Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File:                     hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier:          +y13Q6Chc1PtLQgMDh+wTzQR+UH4n7mI/74i7D5iSNc=
Subject key identifier:   A5:79:39:0B:1B:B2:3C:DA:71:96:31:D9:AB:A4:96:5F:5E:32:D3:98
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer:       /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial:       01A0E85368E19F0187E9EC7A4DCF33CC15A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number:          13C3
Signing time:             Mon 28 Sep 2026 14:02:55 +0000
Manifest this update:     Mon 28 Sep 2026 14:02:55 +0000
Manifest next update:     Tue 29 Sep 2026 14:02:55 +0000
Files and hashes:         1: 4IwzD6JWssSfDrS7OsowJYf8F3g.roa (hash: 3STzPQwFjgmuSyiPKC+VcXtn9kHY3QHNznY54Mamy30=)
                          2: Oq4z14N71pgiI9-KE_h-CCRcT20.roa (hash: hy7yGUYkeyO3aDyOj5aTJ3uxwm3TBHALM9Mgfy3Wu3M=)
                          3: SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa (hash: zgTRF9Sx7egnoTtrUbB6SPfcPU50038KU3DAntDwjks=)
                          4: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: yMkjhrWXBbx64f53I0eCIlUD5VbNQwImyOtl2hMMlDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:53:68:e1:9f:01:87:e9:ec:7a:4d:cf:33:cc:15:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
        Validity
            Not Before: Sep 28 14:02:55 2026 GMT
            Not After : Sep 29 14:02:55 2026 GMT
        Subject: CN=a579390b1bb23cda719631d9aba4965f5e32d398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:7f:0b:9f:38:db:31:89:21:d1:02:2a:69:
                    8b:49:5e:98:99:a3:65:bb:cd:f4:b0:db:54:1c:27:
                    5a:64:04:91:fe:b3:81:ea:39:cc:18:95:6b:b2:14:
                    5a:c4:2f:ea:63:4e:fc:a3:c0:41:a7:18:ed:c4:9f:
                    da:6f:e8:e4:fc:76:1a:90:69:f0:df:ac:79:cf:4f:
                    86:e7:6b:d7:3f:ad:00:c7:ed:50:56:5f:16:c6:69:
                    26:4d:ae:00:73:08:7e:ba:0b:25:df:f3:48:31:46:
                    09:57:2b:83:00:12:a4:0a:30:82:33:59:5f:b5:d3:
                    b4:b5:03:21:d1:6c:a7:d8:c8:04:a3:63:5e:f3:aa:
                    2e:96:e3:79:c7:e9:16:7a:75:e2:4f:d2:50:23:9f:
                    8e:5e:50:79:cc:d0:a3:82:63:e7:ef:76:b2:c2:4d:
                    ac:11:d4:1e:1d:bd:e1:9f:20:7c:79:6f:24:48:9e:
                    5d:04:7a:c4:01:94:ad:bf:7c:4e:24:e6:33:e7:a5:
                    40:19:e7:15:37:90:69:2c:40:60:d8:1f:d0:ed:b0:
                    ae:e1:65:2a:47:73:94:cc:04:65:da:2c:db:37:c7:
                    d5:cc:70:65:66:fa:6b:ab:2b:97:26:87:65:18:8c:
                    90:d8:e4:42:82:4c:52:29:2e:c9:db:65:7d:6f:2e:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:79:39:0B:1B:B2:3C:DA:71:96:31:D9:AB:A4:96:5F:5E:32:D3:98
            X509v3 Authority Key Identifier:
                keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:cf:88:1e:6e:1c:8a:36:1c:51:fb:70:46:c7:41:65:6e:
         99:33:a4:75:c6:a0:06:6b:75:3e:0a:eb:20:7d:69:cf:7f:fd:
         7c:7c:1c:3d:47:d9:2f:f6:77:81:4d:46:ea:56:80:1f:4a:30:
         61:b7:a9:6a:af:a9:21:af:86:c1:1a:f0:e0:56:d1:57:7f:8d:
         97:ca:d8:ca:20:a0:04:69:6b:5f:b3:cc:a2:81:86:09:18:88:
         c9:db:f7:7b:bb:1f:dd:7d:c7:d3:0b:9b:4f:43:21:e9:09:c6:
         40:b0:7a:71:d0:68:5d:bd:35:cb:df:5d:e0:15:44:1f:ad:6d:
         42:52:e1:09:ca:e2:ea:72:43:33:b3:a0:8e:22:07:72:81:19:
         8a:c4:39:7e:93:90:6d:68:da:f7:ce:4a:af:71:fe:b6:5a:e8:
         f6:82:d6:f7:d1:6d:bf:be:b4:60:0e:f7:74:55:75:81:b0:d1:
         72:b0:4e:10:73:17:7d:11:17:0a:a9:cf:56:40:c6:f0:ca:a5:
         e6:02:92:79:d7:02:18:10:ac:99:8d:c5:0c:a8:d0:14:0b:10:
         7f:ba:2b:83:c4:4a:e1:61:45:f8:61:47:51:ae:36:fd:1a:62:
         98:52:bb:38:d7:5b:94:53:e4:d6:cd:02:b0:93:cb:03:95:50:
         ed:30:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:42:17 2026 by rpki-client