Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File:                     H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier:          B59DP2HJCgj5RPaxdo8FeCPzVELZivWmu4mjAOkrj/k=
Subject key identifier:   21:C1:FA:24:92:1C:40:FE:59:B5:0A:8F:33:93:52:72:14:72:32:41
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer:       /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial:       01A1871B80F4AC2CEEDD8A1781C57BC19FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number:          1261
Signing time:             Thu 29 Oct 2026 10:01:28 +0000
Manifest this update:     Thu 29 Oct 2026 10:01:28 +0000
Manifest next update:     Fri 30 Oct 2026 10:01:28 +0000
Files and hashes:         1: 1Ml0a3GV05dVKgyQm1AT6O8-qig.roa (hash: vDmeyy3WLO0HE90pdx4TXzv29kbhC6H5/Xm0kajhfQI=)
                          2: CyqM0bKo_ElRFFbv0AT5aDspxj8.roa (hash: QCCpwbYRSMOO3zc+/f/cjc8LG2FdpSD4/2ESkOJ9QkE=)
                          3: G2UXryvMWYgvdYG8XaPdE7pZyDM.roa (hash: PdqBjdoKDV3gCJFELA3WohXvGinSd8Rgt/NVk+mMS2g=)
                          4: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: 1ogKWypRKuxxwmndcMNmOQgZFUdYsV9Ojc2i4g5kxNk=)
                          5: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (hash: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w=)
                          6: MQdJhE7DJVvNK-iEKOuroe7Wk6U.roa (hash: IDeLEFXV5ONQ6stNDvzS0ZYYqNXXaca6TX0gy7MtJtY=)
                          7: bR6c5Iui3A2Me6RPgnPPN-v7qhE.roa (hash: KNyqXXbQP8d6nmiYFJtuYs5Cbp0q38PpWcydNq1Wl3E=)
                          8: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (hash: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4=)
                          9: rM2i7X4i-xTENkByKDGS_394QYY.roa (hash: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM=)
                          10: wkDhDr_SsN96X9kXV0Y2UXgMRcs.roa (hash: mQK1vBfWGnexoaLq4CHPrdHK3U44AmVelxJeh/WjBCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:1b:80:f4:ac:2c:ee:dd:8a:17:81:c5:7b:c1:9f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
        Validity
            Not Before: Oct 29 10:01:28 2026 GMT
            Not After : Oct 30 10:01:28 2026 GMT
        Subject: CN=21c1fa24921c40fe59b50a8f3393527214723241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:f5:65:cb:4d:d0:74:6c:f3:27:a6:52:6a:
                    55:f1:4f:d3:e6:bd:89:4c:82:ed:40:1c:4c:62:d4:
                    05:a2:8b:b3:de:e0:24:6b:e7:3a:d0:53:0d:42:d5:
                    28:7b:bb:76:65:16:8c:ea:5e:b5:23:ac:ee:b6:ef:
                    1e:85:b4:c2:ae:be:ca:28:85:bd:b3:4b:ed:d2:08:
                    66:25:49:9d:56:f5:c7:c4:59:3f:dc:f4:09:0f:53:
                    d5:3e:81:c3:4c:de:a4:4c:95:a8:5a:f6:c4:82:7c:
                    d6:c4:e5:9e:ef:dc:40:15:66:c1:8c:ba:60:99:5c:
                    67:e4:21:5c:c4:eb:b3:2e:5d:6c:99:9a:34:44:bf:
                    09:af:90:68:85:a5:83:6f:59:67:ae:c0:9f:13:45:
                    a5:4e:8c:a7:02:32:33:60:3b:0d:6d:ce:53:d0:12:
                    bd:42:29:58:d5:e2:ed:95:59:bf:dd:7b:6e:95:ed:
                    98:cd:01:d1:86:2f:76:66:08:04:8f:db:c7:a6:f7:
                    7f:3d:33:29:72:31:da:e1:34:35:c2:21:04:b5:31:
                    fa:0d:cd:19:0a:0e:91:27:ba:99:bd:05:c9:78:93:
                    7c:10:fa:2e:56:c1:5c:fd:67:5e:dc:45:25:38:a2:
                    17:b1:c8:7f:fb:e0:18:77:2c:4d:f3:8f:09:2f:65:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C1:FA:24:92:1C:40:FE:59:B5:0A:8F:33:93:52:72:14:72:32:41
            X509v3 Authority Key Identifier:
                keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:87:65:4a:ff:db:a1:7b:e8:bd:94:b3:f2:99:5d:6a:7c:dc:
         8a:4c:f5:8c:9b:f2:d8:59:fa:dd:a8:cf:e8:12:36:69:39:73:
         c8:5d:02:77:97:5a:dc:c2:f6:3a:7f:9f:8e:4a:2a:b5:c8:bd:
         18:bd:2a:2b:5c:05:56:7a:1e:02:e3:39:66:f2:42:02:d2:d7:
         fb:4b:ff:bd:96:3b:b7:a9:4d:f0:22:3e:09:f8:34:b3:4c:52:
         c1:97:85:1e:82:f3:26:e8:7f:48:9d:06:32:cf:97:58:a2:cf:
         d7:72:66:0d:5e:af:6e:42:20:bc:48:9e:a2:ac:83:38:1d:60:
         08:9e:3f:f9:d9:04:38:b5:88:09:4b:f5:31:d6:bf:49:04:ad:
         82:79:e1:c9:3d:e3:e7:ef:29:93:51:db:70:c6:c5:ad:e2:14:
         13:5b:99:03:28:42:8a:8f:85:24:b4:e1:24:1d:08:f6:89:e5:
         7c:5a:84:67:e8:a9:ff:26:47:3a:37:4d:e0:7d:8e:df:ec:e7:
         f3:1a:98:e7:58:3a:36:4e:23:e4:c0:73:9f:10:b6:e0:09:01:
         e6:19:de:d5:bf:b0:d8:a8:46:3f:7a:c1:bd:a1:f7:22:f2:f0:
         8d:f2:61:27:41:1a:19:29:a7:06:45:e0:42:ad:f1:2a:16:7c:
         ab:54:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:00:52 2026 by rpki-client