Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File:                     HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier:          jYrK7UFVNme0QenVTQLXQ/ssW1X+GVymqtAW5kCTJL4=
Subject key identifier:   87:F9:74:69:78:8C:2D:8C:17:32:80:95:B1:B6:2A:AE:7F:62:66:C9
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       01A0DFBC7882CBB3A4432979822E78B22CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number:          178B
Signing time:             Sat 26 Sep 2026 22:01:05 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:05 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:05 +0000
Files and hashes:         1: 6pBv9rKYxwjjKOpT9lg6FT4kUQA.roa (hash: IB3HEiPAgwZs0ZTzyeRwb6dl6LY+fOatj7OxrAXQUsE=)
                          2: Cw5n-PWT2I1DxgK5DhwcrBsPkdE.roa (hash: mUvGxOekgoK3xHrsniH+HyllAGZivMOYDnmq6KeKBXw=)
                          3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: lc0rkG5vv8xslxabjqi2+t/Mh9coOyu+w9wAKdvKJ+c=)
                          4: jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa (hash: qxuliQjoknAXmEjclXw7gD+kEmDxgV1U5FrECOviQhg=)
                          5: xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa (hash: EELHcZVf2cz0S4yWN9gbTUNVwaT1jOiA4YdDZsp4DqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:78:82:cb:b3:a4:43:29:79:82:2e:78:b2:2c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Sep 26 22:01:05 2026 GMT
            Not After : Sep 27 22:01:05 2026 GMT
        Subject: CN=87f97469788c2d8c17328095b1b62aae7f6266c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:ff:0f:11:5e:e9:8f:08:43:8f:fa:c9:19:
                    a5:78:f0:d1:8b:b6:63:37:55:1d:7c:63:bd:b9:a6:
                    3a:20:3c:d2:7e:22:16:2d:f9:32:c7:0f:5a:87:46:
                    d7:7c:56:fd:90:0f:fc:26:4c:a1:61:bb:85:4a:1e:
                    e9:61:d8:89:39:38:e5:24:ea:28:87:26:15:33:95:
                    d7:71:13:08:73:0e:cc:c7:eb:43:ac:d0:53:96:65:
                    98:16:c7:8d:ff:cd:7b:9d:9d:3c:a4:b1:98:4a:86:
                    8c:fd:2d:30:47:5c:6e:94:43:9b:95:a4:6d:3c:08:
                    83:9f:e8:62:65:e9:ec:6d:82:05:25:72:32:f6:90:
                    da:37:fb:65:d7:4d:59:86:59:89:5d:28:a8:83:e8:
                    de:35:e7:27:37:c1:4b:dd:25:a7:b7:ec:61:ee:dc:
                    85:1e:6c:3c:41:01:09:65:2d:ac:39:00:aa:b0:00:
                    51:88:ff:f0:8c:cc:96:ae:a5:b5:57:37:52:05:1b:
                    47:eb:e7:f8:11:ab:27:b0:de:4b:20:b1:e2:0d:73:
                    c4:b2:18:e7:fa:f5:37:37:d6:b2:d7:f2:b0:f0:bc:
                    0b:81:a7:ba:05:e2:8f:aa:d0:af:c7:94:b0:b6:3b:
                    a5:06:2c:30:68:b4:22:19:1a:80:50:61:6c:9a:d8:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:74:69:78:8C:2D:8C:17:32:80:95:B1:B6:2A:AE:7F:62:66:C9
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b2:40:81:91:9d:8a:2b:13:16:4b:41:20:dc:cc:7e:cd:ef:
         d7:f6:7f:cf:59:45:22:68:54:e7:15:bc:60:44:b5:f1:5d:d3:
         6f:17:83:cd:b3:99:05:67:c3:a4:19:89:b5:1d:9b:d7:8c:d0:
         7f:89:70:26:46:d7:66:56:b7:fc:78:4c:d4:36:96:6d:ff:45:
         19:bd:5f:4d:7b:8a:41:0a:af:5d:32:d1:64:fd:78:dc:e5:db:
         f1:37:c5:bb:dd:5c:aa:b8:16:16:65:33:c6:0b:66:b0:81:e5:
         32:5d:9b:0c:79:44:cf:b3:6b:d8:09:0d:6e:e2:9e:dc:f9:11:
         cd:b8:3f:c1:dc:ea:0b:ed:e5:3c:7b:0c:fd:6d:df:55:be:b8:
         be:d2:d8:c4:3b:9f:9e:ef:79:7b:34:3e:64:7e:d6:16:ad:3a:
         f2:88:c7:d4:36:b4:f0:f1:19:d6:32:8e:37:42:ef:69:7e:62:
         fc:c4:0f:13:27:b6:71:a9:9e:7e:04:40:ff:a2:8d:0a:13:f9:
         b0:b0:e7:0c:bf:c1:0c:d2:13:50:ce:3b:c3:91:2f:6e:03:08:
         56:68:b4:8f:0b:e7:9e:b7:8e:fb:50:81:12:be:a4:4b:15:18:
         52:a4:fb:0a:0f:2c:a4:eb:d4:fc:4d:bb:8c:93:f7:6e:c9:9f:
         c7:eb:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:41:45 2026 by rpki-client