Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File:                     HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier:          Lim4jHhUreW5ETtY+JflNTyMofG3gNB3ZocWCy9T+W4=
Subject key identifier:   F1:3F:C0:66:9D:03:A5:69:C7:84:A7:11:03:5D:91:1A:A1:D8:0B:88
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer:       /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial:       01A0CCA3285A7FADDB55F19D76F2BBB2D670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number:          1666
Signing time:             Wed 23 Sep 2026 05:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:39 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:39 +0000
Files and hashes:         1: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: w9E/LjfNjo4l5tMGZGnMd6dY8+6ebXW7GJJxRBtF5P8=)
                          2: Pa-REvh5sObWkBoz7bJgJfUNNtY.roa (hash: VTVwzFjol2i2vqCqnvi41UK4vnNgLEigWpUo/HfYOUM=)
                          3: TJCGzUQHxg4bwyTZRd9MjPgDFco.roa (hash: mDKYo4+PY4/xDJecNKQRG7i12NJwnq+4UMvwsAIjYeA=)
                          4: etcUvrpfPKP_RFS8q4I2oRGtIpU.roa (hash: QazyHRaqwRmfbynAWmgSgFTPgoxpLo3PBLZtnvBUmtQ=)
                          5: olVKrDWOXV-cZqa6YCvyS1EAmtw.roa (hash: DtRokaXbwlYUqcYONE6Ad45+vRoun3fYTMXSmpbmsOQ=)
                          6: pYGVbv4voC-r48uG-RyVLygkJXo.roa (hash: Xfgs3GY90UOV9OHOemeveUcmPpqz9KE7PoOqb01izow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:28:5a:7f:ad:db:55:f1:9d:76:f2:bb:b2:d6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
        Validity
            Not Before: Sep 23 05:00:39 2026 GMT
            Not After : Sep 24 05:00:39 2026 GMT
        Subject: CN=f13fc0669d03a569c784a711035d911aa1d80b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:55:06:1a:aa:9e:af:e5:8e:b4:d1:d7:63:
                    ed:fd:dc:49:86:1d:38:a4:71:66:e7:a8:2b:62:11:
                    11:df:e2:8f:3b:3b:6b:ae:97:cb:ef:13:24:66:a9:
                    76:6b:1a:50:07:59:01:5f:ce:f7:1e:18:ec:68:de:
                    da:22:42:b3:18:8c:00:96:3f:e4:64:96:9f:36:82:
                    1f:0f:1a:2f:7d:29:43:95:9c:97:40:67:24:13:f4:
                    f6:6b:ae:69:2e:64:a9:f4:cb:aa:51:d1:e7:d7:c3:
                    03:c5:a9:26:fc:c4:09:af:87:82:43:0d:21:5d:ee:
                    87:b9:21:b6:fc:6c:28:50:fc:b0:f5:c0:f0:83:bd:
                    41:9f:25:e6:27:69:6c:dc:0b:d5:1c:71:76:ce:d4:
                    2a:74:fd:48:55:42:6f:5f:1c:a2:8d:58:49:8d:92:
                    5f:70:e6:68:92:ee:07:42:88:86:ab:87:b5:c5:8c:
                    b7:7a:7a:43:bb:bf:d5:37:a0:88:90:7d:a3:bb:27:
                    25:c1:bf:e4:73:33:67:c0:8d:44:f7:f8:5d:d1:64:
                    19:98:5a:9e:08:60:9c:25:41:7a:03:5f:2c:eb:01:
                    a9:dd:c3:45:8d:b9:f2:06:8d:25:63:aa:1b:e4:61:
                    b3:50:cf:c0:10:b6:47:bb:c1:29:d2:ff:53:c8:66:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3F:C0:66:9D:03:A5:69:C7:84:A7:11:03:5D:91:1A:A1:D8:0B:88
            X509v3 Authority Key Identifier:
                keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d6:4c:68:e6:80:bf:6d:58:8d:56:c3:10:e0:a3:ab:ee:0d:
         cd:c8:55:94:ad:ca:52:9f:e3:c4:43:f8:86:dc:fd:f4:2f:ae:
         bd:3f:fb:5d:84:8b:0d:85:88:79:8e:c3:7d:80:65:76:06:dc:
         03:18:6a:0e:2c:c4:02:37:0f:b2:cb:12:a4:ce:93:0a:12:4e:
         19:e5:3a:18:e8:80:71:90:8b:2e:8a:4f:07:01:e3:be:17:19:
         59:b1:b5:8c:e1:cc:44:03:af:c4:1d:61:db:a5:6c:26:d3:c4:
         91:e4:15:c5:f3:d7:c3:3d:4d:e6:32:ab:21:3f:f4:34:58:8b:
         fb:a9:17:b2:c2:53:80:23:eb:6a:1e:ea:0f:df:fa:1c:a7:fd:
         8c:ad:26:f3:57:83:03:bf:2c:cb:15:9a:28:be:f6:c5:41:73:
         26:dc:cd:4f:46:b3:ba:cf:e0:a7:5e:f4:33:71:65:5c:61:0f:
         6c:5f:c1:06:7d:87:26:56:6f:db:c4:1b:74:59:f2:37:15:d5:
         d1:6f:50:43:d8:d2:ad:02:4f:87:71:0e:2b:54:35:e1:de:17:
         56:e8:c1:6c:33:a5:89:df:5c:d7:29:8b:c7:a8:8b:c7:52:48:
         cb:c4:07:c1:02:ad:d7:4a:2a:fb:d3:73:ad:2e:21:62:aa:a5:
         01:ce:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:47:01 2026 by rpki-client