Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
File:                     ht-eAQiRCzo5rZOEqEbjGatSMKs.mft (raw, json)
Hash identifier:          GanT+5K5owUCdlbafn5iKL2gw/SB6mQALsi9d5I93JE=
Subject key identifier:   FD:05:6A:D9:A1:E5:1E:5E:5B:A8:E7:C6:B9:55:0F:2E:69:EE:ED:34
Authority key identifier: 86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB
Certificate issuer:       /CN=86df9e0108910b3a39ad9384a846e319ab5230ab
Certificate serial:       01A1396DD8EB28E1C3D5B1C003A986170409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
Manifest number:          0170
Signing time:             Wed 14 Oct 2026 08:01:02 +0000
Manifest this update:     Wed 14 Oct 2026 08:01:02 +0000
Manifest next update:     Thu 15 Oct 2026 08:01:02 +0000
Files and hashes:         1: ht-eAQiRCzo5rZOEqEbjGatSMKs.crl (hash: nBFDRMQIrpbwqinUrFWZveb0XgJ01FHG9njQGTq2+Pw=)
                          2: xR7lHLxk8Lwsa1PxkTtlSkA2y9o.asa (hash: l6T14CjpEOwE6Md2ZhabwS3SrWDRTzGa9GM3xWAEiBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 07:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:6d:d8:eb:28:e1:c3:d5:b1:c0:03:a9:86:17:04:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86df9e0108910b3a39ad9384a846e319ab5230ab
        Validity
            Not Before: Oct 14 08:01:02 2026 GMT
            Not After : Oct 15 08:01:02 2026 GMT
        Subject: CN=fd056ad9a1e51e5e5ba8e7c6b9550f2e69eeed34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:0f:c3:a7:88:02:44:b4:85:9d:a3:be:ad:
                    d4:e1:87:97:8e:7c:36:3e:3c:e7:8d:60:a9:22:78:
                    a8:8b:d6:e1:f0:aa:8a:10:75:f5:00:c3:6f:9b:69:
                    6a:12:3e:e4:a8:d9:68:bc:52:e0:df:50:7f:26:86:
                    d3:f1:e7:16:26:77:de:73:b7:81:ab:ec:b2:e9:d5:
                    46:dc:c5:04:d5:8e:67:15:17:f1:eb:25:50:98:23:
                    87:6e:f6:f7:11:26:9d:62:0b:7f:bc:e3:12:27:58:
                    55:76:3c:27:39:79:74:db:2f:67:d7:a1:83:ad:42:
                    2d:59:0f:e8:33:c7:f9:51:bd:f2:f7:c7:97:d2:f4:
                    b1:54:2f:aa:d4:61:9f:73:d9:b8:c1:2e:24:6d:1d:
                    45:2b:46:8f:49:f9:80:6d:01:52:1c:79:6b:c5:a3:
                    c5:18:e4:f7:f2:08:23:b7:0e:55:82:92:e0:59:1d:
                    5e:12:54:6c:61:3f:09:00:5c:8b:a7:e4:ab:a3:99:
                    70:d6:cf:37:cf:d0:f7:9a:2f:07:4e:52:89:38:3c:
                    cd:ca:f7:ff:d7:9d:43:5f:b6:ed:17:46:93:08:ba:
                    af:14:c8:f1:62:20:57:f8:b5:93:6e:27:2e:7a:10:
                    d8:8d:2d:2d:83:6d:ff:6f:2f:6d:24:04:ec:1b:3e:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:05:6A:D9:A1:E5:1E:5E:5B:A8:E7:C6:B9:55:0F:2E:69:EE:ED:34
            X509v3 Authority Key Identifier:
                keyid:86:DF:9E:01:08:91:0B:3A:39:AD:93:84:A8:46:E3:19:AB:52:30:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht-eAQiRCzo5rZOEqEbjGatSMKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3b6788-39c7-47e7-9789-cd114fc95ee3/1/ht-eAQiRCzo5rZOEqEbjGatSMKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:93:55:c6:be:fe:ca:fd:f1:1c:2f:0d:21:0c:43:3b:e3:2e:
         e0:6f:9b:b3:63:be:41:31:ae:94:5c:2f:9f:80:78:28:85:ff:
         72:a8:04:bf:a0:fe:9c:8a:35:35:26:bf:b5:f8:cc:25:43:0b:
         1b:08:8f:ac:c5:3f:a2:10:ab:d4:71:8f:a7:11:82:e9:80:d6:
         17:3c:e5:8c:de:be:c7:cc:52:41:22:59:35:f7:72:58:66:6a:
         86:82:8d:96:cb:02:25:b7:2a:80:83:f5:12:66:79:85:43:2c:
         68:ee:69:76:39:9f:8c:26:38:83:a4:7a:87:e9:9c:cc:d8:6c:
         d6:f2:3f:61:f5:64:9b:a5:5e:b3:48:ae:6e:9f:0f:c3:e8:ff:
         0b:b1:e3:69:ae:42:ba:a0:fb:1e:68:96:36:4f:49:1c:9a:06:
         9e:6f:12:91:18:e4:7e:5d:44:80:5d:cd:29:4a:5e:cb:59:d4:
         50:12:37:68:5f:47:bc:26:43:95:14:a7:2a:7c:e2:3c:6b:5b:
         69:35:3b:51:75:1d:63:17:29:ce:80:12:97:24:d4:15:f0:db:
         25:42:8a:54:85:94:5f:88:36:0b:b9:dd:ae:2f:a2:b7:8b:74:
         61:d6:93:d2:07:76:d9:76:e2:f7:7a:bf:23:3d:b7:d3:79:93:
         ac:12:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:19:43 2026 by rpki-client