Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File:                     HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier:          W4j37WnyQxtsAGG7zD4G3Zkilb4aWUDnMhsJhKKPa9g=
Subject key identifier:   9F:18:04:09:8E:FD:FF:1D:57:06:2F:0F:89:40:09:17:DA:48:41:7C
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer:       /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial:       01A0D538A877F3ABA969F213C789A21D7BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number:          15C9
Signing time:             Thu 24 Sep 2026 21:00:55 +0000
Manifest this update:     Thu 24 Sep 2026 21:00:55 +0000
Manifest next update:     Fri 25 Sep 2026 21:00:55 +0000
Files and hashes:         1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
                          2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: 2ldc+U09ndQwDLettNrFPg07d78YSKK4tW/0OaClexo=)
                          3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:38:a8:77:f3:ab:a9:69:f2:13:c7:89:a2:1d:7b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
        Validity
            Not Before: Sep 24 21:00:55 2026 GMT
            Not After : Sep 25 21:00:55 2026 GMT
        Subject: CN=9f1804098efdff1d57062f0f89400917da48417c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:93:fb:a6:1d:5c:93:0c:e7:bf:32:e3:95:
                    ee:06:0a:44:99:5b:4f:ca:c7:d3:d8:3b:22:dc:82:
                    d2:ca:c2:09:32:f3:3a:0b:99:18:0f:dc:52:bb:67:
                    61:45:ed:97:b7:9e:95:29:8c:78:4f:ec:48:da:57:
                    6f:c9:bd:7c:68:63:57:27:4d:f0:7a:db:30:c9:18:
                    70:f7:11:b1:69:31:79:b8:00:10:b1:62:5b:b4:c0:
                    18:36:a7:8c:71:26:c2:bb:81:fb:ce:09:f5:1b:1b:
                    93:36:e7:0b:15:73:12:23:92:dc:1f:aa:2e:12:7d:
                    c9:9a:c3:c2:dd:38:ba:a9:08:85:86:0e:7b:cf:5b:
                    bc:2e:1d:3f:35:48:88:f4:bc:d5:50:38:68:3a:4e:
                    f9:ed:04:92:57:82:e8:7c:cf:65:45:13:ca:e8:5a:
                    cc:7f:08:b6:fd:af:6b:b2:9b:81:3d:c9:72:e0:36:
                    ff:db:a3:63:5e:99:19:d2:ba:37:be:82:ec:4c:56:
                    a9:66:f6:d1:ab:75:22:41:91:bf:7e:56:74:73:b6:
                    f0:8f:20:d4:5a:36:7b:5d:12:53:4b:dd:ad:af:d6:
                    6b:6b:50:c5:8a:b0:1f:0d:78:2e:6e:4c:45:18:3d:
                    2d:b9:73:f9:39:83:f1:8b:af:90:5f:97:70:30:4e:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:18:04:09:8E:FD:FF:1D:57:06:2F:0F:89:40:09:17:DA:48:41:7C
            X509v3 Authority Key Identifier:
                keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bc:e6:0f:38:ae:a2:5b:f5:2d:37:54:6b:7b:bc:20:ef:ee:
         d3:28:f5:1b:e7:25:bf:9b:8e:e3:fb:68:a4:b6:97:74:a1:ae:
         61:72:dc:0a:f5:35:4c:95:7f:9c:e3:ad:26:c2:d6:32:6e:8f:
         4f:f5:27:56:97:2c:e4:d7:ac:55:2d:c7:23:b2:22:40:f1:11:
         b1:cd:c5:20:63:1f:db:44:0e:44:c3:ed:a6:30:cd:37:d4:78:
         b9:e5:14:c9:40:9a:df:72:bb:2a:4d:38:b6:8c:74:f1:5d:e4:
         05:1d:e1:fb:e9:ab:dd:ae:a1:fa:b8:14:08:23:a7:94:b2:34:
         07:ff:a5:9f:af:ed:83:6e:c8:4b:c9:c3:81:d5:c9:d7:61:0b:
         47:45:72:6e:f4:7c:84:68:22:d1:db:e6:5b:03:18:69:bf:18:
         95:b5:bb:b9:35:de:d6:4c:12:c7:1b:d9:41:f7:82:91:ca:ab:
         b2:02:c0:ff:f0:89:10:d3:0c:22:79:46:5c:c7:dd:aa:d9:12:
         98:81:19:70:af:10:e4:79:c1:c3:a2:75:2b:67:5a:9f:dc:b2:
         30:e0:91:eb:19:04:96:5b:93:80:96:65:f2:0f:72:49:1d:9c:
         4a:be:b1:77:2d:ba:03:17:0d:50:b0:62:14:bc:7b:f4:b3:83:
         cf:04:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:35:39 2026 by rpki-client