Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File:                     hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier:          A3PsVT3rcHHkAoHfWF2ABHxj61RfmL42nNKsgIMFvwo=
Subject key identifier:   57:E9:DF:A1:91:BC:7F:00:0A:C5:B9:21:1D:9C:88:96:5F:C0:D3:3C
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer:       /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial:       01A0D49408621278DCD66417C09AB9F1CC4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number:          1A72
Signing time:             Thu 24 Sep 2026 18:01:06 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:06 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:06 +0000
Files and hashes:         1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=)
                          2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: NBT+kVm18a1mhjAGfHBTRzRflI3tYL9Cz1SG1Xo9LrY=)
                          3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=)
                          4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=)
                          5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:08:62:12:78:dc:d6:64:17:c0:9a:b9:f1:cc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
        Validity
            Not Before: Sep 24 18:01:06 2026 GMT
            Not After : Sep 25 18:01:06 2026 GMT
        Subject: CN=57e9dfa191bc7f000ac5b9211d9c88965fc0d33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:c9:5e:12:af:27:6f:0e:23:38:89:e5:20:
                    1b:5a:92:a2:c7:36:16:5e:19:f7:96:7a:07:94:cf:
                    e1:60:f1:98:c4:41:56:cc:a0:8c:f1:09:88:21:88:
                    11:c0:4f:9f:5a:48:33:d7:40:31:00:ed:02:bf:7b:
                    28:24:95:2a:83:02:e5:28:23:f7:f1:c3:39:74:38:
                    69:e7:ed:0c:a7:d9:d6:39:c8:52:af:56:be:c6:cc:
                    90:c5:6a:1d:eb:5c:f7:ec:8d:77:fc:d2:7a:72:eb:
                    47:1a:07:06:e2:f2:26:1b:15:d6:7c:5b:85:b0:1b:
                    57:06:68:b5:48:8b:4b:b5:d9:ee:64:e6:6a:38:c6:
                    83:1b:b8:88:af:f0:88:e1:e7:9b:49:ad:4e:0d:e8:
                    88:fa:68:72:a4:84:7e:bd:58:33:b4:1b:10:38:7c:
                    8c:ac:ef:93:d7:02:c6:3e:9b:0b:56:a7:c1:32:2e:
                    18:c0:ed:e6:90:24:9e:41:af:3d:02:16:c7:c3:a0:
                    2f:98:27:95:63:8d:5b:60:da:cf:a2:16:34:3b:4b:
                    44:bc:98:86:a2:cd:86:1c:3d:35:7d:99:a9:89:ce:
                    37:43:ca:26:a1:60:51:d5:5b:9d:6a:97:12:1e:15:
                    9b:9d:ef:8f:5b:04:12:d8:11:a9:e9:43:66:39:81:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E9:DF:A1:91:BC:7F:00:0A:C5:B9:21:1D:9C:88:96:5F:C0:D3:3C
            X509v3 Authority Key Identifier:
                keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:f4:d6:60:a6:29:6a:0b:7e:e3:3a:42:17:f7:db:e2:d5:
         43:c7:38:8e:db:a6:80:2a:5b:d8:5e:7e:4b:0b:a5:ff:e4:ac:
         c5:e0:d8:97:87:5b:2e:62:a8:5b:8a:f7:15:70:46:78:1e:c7:
         62:b5:cc:73:77:ab:a1:91:bf:7b:d6:d8:a9:9f:9e:98:04:70:
         d1:4b:57:c2:a7:f3:47:49:f0:b3:79:03:a6:e1:90:1e:bb:bf:
         38:6b:db:a8:e9:f6:32:d1:10:3b:41:24:4a:4c:43:d6:ba:ed:
         b9:3b:48:47:44:ab:5c:c4:f3:e6:cb:a8:48:02:5f:a7:3b:3a:
         81:73:08:14:62:80:c3:9e:b4:20:c0:aa:9d:32:3a:d4:91:8f:
         e8:93:0d:9c:6a:ac:fc:2e:e3:78:b3:b6:d5:fd:44:c7:9d:29:
         60:f9:c1:ba:8c:0f:ab:e2:d0:43:45:8f:39:cc:ba:ad:b6:c9:
         7a:c0:ab:40:f6:8e:d7:be:c9:bd:b2:3f:cf:2e:bf:ea:2f:42:
         3c:68:11:ec:a4:80:49:27:50:79:dc:99:49:f1:dc:b5:df:9b:
         3e:9a:ea:ec:01:f3:d1:83:f3:cf:b6:dc:7c:eb:bc:b8:d8:20:
         4b:cc:ba:48:fb:72:9f:4a:d0:2f:76:3b:3c:83:cb:5e:fd:30:
         26:56:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:56:53 2026 by rpki-client