Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File:                     HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier:          VK0UNntKiH8CfHmT3+kFkqOHUd4kYwGjMb+jvrtuggg=
Subject key identifier:   EC:46:61:69:C2:D0:7D:CC:BE:8A:B3:98:9E:0C:39:96:3A:CA:94:CA
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer:       /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial:       01A11AF50849D49356142F5EB5DD8A613DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number:          1A28
Signing time:             Thu 08 Oct 2026 10:00:28 +0000
Manifest this update:     Thu 08 Oct 2026 10:00:28 +0000
Manifest next update:     Fri 09 Oct 2026 10:00:28 +0000
Files and hashes:         1: 3GAPsMTYGBgdaWsuRskeq9GU52o.roa (hash: dhH4cdTldQtlsGjr6YNc5jjdZoo6HChKtzPMin0Yqxw=)
                          2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: 7HH1RtEObscJ+GWkr3Q9WJ/76lZs0NFX8VU6+Ms7elo=)
                          3: _Zz8VQ7MI8grviAkY8_zaADFei8.roa (hash: LJuW+ggL7EdFwcEegbo8DIuepwgPOczDjMEaP85LPEY=)
                          4: a_V5J3Vi7G28PHlX5WI1gqWWPqQ.roa (hash: V7Qb7O3ayDy2ziDj46g/EQOgoAU5eN5xUch4BkUXkak=)
                          5: iWpXIGhiwH7fwofoLu2xcq86kzE.roa (hash: X0PfgdblFhAyZnopcIvEudnKhwK5PlO/KEXA8MHJFq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:f5:08:49:d4:93:56:14:2f:5e:b5:dd:8a:61:3d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
        Validity
            Not Before: Oct  8 10:00:28 2026 GMT
            Not After : Oct  9 10:00:28 2026 GMT
        Subject: CN=ec466169c2d07dccbe8ab3989e0c39963aca94ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:f5:b3:09:15:ec:23:7f:76:21:fd:bc:91:
                    a7:d3:81:b6:5b:0a:ab:61:a1:5d:bf:8b:6a:56:66:
                    52:bf:c0:f1:88:63:53:23:c5:c3:61:8d:83:d1:00:
                    32:04:7f:64:fd:99:9f:8f:b6:a1:aa:81:c3:c9:1c:
                    8e:5a:46:70:2d:69:c7:c2:d9:df:3a:65:ab:80:bd:
                    3a:92:e6:c7:74:c4:e9:27:db:68:8b:93:5d:d6:8b:
                    c2:20:d7:0d:63:b3:52:3f:52:37:1c:aa:14:f0:51:
                    b1:35:4d:c2:58:34:a3:b0:d6:fa:41:9f:4a:b7:0a:
                    53:fe:c0:66:51:bb:a2:41:86:9e:4c:35:f2:2b:0d:
                    ae:30:75:1c:3c:8b:d8:0a:11:9e:de:69:57:e8:3e:
                    c3:82:47:b6:9b:6a:5e:e2:65:94:b7:0b:f6:2a:88:
                    c6:af:8d:18:cf:77:b2:8d:3d:57:18:19:f7:aa:04:
                    52:ae:11:5c:10:55:a0:c3:1b:40:3d:fe:f5:2e:aa:
                    ba:24:74:18:71:87:f8:70:5b:ba:7e:b4:e7:4c:35:
                    e7:8c:d5:aa:da:75:86:44:42:0f:98:8a:23:83:da:
                    e5:23:e0:c2:31:87:37:91:de:68:3e:3f:f8:20:66:
                    9c:cc:d8:76:ec:1c:54:e2:a3:77:35:eb:5d:17:45:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:46:61:69:C2:D0:7D:CC:BE:8A:B3:98:9E:0C:39:96:3A:CA:94:CA
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8e:d0:99:79:cb:1c:1c:63:b2:cb:71:78:b4:13:92:75:66:
         df:87:af:0b:46:48:11:d2:f4:54:46:4e:ce:84:ee:25:5d:55:
         ca:ae:0b:59:76:f6:c5:bc:ff:49:72:6e:b8:22:2c:cf:44:32:
         12:e5:a2:47:c9:a4:72:cb:df:ff:6e:e7:fa:74:8c:3c:b0:71:
         e4:7c:1a:83:b5:e0:bf:8f:b5:1a:a8:de:2b:91:9d:f9:60:30:
         93:5a:20:2c:78:97:4d:14:a1:d7:27:c7:c6:a5:36:4f:de:65:
         4d:05:a9:f6:d5:a1:2f:a8:8c:fc:d9:f7:fe:1e:56:9a:56:7f:
         3e:d6:67:00:5f:fe:2c:de:fa:ed:6c:29:9e:fa:e7:a2:78:34:
         79:36:11:d3:e2:bf:63:21:bd:d1:c4:25:c2:55:83:1d:54:b6:
         85:04:ae:2b:a4:77:42:33:c9:f9:f3:e9:51:df:f1:c6:b6:4c:
         9d:36:12:ae:f5:9e:42:c7:72:d8:cb:92:e9:4c:1a:b5:93:4a:
         c4:24:90:58:e1:b4:c7:25:38:13:cb:6f:d3:43:59:d8:b7:29:
         65:65:a7:e6:e4:65:d0:89:26:4e:51:f7:89:96:0b:b7:da:cc:
         eb:98:04:06:6c:21:83:11:bf:69:84:c7:48:26:2b:46:f4:51:
         8f:a7:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:32:33 2026 by rpki-client