Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File:                     tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier:          6APT9b8BQ8U1Fcwm/hbuhznxQX5l3viRHK1TuVWkKbQ=
Subject key identifier:   C3:57:F4:52:A4:4B:8C:BC:21:A6:63:49:67:D3:9D:81:70:4A:28:F3
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer:       /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial:       01A0D9F130D33B8A14E1534833C4ED2FE95C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number:          1798
Signing time:             Fri 25 Sep 2026 19:00:57 +0000
Manifest this update:     Fri 25 Sep 2026 19:00:57 +0000
Manifest next update:     Sat 26 Sep 2026 19:00:57 +0000
Files and hashes:         1: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (hash: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA=)
                          2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: vfAmkkTbJ1mgmNMYRwZJ/Hoi0JC+I4xWnyX0E1mAyeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:30:d3:3b:8a:14:e1:53:48:33:c4:ed:2f:e9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
        Validity
            Not Before: Sep 25 19:00:57 2026 GMT
            Not After : Sep 26 19:00:57 2026 GMT
        Subject: CN=c357f452a44b8cbc21a6634967d39d81704a28f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:81:39:8e:98:f1:2e:36:d2:5f:e2:1e:f7:
                    71:1b:e4:56:b3:87:72:77:30:6f:2c:2a:68:a3:ad:
                    ff:10:77:3c:b9:74:66:91:32:f3:eb:02:28:c1:27:
                    45:7e:40:e9:ee:9f:d3:5b:11:20:a8:2f:6e:8a:89:
                    1d:f8:f9:42:a9:7a:5e:eb:4e:87:0e:66:49:86:01:
                    ac:1c:be:55:83:9a:28:1b:a9:ab:c3:8b:57:e7:5c:
                    3f:c0:22:ef:2b:54:90:e0:4d:c9:74:dd:d0:5b:2d:
                    5e:a7:b5:fd:b2:12:6c:fb:fc:71:02:b0:be:8e:29:
                    58:ef:6e:fa:f3:85:cf:b1:00:0e:c6:9a:bd:c2:17:
                    db:33:9e:dc:a2:2a:a0:40:32:2d:31:62:03:a5:62:
                    01:f1:5d:a4:59:c1:a2:5c:d9:94:e3:92:bf:4d:e4:
                    38:6a:a6:ae:68:22:e9:f0:a8:05:ce:c0:89:5a:84:
                    30:28:85:01:85:7e:09:c5:37:83:6f:88:1e:44:a3:
                    83:a7:90:f8:93:de:48:2d:ce:a5:62:c3:5d:cc:fc:
                    bf:67:f7:73:f1:ae:cb:f5:96:cb:ee:4d:77:0c:ff:
                    30:b2:27:a7:94:f2:42:dd:9a:d8:66:20:cc:93:6a:
                    e6:ca:a5:28:f0:f8:c2:83:e6:9d:a6:09:c5:58:1a:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:57:F4:52:A4:4B:8C:BC:21:A6:63:49:67:D3:9D:81:70:4A:28:F3
            X509v3 Authority Key Identifier:
                keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:66:18:8f:a2:b8:1e:f6:43:66:dd:85:a8:d0:5b:72:08:e9:
         04:bb:07:3e:a0:1f:fa:45:2d:f6:bb:1b:fe:b3:bf:f9:37:2b:
         ea:be:56:b3:96:f2:2a:90:ef:63:94:98:31:64:6e:3c:e0:98:
         cb:c2:72:c3:78:3c:ad:62:26:6f:db:86:8b:db:ff:4a:db:4c:
         30:5d:c4:50:de:a5:c8:40:74:1e:5d:00:b3:06:51:77:e7:8e:
         79:c0:75:3a:d9:c7:cf:f7:82:0b:e5:e2:3a:e7:fa:49:81:98:
         92:3b:1e:1d:98:7e:4a:f6:9d:06:29:50:df:8f:57:46:76:59:
         31:5b:c2:47:b9:8d:8d:74:d2:ce:7d:2e:87:ce:34:0a:77:5b:
         39:1e:c5:c1:17:7b:cc:8e:a6:ba:36:c7:f7:92:c6:15:5b:52:
         67:0e:9a:60:e0:b5:ea:5a:08:35:f9:af:d8:cc:07:a5:a6:5d:
         43:38:79:44:0d:e1:69:ba:3d:34:69:1f:b1:dd:32:7b:7b:85:
         80:3b:6f:0b:7c:c6:c5:1e:5b:02:58:56:8e:a5:f1:bd:34:a8:
         ae:e8:d8:08:25:d4:34:86:a8:d2:e1:f4:21:15:5c:b0:f3:d0:
         d3:df:2a:ce:cd:29:ed:f3:82:c9:22:4e:8e:f7:3c:f8:b3:c6:
         2d:a6:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:37:03 2026 by rpki-client