22 17:00:36 2026 GMT
        Subject: CN=f305793a0580c7058c23fb9aeed1d6574d61a465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:4a:ac:36:8f:3d:7c:95:7c:27:30:59:89:
                    21:35:a8:ce:1e:73:d9:fa:70:52:11:aa:b8:e2:34:
                    85:65:96:a6:d7:48:0d:35:78:98:70:3f:f5:68:38:
                    a9:48:07:17:88:73:68:56:d5:49:62:66:ee:a4:05:
                    47:63:c2:58:3d:14:4c:65:0c:8a:fb:88:5d:53:9a:
                    88:4b:0e:5c:85:06:02:6c:b3:8b:62:7a:04:08:27:
                    55:7b:17:46:38:13:ff:8b:49:5b:62:d1:90:b5:e1:
                    12:2d:4f:19:7d:8b:4f:45:f2:50:d8:74:02:f0:4a:
                    ea:21:4b:a9:4f:10:dd:d4:e2:0f:b5:b8:60:db:13:
                    9d:a5:0e:83:b7:73:67:42:a2:5b:30:55:ab:be:d6:
                    5d:18:d3:c4:c5:5f:72:dd:16:c9:df:11:70:9c:a6:
                    a8:50:0a:4d:cd:47:e2:8e:4e:ee:ad:21:0c:d2:0c:
                    0f:8d:0f:c4:e4:de:7e:4b:9d:9b:b1:60:73:7e:bb:
                    1b:53:4e:79:07:45:e4:b7:fd:d8:11:24:f7:81:9a:
                    05:5e:b2:ad:36:c3:ae:4f:aa:d5:75:5c:5f:18:79:
                    e9:82:95:bf:e3:54:36:d7:a1:0d:2f:6e:9e:f3:4a:
                    9e:67:48:0d:24:39:cc:eb:e5:2d:3d:2c:80:fc:6a:
                    50:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:05:79:3A:05:80:C7:05:8C:23:FB:9A:EE:D1:D6:57:4D:61:A4:65
            X509v3 Authority Key Identifier:
                keyid:84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:63:6e:b0:00:eb:33:96:53:95:81:73:67:49:aa:b0:e9:2f:
         ba:e9:e2:3b:c3:09:2e:03:d2:5f:74:9c:f8:70:14:5b:f3:f1:
         c7:d9:99:b4:25:2c:e2:ac:ae:88:a6:e8:ad:1a:fe:8e:42:78:
         e1:0d:d2:4f:e5:46:73:f2:5c:07:bc:30:fd:ae:1f:44:c7:c8:
         b6:95:4e:76:fb:58:32:83:65:08:a8:95:62:b5:fe:a1:54:cb:
         d9:49:0b:0c:4a:ee:65:19:27:c7:4e:50:32:dc:8f:a9:6b:cb:
         b3:e1:95:e1:60:5e:8d:c6:9f:e4:eb:c5:a2:67:4a:72:69:05:
         0b:ce:83:dd:a1:23:90:3b:cb:c5:fb:4b:d9:61:63:05:bb:a3:
         ac:f9:98:38:e7:78:eb:d5:8c:0c:8a:c3:1f:ca:8a:cc:fe:c1:
         f4:34:71:c1:b7:5b:40:2f:e2:b7:ec:d0:b8:ec:76:9b:8b:25:
         d0:1a:a2:51:49:c8:53:db:5a:83:65:a3:e4:15:83:00:ef:39:
         97:36:54:01:90:65:ba:d0:44:d2:25:20:1f:a1:40:9b:5b:4c:
         cd:9e:96:55:c8:ff:9e:09:7b:66:75:b2:0c:8b:9d:ca:34:b4:
         6f:3c:6a:06:90:cb:62:e7:e1:d4:11:32:86:ca:b6:58:d0:1c:
         b4:26:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:42:47 2026 by rpki-client