Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
File:                     Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft (raw, json)
Hash identifier:          4y9ukt8rxMqmwtJreF4ZTirRHa9K6VtjvoDn5TW19LY=
Subject key identifier:   5B:22:96:FF:84:B5:E6:90:E2:FE:7B:A3:28:F5:C6:21:29:59:CA:A6
Authority key identifier: 1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
Certificate issuer:       /CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Certificate serial:       01A0D5DE0827DE218CE3D03838C0C0FB6D2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
Manifest number:          E8
Signing time:             Fri 25 Sep 2026 00:01:33 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:33 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:33 +0000
Files and hashes:         1: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl (hash: H1RgmXKnMwSyGT25oR1wetoRXQ18jA0XH18gAK1XWE8=)
                          2: nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa (hash: 6zSk/eu9Fh0Y0k4njwXKHhSTfWBnk84TWmm0U218WXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:08:27:de:21:8c:e3:d0:38:38:c0:c0:fb:6d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ede33150c1d268dae3b04d2aa69e30430816f61
        Validity
            Not Before: Sep 25 00:01:33 2026 GMT
            Not After : Sep 26 00:01:33 2026 GMT
        Subject: CN=5b2296ff84b5e690e2fe7ba328f5c6212959caa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:3a:6f:0a:d4:a8:69:3c:ed:53:13:1a:c2:
                    c2:fd:81:1a:5e:f2:10:28:e7:f4:46:d9:99:8b:2d:
                    45:26:93:0d:17:5b:ce:fa:55:ec:53:c6:d6:88:9d:
                    81:e4:97:40:56:46:ba:b4:c1:03:60:6d:b6:ea:d0:
                    11:ca:c3:f9:eb:3f:9f:74:05:4b:ac:b1:0a:a4:a2:
                    04:18:c6:c9:ea:b1:8f:1f:ad:ff:f1:af:b6:a2:1e:
                    97:cc:4b:78:c0:54:b0:6a:e3:6e:e4:f5:3a:a8:8e:
                    41:b2:b6:39:cf:44:38:56:3d:87:99:7e:6b:8c:b7:
                    31:9a:fc:03:85:77:27:d3:57:18:f5:2b:cf:41:3f:
                    25:84:81:37:45:71:81:08:40:1f:83:79:e3:a2:4e:
                    36:bf:63:f1:eb:60:02:31:1e:4a:be:56:0f:9c:84:
                    d2:ee:c0:a5:34:c4:9c:62:f7:90:3d:48:4b:8c:d0:
                    26:de:e6:83:99:78:e4:10:85:42:29:e6:e9:fd:bc:
                    91:02:f4:da:50:e5:00:40:d6:cd:65:ce:54:45:2a:
                    fb:5e:b9:9d:4e:25:79:8e:a4:ed:f5:21:73:31:70:
                    e2:aa:cb:aa:68:ac:ea:ce:f4:82:7b:85:ef:fa:54:
                    16:2c:ce:1c:c4:2a:8c:cb:c7:42:2d:aa:3f:7f:d3:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:22:96:FF:84:B5:E6:90:E2:FE:7B:A3:28:F5:C6:21:29:59:CA:A6
            X509v3 Authority Key Identifier:
                keyid:1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9a:89:a0:47:11:08:6b:60:84:39:8f:4f:5b:57:fb:f5:b6:
         54:6b:65:20:18:d5:37:f8:56:1a:25:19:4a:81:9a:36:ef:8d:
         99:80:98:21:5d:bf:d2:b5:e8:6f:db:b8:ef:c2:44:81:15:dd:
         78:92:82:a8:3d:6e:4f:0d:23:08:ec:26:a0:50:b9:f5:fa:d4:
         d4:40:d3:89:8a:3e:76:1b:69:2b:10:32:64:6d:39:bc:0d:dd:
         05:80:08:82:63:60:bc:05:07:3b:16:fc:ab:25:56:95:19:51:
         c5:b0:e7:de:48:b3:f0:68:97:a0:84:da:a1:00:34:e0:4b:81:
         05:cf:c0:7e:ea:d9:83:24:eb:c8:fe:c1:1d:1d:ea:69:76:29:
         0e:5f:c9:13:69:7b:f2:d0:38:6e:f8:13:23:6e:50:05:d8:7f:
         2d:59:57:f4:f8:ba:a2:6b:67:f5:80:f1:d8:20:51:fd:91:93:
         70:0c:7a:ae:70:34:bf:13:5e:02:d8:94:5b:35:8c:81:76:32:
         29:f7:ff:1f:14:84:78:7f:68:4a:27:35:61:35:33:c4:88:86:
         a5:93:b6:72:b2:42:c3:25:31:02:78:40:21:c3:83:e5:10:8d:
         a4:f7:d9:1a:15:82:59:f1:9c:90:c6:08:93:04:0b:c7:ff:43:
         d3:d1:09:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3ggn3iGM49A4OMDA+20qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZGUzMzE1MGMxZDI2OGRhZTNiMDRkMmFhNjllMzA0MzA4
MTZmNjEwHhcNMjYwOTI1MDAwMTMzWhcNMjYwOTI2MDAwMTMzWjAzMTEwLwYDVQQD
Eyg1YjIyOTZmZjg0YjVlNjkwZTJmZTdiYTMyOGY1YzYyMTI5NTljYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDE6bwrUqGk87VMTGsLC/YEaXvIQ
KOf0RtmZiy1FJpMNF1vO+lXsU8bWiJ2B5JdAVka6tMEDYG226tARysP56z+fdAVL
rLEKpKIEGMbJ6rGPH63/8a+2oh6XzEt4wFSwauNu5PU6qI5BsrY5z0Q4Vj2HmX5r
jLcxmvwDhXcn01cY9SvPQT8lhIE3RXGBCEAfg3njok42v2Px62ACMR5KvlYPnITS
7sClNMScYveQPUhLjNAm3uaDmXjkEIVCKebp/byRAvTaUOUAQNbNZc5URSr7Xrmd
TiV5jqTt9SFzMXDiqsuqaKzqzvSCe4Xv+lQWLM4cxCqMy8dCLao/f9Ph1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsilv+EteaQ4v57oyj1xiEpWcqmMB8GA1UdIwQY
MBaAFB7eMxUMHSaNrjsE0qpp4wQwgW9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHQ0ekZRd2RKbzJ1T3dUU3FtbmpCRENCYjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hOWJkZGMtNDUwZC00ZThiLTg0M2Ut
MTU5YjUyMGY4ODRhLzEvSHQ0ekZRd2RKbzJ1T3dUU3FtbmpCRENCYjJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hOWJkZGMtNDUwZC00ZThiLTg0M2UtMTU5YjUyMGY4ODRh
LzEvSHQ0ekZRd2RKbzJ1T3dUU3FtbmpCRENCYjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpqJoEcR
CGtghDmPT1tX+/W2VGtlIBjVN/hWGiUZSoGaNu+NmYCYIV2/0rXob9u478JEgRXd
eJKCqD1uTw0jCOwmoFC59frU1EDTiYo+dhtpKxAyZG05vA3dBYAIgmNgvAUHOxb8
qyVWlRlRxbDn3kiz8GiXoITaoQA04EuBBc/AfurZgyTryP7BHR3qaXYpDl/JE2l7
8tA4bvgTI25QBdh/LVlX9Pi6omtn9YDx2CBR/ZGTcAx6rnA0vxNeAtiUWzWMgXYy
Kff/HxSEeH9oSic1YTUzxIiGpZO2crJCwyUxAnhAIcOD5RCNpPfZGhWCWfGckMYI
kwQLx/9D09EJng==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:58:40 2026 by rpki-client