Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File:                     hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier:          RbqgMuhtDyTKIR3/n99Ya3uAMOv/eUl3+ccplTOxB7U=
Subject key identifier:   71:C6:38:E7:05:D8:49:05:1C:11:EC:E9:16:6F:F0:3C:72:87:6F:64
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer:       /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial:       01A0811B9B143C662B6C18ABA94102578FE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number:          1A42
Signing time:             Tue 08 Sep 2026 13:01:04 +0000
Manifest this update:     Tue 08 Sep 2026 13:01:04 +0000
Manifest next update:     Wed 09 Sep 2026 13:01:04 +0000
Files and hashes:         1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
                          2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: 0pJDbZvRWeds5t9NqDqTik4R5iC2VeNEipSkjIydOFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:81:1b:9b:14:3c:66:2b:6c:18:ab:a9:41:02:57:8f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
        Validity
            Not Before: Sep  8 13:01:04 2026 GMT
            Not After : Sep  9 13:01:04 2026 GMT
        Subject: CN=71c638e705d849051c11ece9166ff03c72876f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:80:6f:19:c7:dc:d4:36:4c:6a:75:f6:e2:
                    f7:1e:d7:66:8b:a3:61:23:be:36:b7:0f:55:c7:1b:
                    09:48:9e:42:54:de:85:d0:95:69:80:ff:8d:30:51:
                    d2:11:24:a8:03:d0:c4:ef:b4:a7:d8:ea:f2:04:22:
                    57:06:2a:25:18:77:17:d1:13:38:53:3f:b7:7f:0f:
                    ed:fd:24:58:47:dd:30:c4:ed:1e:a2:11:47:af:db:
                    ae:b7:67:64:d6:db:2d:f9:e0:9b:7c:95:99:de:aa:
                    31:a6:f6:62:fa:16:3e:77:2a:e3:e9:c2:5b:a3:5e:
                    b5:83:eb:f5:25:6c:99:39:e4:30:3a:b9:85:bd:ea:
                    3c:72:93:5e:27:0d:d1:ff:b5:75:84:84:7d:28:af:
                    7d:4d:9d:aa:a2:e7:08:2e:c9:ad:b2:52:cd:14:58:
                    b1:d9:9c:02:38:a7:c7:4b:b9:ea:a8:3c:73:bd:b2:
                    00:0c:cb:d9:9d:96:91:95:1a:74:60:a6:7a:f9:3f:
                    18:57:5d:0c:14:2e:a4:00:e7:1e:ac:e7:29:f0:27:
                    da:56:f6:3e:89:f9:31:78:f8:c5:a0:28:bd:7f:ac:
                    10:8f:0d:ba:ee:e0:62:2a:43:d4:99:21:66:0c:a6:
                    66:5a:69:64:05:37:90:97:70:24:bb:7e:97:20:bb:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C6:38:E7:05:D8:49:05:1C:11:EC:E9:16:6F:F0:3C:72:87:6F:64
            X509v3 Authority Key Identifier:
                keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d8:96:8f:ad:e7:3e:91:0b:a7:e5:a6:bc:87:0d:df:f3:73:
         21:21:6a:21:e3:18:60:31:7e:b8:f6:55:c0:27:fe:78:41:b1:
         6d:4d:10:1e:4b:92:91:35:fb:2c:53:54:1b:a1:9d:43:46:e5:
         ac:88:55:96:75:32:95:99:68:c4:19:33:eb:b2:f7:35:67:36:
         1d:80:93:f3:b0:ad:a4:c7:ed:b9:ea:b6:a9:84:d6:da:82:4c:
         ee:5a:80:11:d0:e8:89:89:a5:a4:e7:d0:0c:53:40:e6:c3:65:
         c2:de:3f:6f:44:81:34:fd:0e:0d:4e:de:78:87:6b:47:32:40:
         15:a2:db:4c:fc:cc:af:fb:59:aa:fc:01:f8:0b:2d:79:38:47:
         99:ca:4e:74:36:28:87:5a:f5:8d:00:85:3d:db:38:60:f8:ea:
         9e:44:99:e7:9d:d1:c8:c3:4f:fe:94:50:5b:9e:09:d5:6d:c9:
         d9:28:5a:79:b9:57:a5:e1:c2:da:86:8e:1b:75:c8:80:d7:17:
         04:be:e7:49:f9:17:a1:8d:5b:14:70:53:9b:94:bd:52:bc:1d:
         43:91:44:d1:25:ef:05:a2:69:ec:ea:d2:36:20:c4:f7:81:67:
         7f:bd:4c:e4:f6:8f:1d:53:78:5d:7e:6f:0d:fd:17:68:84:76:
         10:8b:76:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 20:40:57 2026 by rpki-client