Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          QZRsgArx0TvIyMrGxq54bvzeCB7i7tWM/CeBl+yuZaU=
Subject key identifier:   57:9E:1E:3A:21:C6:14:29:2E:BA:BE:A4:DF:75:14:0C:9A:6F:1A:A3
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       01A089B06751352A5EEAC014850780F1ECFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          048D
Signing time:             Thu 10 Sep 2026 05:00:34 +0000
Manifest this update:     Thu 10 Sep 2026 05:00:34 +0000
Manifest next update:     Fri 11 Sep 2026 05:00:34 +0000
Files and hashes:         1: GA-VcXz1vXl1-W4ySsL5yRbRR90.roa (hash: sabt7kSP6Ub+Pf7PD1DhCfJjvsVteYy09jKtBPh49Ec=)
                          2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: 7r5uZgqtNk7Q5+XBxZ1nKDQyr6pJei3uQL/L1RgOe8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b0:67:51:35:2a:5e:ea:c0:14:85:07:80:f1:ec:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Sep 10 05:00:34 2026 GMT
            Not After : Sep 11 05:00:34 2026 GMT
        Subject: CN=579e1e3a21c614292ebabea4df75140c9a6f1aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:91:b3:ee:8d:d7:84:20:64:fd:d5:34:bb:
                    1f:02:a5:4d:2f:21:1b:c6:79:08:73:a8:fc:38:c5:
                    79:9d:1b:c7:21:8d:f4:9a:3b:b2:f4:20:b9:a3:24:
                    a9:e1:d7:3e:df:1e:7f:ab:c7:e2:37:cb:93:ad:04:
                    4c:48:e3:b8:bc:4e:0b:1d:6e:f2:b7:02:af:b7:17:
                    d6:72:ba:0e:b2:3f:2b:ca:c3:71:a3:d3:10:4a:66:
                    52:dc:fc:1e:9a:a7:c0:7a:88:0c:2c:0f:c9:e1:f6:
                    dd:e4:a8:32:04:1d:81:e2:8f:f6:88:ee:59:f5:7b:
                    83:e9:d0:ee:b3:5e:42:cc:f4:e8:da:ac:7b:e2:4c:
                    fe:63:95:67:7d:84:81:28:b5:dc:d3:60:b5:4e:e1:
                    09:56:c9:81:64:2c:58:c5:35:e8:5f:f7:5e:c2:d4:
                    3f:39:76:db:c1:8e:6e:75:b3:59:cc:8b:c6:26:16:
                    80:97:49:df:ff:85:8b:fc:ff:05:5c:aa:11:b6:ca:
                    e5:1f:a8:92:45:ce:67:35:5e:35:15:0e:ae:06:1d:
                    88:ab:32:56:45:c6:0d:fe:ba:2e:69:a5:88:17:46:
                    42:28:88:f0:26:cb:1e:2c:7c:3e:1b:26:37:49:65:
                    cb:ee:4e:48:3d:c4:09:95:e1:60:f1:8a:46:f5:13:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9E:1E:3A:21:C6:14:29:2E:BA:BE:A4:DF:75:14:0C:9A:6F:1A:A3
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2c:bc:68:0a:46:e9:d4:69:54:f8:8c:a4:ff:55:30:7f:5b:
         24:f8:28:d4:07:d8:0b:54:f9:14:01:b0:41:47:a6:32:db:1e:
         d1:36:d7:20:2d:8a:54:95:73:7e:93:9e:83:5b:8b:3c:59:13:
         5d:9c:ee:94:44:87:13:6d:e3:d8:dc:6d:92:1a:78:5a:b6:ba:
         43:fb:bc:91:25:33:3c:72:d2:25:f6:52:a3:94:30:84:0b:5c:
         c2:6e:9d:d1:66:83:5a:44:de:34:c2:41:10:6a:bf:72:bd:dc:
         da:1b:c1:24:da:49:52:b1:2a:c8:d8:ce:85:9f:d4:f3:76:1a:
         40:9f:94:d6:4a:bf:98:fb:02:26:60:ea:11:a4:53:59:75:4c:
         92:b4:d0:d2:05:e1:ff:4d:ff:6a:d6:2e:c2:07:0f:93:4b:b4:
         1d:ca:47:9a:40:93:a8:25:7d:0a:26:26:dc:ab:e9:72:2c:af:
         cb:4f:20:7d:ce:5b:0b:32:ee:32:57:32:b6:53:2a:14:43:ab:
         15:76:2f:4c:19:37:eb:c0:a4:d6:f2:ad:23:c4:a9:93:02:39:
         50:00:38:81:6d:d0:0d:5b:a1:26:d1:3d:40:6c:48:28:f2:cc:
         c0:ac:bd:1f:e2:6d:4c:2b:8a:21:de:a8:ac:b6:b4:f9:5e:4f:
         03:03:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:24:17 2026 by rpki-client