Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File:                     1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier:          sfNDgaxwXAsAVp3n4dG21ZHxmXAzax1E7u07ssEysUc=
Subject key identifier:   A9:3B:2D:6C:8D:98:5D:DD:B9:97:D3:B5:87:C4:3F:61:14:69:38:BB
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer:       /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial:       01A0CB233C4C0626E9B65479F2F036E6C270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number:          0BA5
Signing time:             Tue 22 Sep 2026 22:01:19 +0000
Manifest this update:     Tue 22 Sep 2026 22:01:19 +0000
Manifest next update:     Wed 23 Sep 2026 22:01:19 +0000
Files and hashes:         1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: UBLjDS2qdJbaLvOxEDudmBNFRURNJzfr3ao2Jfe7Mrw=)
                          2: 93kiNNYoQc853Cz6ue8qioc2i3U.asa (hash: WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:23:3c:4c:06:26:e9:b6:54:79:f2:f0:36:e6:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
        Validity
            Not Before: Sep 22 22:01:19 2026 GMT
            Not After : Sep 23 22:01:19 2026 GMT
        Subject: CN=a93b2d6c8d985dddb997d3b587c43f61146938bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:73:6d:66:50:fe:e6:24:f1:8a:35:75:82:
                    09:e1:d0:f1:b1:b0:55:6a:ca:03:ed:69:b6:15:76:
                    d1:da:b9:74:1b:51:95:b0:fd:f2:68:bb:a8:4c:fd:
                    a6:8c:db:ee:e7:65:81:84:34:e7:20:be:09:64:ec:
                    07:b2:49:ca:96:b2:b5:9c:22:62:18:e6:e7:02:53:
                    fd:70:32:50:c1:38:68:56:12:df:ae:7d:61:8b:bc:
                    d1:f6:f0:ff:25:9b:84:12:89:d5:74:fb:c7:1d:8c:
                    17:83:7f:65:91:59:a6:27:cf:5e:83:a4:e0:c6:08:
                    76:fb:04:50:c5:72:c2:14:bd:e0:42:dc:95:60:0d:
                    bb:ed:db:a8:b5:bf:0c:a4:fb:ab:39:63:56:f7:ed:
                    d9:f8:b0:d0:f0:d3:cb:05:ef:75:80:88:d7:c6:29:
                    2a:88:9b:6d:02:a2:f8:54:03:0c:0e:70:c8:4d:4b:
                    06:35:e1:4c:24:9b:8d:1d:1d:1d:47:a3:d6:95:f0:
                    c6:95:ed:f2:f3:58:29:70:f2:f4:08:fe:db:43:ba:
                    d7:c5:cf:53:9e:dc:0f:07:e7:85:1e:71:7e:7a:ca:
                    7d:ce:12:8a:97:aa:64:e3:56:c4:0d:2a:ef:a3:44:
                    7b:08:7e:6d:8b:94:30:5d:14:b6:d0:e7:97:8f:57:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3B:2D:6C:8D:98:5D:DD:B9:97:D3:B5:87:C4:3F:61:14:69:38:BB
            X509v3 Authority Key Identifier:
                keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7b:24:f8:92:21:32:aa:6f:3d:bb:59:81:f9:bf:84:28:d5:
         a8:ec:df:8b:f1:82:23:86:b5:5c:14:63:61:5c:18:5e:1e:99:
         54:50:b4:09:44:47:ef:de:83:96:25:4b:4f:3a:c8:c0:b1:4a:
         a2:4a:fc:67:9f:32:20:36:b3:1d:b2:5d:d0:59:68:bf:75:06:
         be:2c:f4:5a:76:5e:91:6c:d4:f4:f0:d9:46:d5:dc:a9:97:22:
         4d:b4:53:3c:9e:2d:63:e2:94:b4:3d:b2:61:15:0c:f3:b9:a1:
         f7:af:49:e2:14:8d:5d:c9:9e:18:31:17:6b:24:e3:5f:d3:5f:
         97:4a:4b:83:87:5b:e3:8b:e7:24:06:67:69:6d:fb:22:f4:25:
         30:b8:88:c7:ca:76:5b:1c:5c:6e:21:f1:83:05:74:a6:2f:00:
         5d:2c:db:da:b9:40:b2:e8:8d:a7:9a:04:52:e3:95:4b:7f:72:
         e6:ed:29:6a:ed:45:30:2c:9b:3b:8b:9a:ad:9f:57:21:a1:36:
         43:0f:31:c6:dd:18:cc:c6:34:00:75:0f:58:4d:39:9b:a5:ed:
         2c:82:3b:a8:54:18:0c:5f:92:54:cc:de:78:44:e8:d8:58:7e:
         e4:92:fd:1c:34:b5:f2:bc:14:c8:8a:c3:df:62:8c:99:13:a9:
         c8:58:a3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:18:47 2026 by rpki-client