Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File:                     hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier:          MrJdM2x6/GADYB/G1pDHZlLvJ1Mr4fpIUmGXdaehSwE=
Subject key identifier:   40:F4:3B:CA:59:B3:20:2E:F0:58:D9:B3:1A:B9:03:41:3D:9C:1A:B8
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer:       /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial:       01A089E78038064ED39E841F3DEE0CD5A5F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number:          06C2
Signing time:             Thu 10 Sep 2026 06:00:45 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:45 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:45 +0000
Files and hashes:         1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
                          2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: ngl5Nt+r5K13K3hcwgnlEqVZVm6ISCBxpRC9aM4uw44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:80:38:06:4e:d3:9e:84:1f:3d:ee:0c:d5:a5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
        Validity
            Not Before: Sep 10 06:00:45 2026 GMT
            Not After : Sep 11 06:00:45 2026 GMT
        Subject: CN=40f43bca59b3202ef058d9b31ab903413d9c1ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:f9:65:f5:c6:c4:2a:d4:84:13:6f:fb:6f:
                    fd:1e:a5:8c:6f:6e:08:d5:ec:0d:2b:c5:4f:c2:16:
                    44:2c:04:c9:2b:3d:2f:2b:19:72:46:11:d2:e3:5d:
                    c3:36:0c:cf:c0:41:57:70:bc:87:1c:88:95:25:d3:
                    41:08:44:3b:d3:61:fa:3a:b3:47:dd:d7:25:94:82:
                    28:c0:6f:a0:c5:85:67:18:8b:d4:d6:44:0f:53:04:
                    93:f1:90:a3:7a:ff:b0:56:8d:85:29:2e:dd:93:96:
                    6b:99:50:97:8a:9f:33:b9:a9:1c:8c:35:4c:fd:80:
                    4b:e0:a4:bb:fd:47:24:ee:59:59:5f:f0:f8:ae:13:
                    9f:d9:c1:dc:39:c2:39:31:1c:e3:21:1b:70:aa:c8:
                    26:c0:f9:f0:02:0b:34:c2:0f:6b:c3:9a:7e:da:88:
                    c7:09:f0:69:3f:d6:9c:0b:4e:2c:bc:a1:02:1d:80:
                    52:4d:fb:5b:db:a7:32:2a:05:ff:3c:ec:d3:5a:80:
                    af:ed:7c:08:cf:02:27:96:79:6c:78:28:8a:95:51:
                    71:82:70:9d:38:94:bd:17:aa:bf:0a:7a:5a:9f:8a:
                    cf:0e:93:20:47:bf:c2:dc:3c:55:61:f0:0f:e0:07:
                    9e:fb:c6:ab:ea:7e:6e:b3:b2:14:d7:a9:8a:f7:76:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F4:3B:CA:59:B3:20:2E:F0:58:D9:B3:1A:B9:03:41:3D:9C:1A:B8
            X509v3 Authority Key Identifier:
                keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:31:87:6b:7c:a9:97:54:05:5e:a3:ff:a7:b3:4b:e6:03:f8:
         08:78:b2:a0:23:a9:7c:18:83:64:8c:11:5b:c5:40:4e:0f:c8:
         65:79:1d:a4:11:ca:31:a3:7d:64:80:e5:c8:64:5c:0f:fb:a3:
         6a:60:ad:0a:01:dc:7d:48:be:0e:98:39:fe:42:c6:8d:9d:d5:
         f1:70:16:af:46:16:fe:b8:43:d5:3a:c9:a8:44:12:ac:97:cb:
         49:ab:e8:1e:61:7e:20:af:6f:e5:19:96:a4:a2:a6:ba:ab:10:
         3a:97:0d:b4:b2:b7:5c:c5:45:62:e1:04:55:70:c6:bb:89:d3:
         e5:07:4c:e2:a5:7d:da:08:da:47:da:6b:58:52:aa:6e:e9:52:
         0d:ed:b2:4c:20:3d:5d:49:4b:21:57:77:6f:49:91:5d:75:b4:
         ba:7d:ec:79:e0:3c:c8:80:1e:67:b4:df:2c:41:b9:9f:6d:5f:
         e2:3b:e9:3f:82:c9:ae:e2:d1:20:07:d2:8f:27:f8:a6:3d:61:
         34:a6:9f:a7:c5:43:a7:e9:91:16:d8:ee:8a:01:ea:a9:8a:dc:
         b1:6b:15:30:c5:e5:5a:59:4e:ba:da:e5:d7:92:8c:9d:b7:4c:
         01:fb:b6:b1:0e:c0:88:a5:e1:14:f6:30:b8:d9:92:b6:8d:de:
         3f:85:98:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ54A4Bk7TnoQfPe4M1aXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw
NmJlOTkwHhcNMjYwOTEwMDYwMDQ1WhcNMjYwOTExMDYwMDQ1WjAzMTEwLwYDVQQD
Eyg0MGY0M2JjYTU5YjMyMDJlZjA1OGQ5YjMxYWI5MDM0MTNkOWMxYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryH5ZfXGxCrUhBNv+2/9HqWMb24I
1ewNK8VPwhZELATJKz0vKxlyRhHS413DNgzPwEFXcLyHHIiVJdNBCEQ702H6OrNH
3dcllIIowG+gxYVnGIvU1kQPUwST8ZCjev+wVo2FKS7dk5ZrmVCXip8zuakcjDVM
/YBL4KS7/Uck7llZX/D4rhOf2cHcOcI5MRzjIRtwqsgmwPnwAgs0wg9rw5p+2ojH
CfBpP9acC04svKECHYBSTftb26cyKgX/POzTWoCv7XwIzwInlnlseCiKlVFxgnCd
OJS9F6q/Cnpan4rPDpMgR7/C3DxVYfAP4Aee+8ar6n5us7IU16mK93YDbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED0O8pZsyAu8FjZsxq5A0E9nBq4MB8GA1UdIwQY
MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt
ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm
LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7jGHa3yp
l1QFXqP/p7NL5gP4CHiyoCOpfBiDZIwRW8VATg/IZXkdpBHKMaN9ZIDlyGRcD/uj
amCtCgHcfUi+Dpg5/kLGjZ3V8XAWr0YW/rhD1TrJqEQSrJfLSavoHmF+IK9v5RmW
pKKmuqsQOpcNtLK3XMVFYuEEVXDGu4nT5QdM4qV92gjaR9prWFKqbulSDe2yTCA9
XUlLIVd3b0mRXXW0un3seeA8yIAeZ7TfLEG5n21f4jvpP4LJruLRIAfSjyf4pj1h
NKafp8VDp+mRFtjuigHqqYrcsWsVMMXlWllOutrl15KMnbdMAfu2sQ7AiKXhFPYw
uNmSto3eP4WYpQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:58:22 2026 by rpki-client