Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File:                     HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier:          elLY0iCVxdWcGBec0EqfEaP2Dd4h23sQVKjCqlJBFgI=
Subject key identifier:   93:DF:F9:6D:0A:22:E2:39:0D:BD:5F:D4:82:CA:C0:DA:DE:FC:70:4F
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer:       /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial:       01A157784452164E1E6E23562C11E733DC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number:          0B98
Signing time:             Tue 20 Oct 2026 04:01:01 +0000
Manifest this update:     Tue 20 Oct 2026 04:01:01 +0000
Manifest next update:     Wed 21 Oct 2026 04:01:01 +0000
Files and hashes:         1: 3W6mluySiEpKej6eN1jA5zstxy4.roa (hash: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ=)
                          2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: hpkqyN6O8ZqloC9G5474rOhdPkJAtLztW7cZ96Ojyqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:57:78:44:52:16:4e:1e:6e:23:56:2c:11:e7:33:dc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
        Validity
            Not Before: Oct 20 04:01:01 2026 GMT
            Not After : Oct 21 04:01:01 2026 GMT
        Subject: CN=93dff96d0a22e2390dbd5fd482cac0dadefc704f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:31:e6:5f:11:37:19:ef:7c:89:b3:f2:2e:
                    2d:64:5e:e8:ed:87:bc:0b:69:90:8f:0a:bc:c6:fb:
                    60:b2:52:75:5c:5d:6e:ea:f6:49:3f:cf:48:d7:21:
                    1d:1a:eb:ef:db:f7:47:b3:29:7c:b7:d7:9a:d6:ba:
                    c9:c8:06:c7:9a:94:ec:2c:12:3c:ed:99:85:a2:27:
                    fd:43:2f:52:81:98:cf:02:d9:fe:bb:5b:8a:38:61:
                    2a:a2:bc:dc:bc:3c:fd:63:2e:f7:ef:44:51:6f:69:
                    c2:dc:6a:9f:2d:77:2d:2f:7b:fb:cb:34:47:bf:cf:
                    18:30:c8:73:22:ce:ca:f4:9b:10:56:d4:e2:92:2f:
                    3b:de:5e:7c:4d:00:b3:34:a4:c8:f3:9d:d8:0b:1c:
                    7b:7f:c1:b4:b6:86:57:14:09:b1:c7:f1:91:4c:dc:
                    35:95:8a:bd:d8:fa:68:78:24:d2:6a:d8:fa:6a:3c:
                    f0:41:ca:97:94:50:c4:b5:cd:ff:ac:65:6a:f8:29:
                    18:77:04:21:ee:d2:63:45:c6:af:c6:85:aa:17:fe:
                    4c:fd:f4:af:56:f0:87:63:a9:da:80:f7:e3:8b:53:
                    4f:ae:fd:a0:3e:12:dc:36:54:45:7e:b0:3d:2e:d6:
                    6f:61:00:be:23:c2:12:bc:b1:fb:24:c1:bf:5a:2e:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DF:F9:6D:0A:22:E2:39:0D:BD:5F:D4:82:CA:C0:DA:DE:FC:70:4F
            X509v3 Authority Key Identifier:
                keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:e2:1d:eb:11:d4:24:4e:39:21:af:25:c9:1c:64:76:17:
         06:76:76:30:30:02:bc:6d:65:db:92:20:a4:0e:87:ab:6f:82:
         3c:9c:2b:a9:51:3f:b8:d6:20:30:82:83:01:63:14:91:92:a1:
         0a:ea:49:69:70:a0:02:e0:11:06:f1:f6:c7:69:a6:8a:4e:5b:
         ce:a7:0d:19:90:e7:2c:15:d8:28:c9:a7:cd:03:b9:6a:9b:23:
         9d:9c:e6:0c:24:04:a9:0e:e9:97:c5:45:44:bc:3e:73:ce:ac:
         86:59:fb:ef:9d:ae:13:00:e3:72:b9:07:a2:73:71:5b:0d:76:
         ec:38:3b:0a:ee:ec:5a:42:2b:3c:53:15:dc:6a:cd:7a:b4:37:
         8e:c1:3d:0d:79:4c:df:86:46:12:4f:88:e4:66:d9:d8:2e:47:
         37:5f:1f:a2:46:b9:d8:d1:a5:a9:46:d6:50:18:06:c9:e8:3c:
         7b:c6:9e:6f:15:94:a1:c9:48:b8:41:9d:c6:de:70:f7:8f:32:
         2b:85:80:e2:61:aa:f0:de:94:97:b3:4a:a7:b9:f6:fc:b8:d4:
         59:4d:a1:0f:f2:5b:c8:0e:0b:99:41:83:fc:cd:2d:ce:f6:90:
         44:47:87:e6:45:09:6f:f9:c3:f7:7f:a5:7c:5d:df:29:b1:88:
         d1:e5:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:19:01 2026 by rpki-client