Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File:                     HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier:          iLVmjcQeK0s2KltId6F0TSEpS8Fnne0IwvQjZQ0ZjEY=
Subject key identifier:   EE:90:F7:BB:C8:04:FE:D7:49:ED:85:04:74:C2:0A:5E:EA:F2:D0:F3
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer:       /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial:       01A0D9F175C8A17A2C6929D3A9F2F31F1151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number:          1111
Signing time:             Fri 25 Sep 2026 19:01:15 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:15 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:15 +0000
Files and hashes:         1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: 1xRbXtUu3LbtJJagANu0yCHMeqgrkOUgxrsTKJcp0LU=)
                          2: JtB-_mP0CPyoUgsFyVWDrEIlud8.roa (hash: egfxT7xeT/hTTg3h54ZByaWRlZbXWQEqw5+/1nELFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:75:c8:a1:7a:2c:69:29:d3:a9:f2:f3:1f:11:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
        Validity
            Not Before: Sep 25 19:01:15 2026 GMT
            Not After : Sep 26 19:01:15 2026 GMT
        Subject: CN=ee90f7bbc804fed749ed850474c20a5eeaf2d0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6f:c0:e5:ab:42:cc:63:d3:09:10:b0:90:ca:
                    a7:45:2d:9d:2b:ba:2f:27:d8:64:16:7c:9b:73:91:
                    c8:49:97:5a:6e:5e:97:0f:89:3c:83:57:a7:37:08:
                    3b:51:8a:5c:f2:50:e1:c3:f9:3c:cd:ae:3b:cf:42:
                    ab:44:b8:8b:60:e3:77:2f:64:80:97:29:2f:84:69:
                    59:23:98:cb:6e:64:66:f6:2c:0a:f0:58:34:d0:d6:
                    1e:fc:77:5d:f2:a9:65:bf:b6:e5:36:8c:fc:b2:7f:
                    b5:91:a9:a2:8c:7c:b2:7e:61:98:cd:0b:a7:4c:3d:
                    e6:22:1c:d6:c7:d3:73:91:c8:d1:37:71:b3:80:ec:
                    b8:28:17:8b:e7:e0:47:15:fe:d4:6f:1c:c0:f4:ca:
                    8b:a3:8a:b8:52:40:a9:3e:a3:8c:15:2e:ea:d6:12:
                    e0:fc:0f:fb:3e:fa:25:08:bc:fe:b8:c1:e9:ea:7a:
                    2f:6a:9e:43:7f:ef:9b:2e:c3:d8:2e:b0:59:98:5a:
                    98:f9:ae:7b:77:d6:31:4e:22:93:79:0a:c1:d3:d4:
                    32:3b:d8:59:74:4d:e8:e5:36:bd:b6:91:6e:a4:59:
                    0b:46:50:9b:fc:0b:ed:63:8e:ba:12:32:a7:cf:89:
                    94:2d:37:bd:0b:15:65:b8:26:fc:f1:df:14:b1:96:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:90:F7:BB:C8:04:FE:D7:49:ED:85:04:74:C2:0A:5E:EA:F2:D0:F3
            X509v3 Authority Key Identifier:
                keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:85:03:2f:23:7b:a5:ba:66:fc:59:46:36:40:8a:08:80:62:
         0a:d5:49:57:e1:1e:9a:da:a1:f7:48:23:32:80:2b:b4:af:ec:
         dd:e1:46:df:56:49:de:6a:26:9f:55:c5:85:3d:93:75:f2:14:
         dc:8e:97:2f:e8:16:e1:c1:da:83:10:2a:bf:07:18:29:56:d2:
         da:35:28:ac:80:56:53:f1:45:fa:35:ce:4a:a5:70:48:5a:10:
         25:00:20:1b:8f:7e:d2:68:fa:c8:7b:9b:bd:29:43:05:04:8b:
         56:9b:5b:ae:12:79:f8:c5:fa:4b:bd:c2:d9:7e:87:b6:1e:bd:
         34:b8:1a:c5:1f:6e:f0:f0:64:8b:f6:21:0a:4b:bd:70:d8:ef:
         55:8d:f5:96:cd:1b:d5:2d:d9:39:56:bc:77:80:e5:b9:55:60:
         88:e0:a9:ad:4c:75:81:3e:6d:79:7b:ca:19:f3:19:8c:e7:93:
         39:eb:a9:7e:70:b7:86:5a:66:03:c9:eb:b8:1b:3a:88:f0:b7:
         00:4b:db:08:30:9f:27:38:e8:b5:69:4c:a7:85:2f:7d:34:2e:
         cb:5e:37:35:44:ee:8a:07:18:06:dd:11:32:bb:d3:38:96:09:
         76:d6:ef:11:48:47:c8:ae:30:4a:21:93:97:d6:ae:a9:b2:00:
         b5:76:ac:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:43:36 2026 by rpki-client