Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
File:                     Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft (raw, json)
Hash identifier:          PZVgGKsWKoYedXpXuKoz+23fBeCONxRpSMl5Hk43kjA=
Subject key identifier:   56:BC:79:23:F6:24:A2:AA:6C:6F:96:A7:5E:4A:7D:BE:B5:52:DC:C6
Authority key identifier: 1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
Certificate issuer:       /CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Certificate serial:       01A1DE714F4336F90E5129FC7327D1326AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
Manifest number:          0171
Signing time:             Sun 15 Nov 2026 09:02:10 +0000
Manifest this update:     Sun 15 Nov 2026 09:02:10 +0000
Manifest next update:     Mon 16 Nov 2026 09:02:10 +0000
Files and hashes:         1: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl (hash: OZuuiJw1lEiLxpxygRd/a417apDlu28WzONUOxehKr4=)
                          2: nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa (hash: 6zSk/eu9Fh0Y0k4njwXKHhSTfWBnk84TWmm0U218WXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:71:4f:43:36:f9:0e:51:29:fc:73:27:d1:32:6a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ede33150c1d268dae3b04d2aa69e30430816f61
        Validity
            Not Before: Nov 15 09:02:10 2026 GMT
            Not After : Nov 16 09:02:10 2026 GMT
        Subject: CN=56bc7923f624a2aa6c6f96a75e4a7dbeb552dcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:9f:97:85:41:10:09:7c:06:4e:c1:fe:8a:
                    52:eb:0a:be:7f:12:27:c4:25:61:bc:18:9b:ab:93:
                    ff:8a:ff:2a:9f:88:13:b8:d5:1f:ad:a2:87:44:44:
                    31:eb:da:b5:7d:60:c5:c5:0b:b6:ee:ee:b9:23:08:
                    9f:d8:cd:05:60:4c:5f:81:35:73:88:dc:19:62:27:
                    df:e4:0c:36:06:0a:cc:bf:70:7f:f4:e9:33:e9:cf:
                    0b:d6:8e:c7:cc:1a:ca:22:d8:dd:97:14:4a:f9:16:
                    f1:d7:50:8f:31:87:76:d2:34:51:ee:06:0a:6c:ee:
                    68:28:1e:2b:fc:8c:16:7c:21:20:6e:e6:71:eb:fb:
                    5c:ec:b7:17:d6:3f:fa:67:a2:ab:10:ea:7b:af:d3:
                    da:48:19:2c:ba:69:34:15:85:cd:cc:f7:37:9d:94:
                    26:e6:4d:e3:4b:0f:63:1f:ca:60:bf:16:f9:dc:13:
                    ed:34:a6:69:62:77:0d:d0:31:5c:52:77:c5:44:74:
                    76:69:03:0c:a8:41:d4:fc:e0:3b:be:3b:c8:f2:9b:
                    2a:ec:51:2d:8f:58:40:bf:a8:6a:c7:2b:87:57:a0:
                    85:4c:f5:5a:e2:52:79:3f:7a:55:19:df:d7:b7:d5:
                    19:f9:aa:73:a3:da:58:62:83:57:17:c0:94:fd:6b:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BC:79:23:F6:24:A2:AA:6C:6F:96:A7:5E:4A:7D:BE:B5:52:DC:C6
            X509v3 Authority Key Identifier:
                keyid:1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:88:78:f6:80:d1:06:d5:69:d8:9b:8e:f9:20:7b:21:39:0d:
         77:8e:63:9a:8b:56:2c:08:6c:6b:f2:30:84:d4:af:37:cc:d8:
         88:b6:ac:9f:4e:ab:1a:e0:53:8c:68:65:d3:78:ee:6a:81:0d:
         63:08:58:51:b0:09:98:00:a5:42:fe:be:7b:b5:bd:94:91:b1:
         34:f7:37:a5:f6:a5:1f:6c:eb:97:f6:69:bb:4c:83:50:ad:06:
         1a:e7:57:9b:8b:d4:23:f8:e0:9a:10:8e:71:09:0f:91:53:a9:
         7f:61:fb:7f:0e:6c:50:7a:a0:39:22:56:ef:6e:71:98:9f:70:
         04:06:b5:4b:22:18:65:15:18:d6:4d:68:a5:88:30:b4:13:97:
         6c:9e:0b:ab:38:00:52:c7:e5:02:2f:64:1c:75:68:62:bf:23:
         98:be:ee:50:1f:2a:8e:22:8e:4e:2e:fe:09:91:3e:32:61:bc:
         f8:f5:71:5b:e5:9f:d9:4e:36:d2:95:88:d4:59:bb:c0:39:46:
         f2:4d:d1:eb:f2:d8:21:5f:42:be:09:c7:8d:20:f0:ec:2a:5e:
         94:dd:79:a0:d9:cc:1d:02:03:e0:10:d0:ad:01:fe:c0:03:e7:
         0f:ce:d3:7f:c6:4f:ae:f9:e5:f6:e3:29:61:af:0a:d7:3d:dd:
         b9:5e:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:43:12 2026 by rpki-client