Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File:                     HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier:          wF7COTa1giqhxI9xtjruxl/ndwYz8X2AzFZJILf8Cpc=
Subject key identifier:   57:96:D5:41:C7:D4:2F:6D:FD:E5:D5:5F:16:A3:3C:D5:00:1F:35:7A
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer:       /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial:       01A0702832034B16D0F6333B5006A962655E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number:          11FD
Signing time:             Sat 05 Sep 2026 06:01:17 +0000
Manifest this update:     Sat 05 Sep 2026 06:01:17 +0000
Manifest next update:     Sun 06 Sep 2026 06:01:17 +0000
Files and hashes:         1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: OsyRWVWqhGJldI+ddFSWhljEbON6YU53/GHdPQMQ0M4=)
                          2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:70:28:32:03:4b:16:d0:f6:33:3b:50:06:a9:62:65:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
        Validity
            Not Before: Sep  5 06:01:17 2026 GMT
            Not After : Sep  6 06:01:17 2026 GMT
        Subject: CN=5796d541c7d42f6dfde5d55f16a33cd5001f357a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:e7:1f:4d:73:ce:6b:aa:f0:84:2c:a4:4e:
                    dc:56:36:2d:40:6b:dc:a5:a7:45:6b:1d:a7:40:2f:
                    0e:cb:89:fe:02:4d:d5:19:68:2f:53:9d:81:e6:a2:
                    87:bd:e2:f6:cb:44:b9:7d:89:46:8c:31:fa:fb:ac:
                    03:7f:c6:ca:da:20:b5:16:1b:53:db:63:73:d0:04:
                    0e:0e:61:15:90:82:4a:5c:a0:3d:17:e4:b1:d8:3f:
                    14:08:2e:0c:2a:25:89:4e:1f:63:14:3e:a6:06:04:
                    4e:0a:ce:ee:c3:c6:57:d9:f9:96:34:d5:af:f2:86:
                    0d:90:d0:3f:69:24:fb:cc:9a:73:53:aa:44:75:56:
                    49:46:80:bd:03:20:da:6a:aa:3b:40:2b:b7:54:ad:
                    aa:b9:b1:8d:8f:95:81:61:02:c7:d6:bb:62:22:ef:
                    a2:21:d5:82:06:9f:d2:69:3e:3a:f9:47:55:50:09:
                    af:22:72:cb:1d:58:00:96:e0:6e:d9:6e:e6:cb:1c:
                    cf:c6:e7:e8:f2:8d:c5:9d:fe:76:3d:cc:7c:9a:63:
                    3b:c8:f0:c8:c3:c7:fe:09:13:2d:c8:b0:5d:49:32:
                    40:0d:de:f4:a9:33:43:c6:29:bb:83:dc:be:3a:9c:
                    84:37:25:ac:7d:f2:0e:ad:d4:6c:65:da:16:9a:2c:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:96:D5:41:C7:D4:2F:6D:FD:E5:D5:5F:16:A3:3C:D5:00:1F:35:7A
            X509v3 Authority Key Identifier:
                keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:a3:ed:ea:a2:5a:20:ef:6f:2b:50:94:ae:82:76:a5:8e:
         56:eb:ea:3a:57:91:2e:1d:d8:f5:8d:08:f0:3f:8c:5c:6e:68:
         7d:bc:e6:43:79:c7:8d:f2:44:0d:ac:a1:6d:31:30:05:57:62:
         35:68:2b:88:00:ed:fc:86:75:b1:cd:be:bd:ec:5c:5c:51:f2:
         40:72:ab:98:7b:4c:61:ae:0b:77:35:90:1f:77:e6:62:16:66:
         01:61:31:32:55:64:f7:95:98:2a:66:ed:89:31:5e:e3:2d:d1:
         7a:17:3c:d1:1a:33:aa:1e:d1:08:f4:88:51:f6:f4:a8:ce:57:
         e2:50:5f:59:b5:02:17:f5:ec:b8:27:54:5a:23:ca:0a:42:10:
         d7:b3:9a:78:e1:fa:08:bd:fc:37:8d:3c:e9:11:32:3a:67:a6:
         77:2a:d9:52:dc:05:43:2e:ac:8a:19:14:ae:3c:ff:ca:06:0e:
         2d:d1:c2:95:fe:e5:c8:44:43:ab:6d:ad:09:f2:5b:19:bf:50:
         1c:49:56:43:2f:fb:d0:5c:be:9c:b0:9c:55:cf:89:7c:e1:1a:
         86:c6:1a:c7:35:3e:5c:d5:e4:32:d7:9b:32:a5:f8:89:33:53:
         0e:1d:ca:fb:fc:1f:a6:fd:6a:ec:c5:79:1e:f4:74:41:ab:61:
         cb:10:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:31:03 2026 by rpki-client