Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File:                     HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier:          Fohx/73400xmAfX3GJqdCFfB82L7TC2Wqz1Sbj//W1k=
Subject key identifier:   A7:03:5B:9F:08:BA:33:67:FA:93:D7:72:C4:E1:46:4D:DC:57:FC:F4
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer:       /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial:       01A0D15B84066DEE0BF6350F6E84934F650D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number:          17B1
Signing time:             Thu 24 Sep 2026 03:00:30 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:30 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:30 +0000
Files and hashes:         1: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (hash: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c=)
                          2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: V4fu987zkCgYudeIaBPNTGsEmQMdv5yvUlaZNNNPDW8=)
                          3: lJxYVzr-KS-fYsC57OKvflP8A4c.roa (hash: 4pvbPMsGzdgVlC585Dyoz1kyokZkz2DdP27jl7Yydb4=)
                          4: r-1SzrZjoEXcWaVFk74aF23TjJ0.roa (hash: sRjFv0mWTbb1HZj7c7GM888be2VPScRA9imdmTy3Guc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:84:06:6d:ee:0b:f6:35:0f:6e:84:93:4f:65:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
        Validity
            Not Before: Sep 24 03:00:30 2026 GMT
            Not After : Sep 25 03:00:30 2026 GMT
        Subject: CN=a7035b9f08ba3367fa93d772c4e1464ddc57fcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:aa:fc:66:69:68:4a:86:b2:6f:17:b7:34:0f:
                    7c:8f:56:7e:55:f8:19:59:12:42:05:3f:e7:f0:e5:
                    db:85:1a:a4:47:50:e2:6d:59:aa:6e:b5:e4:b9:db:
                    ee:db:8a:ce:22:1f:9a:82:c8:73:1a:f7:20:65:45:
                    bc:8a:8a:ef:7a:c9:da:e3:73:3f:44:dc:f5:ad:66:
                    39:2b:1b:09:6e:36:50:c4:2c:36:a6:3f:b6:30:09:
                    f4:f6:dd:a3:d1:03:2a:b5:51:da:f8:48:04:f3:ef:
                    a3:0d:8f:e3:04:f4:ae:b3:2a:6d:98:52:72:3f:06:
                    c7:e4:5a:98:ca:b5:2e:6e:72:40:cc:b0:bf:22:a5:
                    66:e4:c3:90:65:14:c4:c1:03:8f:35:53:cf:a1:4a:
                    3e:aa:ef:cc:9d:ec:82:53:15:5f:ac:5e:14:42:89:
                    3a:56:82:78:3e:1e:b2:3b:58:06:41:2d:fb:eb:15:
                    2b:b7:74:b4:0b:4d:1c:1a:2d:9a:a6:be:aa:08:30:
                    e3:5a:e8:b6:c7:67:ee:25:6f:cb:b4:97:5e:e0:46:
                    66:b4:91:51:22:63:94:c3:81:6d:d7:a9:a1:fe:9e:
                    b7:3a:49:b8:06:d8:aa:cc:26:55:1f:b6:b8:c1:30:
                    29:75:f8:f6:58:b8:60:aa:34:37:bc:c3:33:83:6a:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:03:5B:9F:08:BA:33:67:FA:93:D7:72:C4:E1:46:4D:DC:57:FC:F4
            X509v3 Authority Key Identifier:
                keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d5:f5:4f:b4:49:b0:e7:37:e6:bf:8f:b9:bf:13:61:f9:2b:
         b3:8e:66:40:45:af:30:ce:93:92:e7:aa:4e:46:20:87:d2:9c:
         ad:72:9a:40:2a:58:fd:13:8e:28:5f:82:33:d3:c0:43:1b:00:
         2b:be:ab:a0:bd:12:68:9e:a6:e4:30:38:ba:f0:59:f7:46:3c:
         a0:e0:cb:72:72:27:f6:9d:ba:ca:06:49:19:1c:60:bb:2e:83:
         b2:99:14:d0:ab:66:d8:1c:f6:21:fb:91:a0:de:40:05:c7:77:
         76:d0:94:19:00:1d:e6:9c:0c:da:4a:2b:d0:37:f4:81:c1:5d:
         41:8c:ad:cd:a2:ac:bf:96:65:ca:ff:ea:aa:a1:c2:41:d4:a4:
         91:90:41:bb:69:70:ac:f1:c2:dd:6b:02:ee:59:df:50:42:af:
         0c:27:f0:45:50:54:ca:7c:4f:c3:61:ab:d4:ae:ff:fb:4c:0f:
         b6:21:60:77:2f:fb:02:25:b5:7c:29:6b:6f:37:df:1f:25:c1:
         1c:d5:05:6d:5e:52:93:a8:c9:0a:28:3c:5b:80:b3:90:f8:89:
         b1:e6:84:83:6d:82:4f:00:a2:f4:54:f8:92:76:66:6e:62:40:
         f3:4f:62:ce:bb:f4:e7:4a:56:da:b2:20:c1:43:93:9c:38:01:
         66:e5:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:08:29 2026 by rpki-client