Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File:                     HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier:          Iu1rQ9rC5G9+3LlbOnQnQaNgbHdtKvXdaw/oKXQ1Fzo=
Subject key identifier:   98:13:23:C2:51:0B:14:F4:7E:F2:E7:8C:91:41:4B:93:B2:CA:D7:8F
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer:       /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial:       01A1450490D39F0F776100BCDE8F585F6D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number:          1AA9
Signing time:             Fri 16 Oct 2026 14:01:29 +0000
Manifest this update:     Fri 16 Oct 2026 14:01:29 +0000
Manifest next update:     Sat 17 Oct 2026 14:01:29 +0000
Files and hashes:         1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: VyH0JE6dtiOK5apsGiBPM87Xzuk/Xr+PhvLB+Gn5Mjo=)
                          2: I_M6lO4tAmUm__5FNzdwyt93cqM.roa (hash: TcMDFeSDJGS7lT8MTqvKQN5ev54Bp4w8WBiO0GeJaRM=)
                          3: gLamFtzqpv647HRUXI1QWabftKs.roa (hash: /zeXctBQIp1apK4wN1ODuwk5OQESo9xnte8BB1+6+9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:45:04:90:d3:9f:0f:77:61:00:bc:de:8f:58:5f:6d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
        Validity
            Not Before: Oct 16 14:01:29 2026 GMT
            Not After : Oct 17 14:01:29 2026 GMT
        Subject: CN=981323c2510b14f47ef2e78c91414b93b2cad78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:fb:88:f7:5c:95:82:19:de:96:ab:f7:a3:
                    e8:fa:92:c5:f0:5f:b9:74:7a:41:ba:6c:be:63:43:
                    1f:ec:f0:87:f3:eb:f3:8d:e3:de:51:dd:c2:bf:fe:
                    4e:91:53:76:63:07:c4:d7:20:21:a0:12:23:98:ff:
                    fa:e5:41:31:58:9b:2c:25:26:8e:37:ff:05:b0:e5:
                    cf:b8:e2:c1:eb:64:9d:a2:09:f7:d4:8d:3a:d3:e6:
                    97:b0:16:cb:a8:3b:4e:c2:bc:79:3b:89:fe:25:14:
                    1b:31:ae:37:e1:5b:1e:c9:8a:cd:0c:08:d3:f5:12:
                    74:40:e3:6e:8c:8c:d5:4b:43:99:8a:6a:83:4d:0d:
                    9b:42:78:a8:20:6b:a3:ff:ff:3c:94:f2:bd:af:c0:
                    bf:8e:72:05:1c:38:3a:43:db:53:6e:90:f8:77:80:
                    95:fa:74:d3:10:52:49:1c:63:ad:9b:fe:de:d5:1e:
                    2d:e6:90:2a:e2:33:08:fd:07:7c:2f:41:28:1f:88:
                    bb:e9:2e:43:80:e7:8f:d5:30:7a:d3:6c:b4:1a:ed:
                    1c:58:c7:4b:c2:9a:39:0c:fe:41:f3:ed:d4:a5:8a:
                    a2:6a:e5:53:2e:d2:4d:2c:e6:41:a3:41:42:09:6d:
                    58:c7:7a:43:3d:e0:c2:fa:70:73:a8:63:44:26:28:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:13:23:C2:51:0B:14:F4:7E:F2:E7:8C:91:41:4B:93:B2:CA:D7:8F
            X509v3 Authority Key Identifier:
                keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a9:f6:9e:d8:61:dd:27:b4:94:cc:67:55:dc:0e:47:7e:94:
         5d:23:17:f8:44:47:6c:e4:ae:7c:ba:2c:25:12:c6:fb:e5:85:
         82:cf:8b:e7:bc:07:12:bc:06:40:a2:4b:6e:65:fa:a5:94:bc:
         21:9e:0c:e3:1b:59:ed:91:c3:2a:4a:f2:91:78:11:2a:2d:4c:
         7d:b8:ae:18:e6:91:2d:34:29:cc:bc:22:01:ee:c6:27:42:d4:
         24:84:34:a8:ad:da:12:5f:5c:8b:43:f7:c7:1f:7f:1f:87:40:
         98:d2:46:c6:33:6f:3f:a3:be:10:5b:75:0a:dd:26:c1:91:4b:
         cd:04:99:32:59:88:28:0f:d2:98:98:7e:77:45:19:58:f2:d5:
         6c:76:ce:65:8c:84:72:ba:9a:5a:61:32:02:a5:38:b8:0c:40:
         6c:02:f1:70:13:8f:cc:6a:56:9d:77:46:a5:41:62:11:fe:f8:
         c9:a6:41:31:30:33:27:9c:87:0a:6b:01:33:18:84:f7:00:57:
         51:b3:16:a4:97:d4:d0:2e:3b:ef:f3:62:6b:9a:d4:f6:f5:21:
         f8:a4:35:23:24:31:85:e9:24:e1:bb:1b:ef:e1:a7:b6:4b:f4:
         b4:ac:7b:ad:cc:ae:f2:3b:67:2d:8b:f4:9c:f6:fb:04:b5:ca:
         e8:75:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 00:04:43 2026 by rpki-client