Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File:                     Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier:          ndsu8omzfdwCsE+HE1Tz/ASFSgOfiMOS5plsZt+c10s=
Subject key identifier:   8C:BA:E2:F1:B8:3C:07:8A:9F:15:D8:B9:E0:AC:30:09:60:67:47:70
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer:       /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial:       01A101A39109AD63B34D4AD13D80C9E7956F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number:          0E1D
Signing time:             Sat 03 Oct 2026 12:00:58 +0000
Manifest this update:     Sat 03 Oct 2026 12:00:58 +0000
Manifest next update:     Sun 04 Oct 2026 12:00:58 +0000
Files and hashes:         1: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: O8sYgKIoXGM4KnW7kiZqW442M6CqvdKtCiUAl5aVMjk=)
                          2: S3ZN1Eo4WmIttcCuXgmyXCV1mQA.roa (hash: HALtWZ0hiQzMkL2eGHauQhHqRPrLY/Kagy5eLk2wo9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:a3:91:09:ad:63:b3:4d:4a:d1:3d:80:c9:e7:95:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
        Validity
            Not Before: Oct  3 12:00:58 2026 GMT
            Not After : Oct  4 12:00:58 2026 GMT
        Subject: CN=8cbae2f1b83c078a9f15d8b9e0ac300960674770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:8e:b5:31:48:6c:35:f0:9e:70:21:0b:75:
                    ab:b4:68:33:02:28:2a:4b:a9:1c:1f:fb:df:d2:6d:
                    9a:c8:9d:8b:46:9b:cc:6a:5f:c0:b6:9d:ab:06:36:
                    38:8c:7c:4e:af:ff:87:7f:b3:0b:5b:1e:42:ff:97:
                    4e:fc:b5:9c:b1:18:57:1e:da:55:e6:94:f1:c2:1c:
                    b7:82:48:81:0d:9f:b9:20:9d:e6:52:45:fc:3b:ae:
                    03:6e:68:10:7d:18:02:5b:b6:4d:70:3a:85:38:f7:
                    f3:cf:a6:93:80:07:e6:ab:79:e6:80:ff:64:2f:fc:
                    c5:3a:b1:76:8c:5a:fe:ef:52:85:07:16:20:77:55:
                    ac:27:dd:8d:a3:0e:03:b5:0d:ba:5b:c6:4a:1a:f5:
                    32:6d:79:0d:b8:a4:2d:71:51:42:47:84:3c:a9:31:
                    60:0e:b3:d9:a5:b5:08:a5:4e:d8:fd:7f:c1:8c:ec:
                    6f:1c:18:5d:c3:48:81:e3:3b:97:cf:69:98:a5:c0:
                    80:eb:45:4b:9e:36:55:e3:00:9d:ce:f1:05:f4:80:
                    7f:8f:ff:d6:ca:a5:c7:0f:f1:3f:9c:d7:05:d1:b6:
                    52:99:6f:d2:fe:ae:d5:62:8c:66:ed:dd:d8:83:72:
                    4b:f1:7d:c1:bc:c3:54:0a:df:76:1e:20:1c:e5:c2:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BA:E2:F1:B8:3C:07:8A:9F:15:D8:B9:E0:AC:30:09:60:67:47:70
            X509v3 Authority Key Identifier:
                keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:02:87:ad:24:23:14:0f:70:91:35:73:70:54:7b:fc:eb:3e:
         d9:e9:5f:35:0b:0c:9d:9d:c3:5a:b8:33:ca:95:23:50:2e:b9:
         94:e8:98:ac:09:23:00:c8:21:d1:1e:16:04:fb:f0:37:3b:77:
         09:89:75:0c:7c:81:b1:c9:e6:7c:e4:cb:2d:96:ed:6e:e7:70:
         4a:cb:01:d0:cc:d7:8e:ed:94:6e:c4:af:ad:f2:bd:93:e5:85:
         29:1d:38:4f:4f:ea:f1:63:9a:03:34:39:3f:66:0f:8a:42:e2:
         6e:71:c4:2b:9b:26:4a:fb:91:8a:5a:29:65:90:56:62:e6:26:
         3a:a4:d0:d3:81:b7:b9:9d:3f:5d:0c:9f:ae:24:0c:d1:61:62:
         bb:d2:89:31:b9:03:c3:8b:3b:1a:d9:1b:2b:2e:c2:d5:63:77:
         f1:0a:19:a4:91:4e:48:55:c1:9c:d7:9f:b0:53:ab:8a:79:fa:
         d2:ed:ca:03:88:e5:89:71:a9:f3:11:94:56:b6:08:14:50:05:
         1e:5f:ef:61:c1:d0:e9:7f:1f:65:05:ea:29:c5:8d:d6:d4:e7:
         ae:84:a2:46:e3:9c:83:a8:fb:a8:f4:91:e3:9b:01:d9:66:5d:
         54:b8:c4:ea:31:44:eb:0d:1e:54:cd:b5:91:ae:67:58:e2:59:
         79:9d:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:47:28 2026 by rpki-client