Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
File:                     0HNWUFJtK79SUNl5fknbHZ8cwn8.mft (raw, json)
Hash identifier:          v70R5dqFfJ61nLSUtkBT6wNtBBxZrYGIijN1PdZ0okA=
Subject key identifier:   9D:E1:F7:E1:E5:DF:3D:E4:AB:5A:50:AB:53:B0:36:AC:17:76:CB:5C
Authority key identifier: D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
Certificate issuer:       /CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Certificate serial:       01A03F72065479BAB69C33AF4B45DDAC1E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
Manifest number:          0328
Signing time:             Wed 26 Aug 2026 19:00:32 +0000
Manifest this update:     Wed 26 Aug 2026 19:00:32 +0000
Manifest next update:     Thu 27 Aug 2026 19:00:32 +0000
Files and hashes:         1: 0HNWUFJtK79SUNl5fknbHZ8cwn8.crl (hash: eGZBVWGdXY81x2Ev0NjrMLD+BjZ3M09YkyPDG5mzSm0=)
                          2: WrLNxAyyuRsHIs6t3d8ID4TXQxk.roa (hash: PhJyPBri0VSG1gtomnKeMBfQbUvbGb+z4erxQ/DDa9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:72:06:54:79:ba:b6:9c:33:af:4b:45:dd:ac:1e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
        Validity
            Not Before: Aug 26 19:00:32 2026 GMT
            Not After : Aug 27 19:00:32 2026 GMT
        Subject: CN=9de1f7e1e5df3de4ab5a50ab53b036ac1776cb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:65:09:b5:cf:5d:f0:c6:b8:a4:bd:3c:19:
                    75:4a:47:7b:4d:e2:0c:8f:4a:31:2a:7f:fe:de:60:
                    bb:f6:92:7b:71:6c:39:7c:0e:62:ff:cd:72:6b:10:
                    2d:1a:2b:0f:07:be:a2:fc:dc:5c:ba:36:fa:0a:4e:
                    3d:83:21:58:49:d2:0c:33:46:2e:6a:79:77:e6:de:
                    28:1e:b8:e3:dc:ff:37:ce:2d:72:44:c9:d6:c3:f2:
                    d9:ca:a4:5c:59:48:57:93:0b:fe:c5:ae:7a:49:c7:
                    81:1c:bc:a5:6a:5e:35:04:61:d1:28:ab:6c:2c:36:
                    16:4e:b2:d4:68:91:05:26:11:02:1a:a1:9f:a8:dc:
                    82:fc:bf:cf:8b:91:91:aa:81:6f:58:88:2f:0d:3c:
                    d1:49:b0:67:c9:45:dc:c1:4d:ed:be:d8:d9:4a:a6:
                    9c:9e:9b:6c:ef:ba:47:5f:36:2a:89:ee:f3:1e:51:
                    ee:63:1e:eb:ab:dd:79:57:24:57:1e:81:62:99:58:
                    66:07:d2:75:ed:34:ae:be:17:1c:d0:63:25:cf:48:
                    bb:8c:5b:f4:ee:3f:8b:6d:72:27:3b:0c:e7:78:ca:
                    2b:00:8f:e8:54:7e:1f:9a:7c:68:27:a0:f6:e5:ff:
                    bd:5c:25:37:68:31:0e:d0:15:b8:d8:32:99:0a:d7:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E1:F7:E1:E5:DF:3D:E4:AB:5A:50:AB:53:B0:36:AC:17:76:CB:5C
            X509v3 Authority Key Identifier:
                keyid:D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c3:0b:2b:4e:04:fd:8c:3c:ab:66:61:64:af:bd:57:d9:1e:
         59:92:45:77:33:94:34:2b:21:23:4e:dc:04:2a:fc:80:ca:04:
         fa:be:6c:aa:30:b0:47:5c:fd:66:4d:4d:c2:c6:cf:24:9c:21:
         63:ba:71:4e:7c:3e:e7:0d:d4:da:81:dc:fc:73:d2:df:b0:d1:
         27:8c:b8:fd:24:0a:0e:64:23:e1:46:57:22:2e:ef:62:05:bb:
         bb:ea:65:7a:ba:97:c6:c9:dc:fa:83:43:cf:4b:f7:d4:e8:9a:
         d3:5e:31:43:a4:67:a1:9b:3c:23:db:6e:03:a5:df:a7:fb:da:
         21:44:76:8e:68:f9:f4:f8:82:40:f8:0a:06:dd:b7:ab:0b:47:
         bc:69:46:95:5b:78:d3:3c:48:38:71:70:f8:41:e7:a2:69:9e:
         2f:38:aa:76:7f:2d:e4:14:af:49:2d:54:86:5a:54:5d:7a:a3:
         6c:e7:b2:54:ec:5b:a4:7a:df:c0:6d:2a:f6:94:a5:f0:47:37:
         27:ae:0e:4c:24:2b:62:8a:fe:d6:90:f9:a1:0a:aa:e2:a1:c2:
         1e:28:d3:f9:85:19:cd:3c:13:58:a6:be:c8:00:7c:35:73:a2:
         52:0f:77:fd:0e:b9:49:78:b7:8f:ea:22:0d:6a:6d:93:36:99:
         53:4e:d4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:51 2026 by rpki-client