Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
File:                     hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json)
Hash identifier:          P0gBpIWOmOtbARDtGuMUIErQV37Ra/ayI9CnVW/bZYM=
Subject key identifier:   92:DC:DD:31:89:AF:EE:D1:AA:C2:D5:2A:CC:6B:F8:74:F6:8D:33:05
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       01A0CE5A4679EDF7BD963EFDFF95693698C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
Manifest number:          1830
Signing time:             Wed 23 Sep 2026 13:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:17 +0000
Files and hashes:         1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=)
                          2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=)
                          3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=)
                          4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=)
                          5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=)
                          6: Iz-RnZB4CPBnQJYhfp0OAhLrcMM.roa (hash: FaucEzJxlOy2Yut4nsgevP064GyqmURdESpVYmPVMZw=)
                          7: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=)
                          8: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=)
                          9: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=)
                          10: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=)
                          11: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=)
                          12: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=)
                          13: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=)
                          14: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: 6cOW+XF5RImunTJL9hUOsOu7KJbNndW6PIlJRqTBcwU=)
                          15: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=)
                          16: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=)
                          17: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=)
                          18: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:46:79:ed:f7:bd:96:3e:fd:ff:95:69:36:98:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Sep 23 13:00:17 2026 GMT
            Not After : Sep 24 13:00:17 2026 GMT
        Subject: CN=92dcdd3189afeed1aac2d52acc6bf874f68d3305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:61:6c:7b:de:12:f0:6d:bf:cc:ee:0c:f5:
                    45:38:ca:f1:2e:74:09:d7:3b:74:4f:db:83:e2:4d:
                    56:ef:ad:d4:75:41:59:14:72:f2:77:4f:0b:26:eb:
                    7b:db:46:5d:78:13:88:95:ea:ee:95:6b:ad:a5:97:
                    88:90:46:a4:dd:39:75:f3:ef:62:f4:5d:4b:24:28:
                    03:c6:6a:70:dd:77:12:0e:af:14:67:b6:a5:b8:84:
                    a2:71:93:97:3f:ef:46:65:6d:6e:3c:e5:a4:c9:18:
                    63:4c:2a:1b:81:9f:c2:53:d3:7b:d4:c5:fb:03:11:
                    58:8e:b0:04:32:ec:37:e3:65:0e:16:27:2a:b3:13:
                    98:ba:d7:6f:88:ff:bd:f2:a3:f1:fd:0b:c6:df:38:
                    04:76:43:06:6b:98:79:76:6f:03:31:d7:08:bc:96:
                    32:c8:b0:13:af:58:0d:bf:0d:57:12:3b:c4:f0:35:
                    f2:1b:22:c1:77:c5:bb:dc:a9:6d:f6:2b:94:3b:eb:
                    91:79:e5:80:62:77:71:99:e8:72:28:93:91:a8:6e:
                    c6:24:b1:17:9c:07:d0:48:ef:c0:41:ef:7f:83:39:
                    e2:e3:c2:0d:86:f0:83:a6:35:6e:fc:ac:4b:bc:bc:
                    4d:a1:e8:96:fd:ac:5a:30:19:f2:44:8c:bf:18:ba:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DC:DD:31:89:AF:EE:D1:AA:C2:D5:2A:CC:6B:F8:74:F6:8D:33:05
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0f:7e:6d:ca:ac:84:a4:fe:d8:f7:74:78:d8:77:11:f6:ef:
         7c:1b:f6:22:f1:1f:ac:0e:03:b3:6b:3e:14:02:b8:ad:40:1d:
         3c:d0:70:8a:96:80:70:de:b3:62:78:dd:08:b2:91:dd:66:70:
         cf:d5:80:1b:71:4b:f4:86:26:f6:01:15:e7:7a:26:ed:6c:ba:
         c6:55:e0:20:cb:09:a1:a1:b4:cd:fe:e7:3e:89:2c:32:86:69:
         a8:d3:ce:f2:8b:c6:c2:f9:f1:cf:30:53:e5:91:be:20:08:da:
         07:b3:25:16:54:0f:1c:8a:0f:21:1e:3a:27:b5:21:20:b8:53:
         06:9e:ec:1b:94:a1:6b:79:20:06:71:78:28:dd:d0:67:87:4a:
         1d:cf:b3:38:da:e9:eb:59:ce:3f:77:4c:78:7e:47:e6:d0:32:
         a4:40:e3:c6:89:cc:3a:fd:49:a2:02:9c:75:7d:3a:50:2a:ba:
         60:46:df:f8:c1:71:00:81:55:ca:a4:b5:31:3d:1c:5f:65:ce:
         99:08:04:cc:1c:c0:c9:1e:4c:16:43:b4:01:77:38:e6:8d:b9:
         82:e9:b0:ea:24:23:03:82:97:6a:6a:86:69:83:f6:e0:bf:fd:
         0b:29:c8:a1:e7:3e:90:33:bd:03:62:45:f3:13:4b:fe:5e:5f:
         77:3e:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:14:19 2026 by rpki-client