Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File:                     hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier:          YwV+pbGsj0VADjNASfQ6yhcjU5yi8EGC0kZmvDY53w8=
Subject key identifier:   82:CC:BB:1A:C7:41:76:02:98:EA:B3:58:09:BE:69:A4:F4:FA:E5:22
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       01A0D56FAAADE48BDDFF26081F73B26E65FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number:          1A76
Signing time:             Thu 24 Sep 2026 22:01:00 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:00 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:00 +0000
Files and hashes:         1: 6-MYWUgNN_QLhajw01TPQypu9qo.roa (hash: u38LNGCNm7hapDrGswDbeJazlaHgAyILiY9j6QwpBsg=)
                          2: E9zZAnLobJdxCJ_CMObNo6B0tg0.roa (hash: gKx/4RJ8SdZlVgi0Sh6XpvjZo+kkGJvfp88hpXTMS3s=)
                          3: Gj_KMBJbJSrcc2TVvL9u56hzgdM.roa (hash: otqXS+JeceT68wkSJPWrG1/A/vyc30taCbvfR1CTCrc=)
                          4: Is4ZsOkA4ognMGIQHzhjm6hHarA.roa (hash: EQqUs3Tbbc3EDtczOgdmk5Vx/6Xxwbf61H1i0BVYet0=)
                          5: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: n7z0fR7ZdXHWRiowMd6d/gBzUcdj+cXNuQoixncJ58I=)
                          6: piqonsXFBrG6rXRd3eemw24RFpc.roa (hash: nKq7t9jFZ72mSjyumQVPsGsNkyCxwxThmoOAWXTbJcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:6f:aa:ad:e4:8b:dd:ff:26:08:1f:73:b2:6e:65:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Sep 24 22:01:00 2026 GMT
            Not After : Sep 25 22:01:00 2026 GMT
        Subject: CN=82ccbb1ac741760298eab35809be69a4f4fae522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:5c:a3:95:77:ec:a9:2e:79:5e:18:a9:7d:
                    78:ec:4e:19:16:29:2b:4c:e0:03:c4:7f:1f:c4:97:
                    ad:f2:6c:e1:d0:81:ff:e5:5b:67:fe:75:7b:e4:27:
                    86:6a:c9:ff:d2:64:e7:5a:77:d9:8a:bc:81:c3:9b:
                    7c:81:dc:02:59:d0:29:9f:15:58:08:b8:29:a2:51:
                    87:4d:82:79:26:fe:1d:a2:b5:8c:58:dc:b2:79:79:
                    38:6c:fe:69:aa:70:93:cf:b0:7e:d2:78:c5:90:6e:
                    35:81:e9:74:88:c7:32:d4:6f:99:56:e8:1b:8b:af:
                    c9:15:5d:02:46:81:68:8c:c9:69:7c:09:d9:96:ca:
                    4e:f6:9c:fc:94:f0:22:21:25:2c:66:fd:27:7b:35:
                    9e:85:1d:3d:e9:6b:ba:47:f5:35:05:1c:ec:0d:2e:
                    88:b2:ef:57:3a:5b:d0:61:13:2a:a7:f0:0d:e9:72:
                    ed:9f:9a:36:e1:f5:64:ab:45:5a:de:bc:72:26:81:
                    ca:56:63:b7:02:71:45:b2:b6:27:3f:89:55:e3:4d:
                    ac:3b:a1:6e:03:c6:44:62:82:16:b8:f4:9a:55:75:
                    5d:04:5a:96:c9:55:1d:f4:16:28:f4:cf:d5:fa:2c:
                    c1:86:d3:9b:1f:c2:bf:0a:40:33:01:df:a9:92:db:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:BB:1A:C7:41:76:02:98:EA:B3:58:09:BE:69:A4:F4:FA:E5:22
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:30:f8:69:64:87:2a:18:3a:62:70:d5:59:8c:c7:24:32:
         d0:19:b0:94:e0:11:55:5b:bc:85:22:b6:c8:cc:bc:34:d6:d0:
         10:9e:29:ad:d4:0e:e6:79:f4:9e:ed:2d:3d:e0:41:f9:0e:cc:
         4e:75:d5:ef:e3:bc:cc:80:1a:f5:73:c3:76:40:8a:c9:4d:dd:
         7d:fb:72:c9:56:28:e8:c8:cc:ab:72:d3:65:4d:42:73:10:f5:
         97:7a:02:b0:97:da:b0:1b:78:de:90:2a:8e:c7:66:e9:bc:64:
         bf:46:94:ee:21:92:06:7c:bd:c7:dd:4c:59:8c:87:c0:27:5c:
         54:da:23:6d:c0:06:f8:07:33:f4:6b:4e:a8:63:1e:00:09:0b:
         32:74:86:07:aa:ef:75:f2:74:96:a0:bf:a2:27:e0:ee:6e:d5:
         11:f8:ea:a3:7c:bb:20:b5:80:26:5d:fd:89:b0:41:f1:15:25:
         e4:09:e8:31:5d:8a:b4:dd:20:20:93:15:1e:58:98:cb:ee:1d:
         dc:c6:f0:8d:5b:15:ce:ef:e1:f3:c3:30:3f:62:f2:a4:dc:33:
         3c:a5:1b:c4:3b:39:3a:df:d7:8d:90:d7:79:1c:a1:09:1f:1a:
         b4:07:57:44:05:54:d2:41:f7:24:6b:27:b7:81:ee:9b:9f:3a:
         e5:53:ad:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:14:10 2026 by rpki-client