Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File:                     hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier:          rRgkOqVFVfPynvKfbLAoudbtCadHCCtyv7l4NGREm/c=
Subject key identifier:   C1:18:25:B3:0D:8F:8E:4F:E7:A4:54:E7:D9:AE:F1:11:C2:FF:EA:C9
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer:       /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial:       01A100910E09F9119BE2AE6B14AE782D3E23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number:          1647
Signing time:             Sat 03 Oct 2026 07:01:08 +0000
Manifest this update:     Sat 03 Oct 2026 07:01:08 +0000
Manifest next update:     Sun 04 Oct 2026 07:01:08 +0000
Files and hashes:         1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
                          2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
                          3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: wvPuEAxPWazp7o0yqpOOiQ4oRGNdgnip9Q7ZbYDXxA8=)
                          4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:91:0e:09:f9:11:9b:e2:ae:6b:14:ae:78:2d:3e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
        Validity
            Not Before: Oct  3 07:01:08 2026 GMT
            Not After : Oct  4 07:01:08 2026 GMT
        Subject: CN=c11825b30d8f8e4fe7a454e7d9aef111c2ffeac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:90:56:41:3b:40:59:b7:f3:7c:5d:c6:b0:
                    91:61:60:cd:2a:af:6c:6b:e5:01:18:ce:09:97:5e:
                    1d:93:8a:57:4b:47:e0:86:35:49:15:73:e4:6e:12:
                    c0:fd:21:1f:22:42:1d:ca:89:93:32:29:61:87:4e:
                    c3:09:6d:d8:03:38:ed:d8:c2:2c:2b:a2:99:96:55:
                    cc:09:32:6e:ce:ef:a9:7e:f8:28:49:16:3c:5b:6b:
                    ea:14:48:86:dc:ef:f7:52:8d:31:48:a7:76:93:d3:
                    95:8d:27:48:39:a7:27:0f:8f:ac:ff:8c:1d:f5:0b:
                    d8:fb:d4:50:cb:a7:5f:19:36:d9:db:ef:65:8c:de:
                    79:48:bd:32:fa:59:f4:95:5f:94:04:53:1a:dc:86:
                    e3:4e:68:c8:e6:9b:e3:eb:1e:5b:b9:c9:d9:e9:e9:
                    0d:09:a8:69:db:bd:97:7a:33:7e:a3:a0:09:6a:28:
                    2a:6a:46:3e:60:12:22:e9:11:09:e1:21:8c:6c:66:
                    0f:58:bc:4b:42:d6:89:75:39:02:eb:93:77:48:a7:
                    b7:22:42:1d:0a:cf:ff:58:3a:67:16:ab:a4:93:61:
                    19:ed:04:4e:6f:50:db:71:1a:3d:e2:95:00:ee:49:
                    d8:a4:01:2f:90:6f:25:f7:5a:6c:0d:5c:d1:ff:51:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:18:25:B3:0D:8F:8E:4F:E7:A4:54:E7:D9:AE:F1:11:C2:FF:EA:C9
            X509v3 Authority Key Identifier:
                keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:44:ee:af:60:d9:40:9d:c0:87:df:3e:c8:c6:d7:72:09:0a:
         f6:a5:67:36:cd:cc:90:28:07:a4:39:71:55:92:03:80:10:19:
         80:e1:55:86:38:87:7d:bc:6a:5a:cd:d3:ea:d5:89:69:7b:a7:
         fa:f4:a1:f8:13:65:5f:dd:6d:3f:43:7e:ad:4b:ef:1c:4e:ed:
         93:0d:9f:4c:86:43:7f:ff:b6:c6:04:8c:8e:4a:45:0c:5b:2d:
         ee:e7:84:90:fe:ad:ce:28:28:29:af:6e:5b:91:9e:9e:98:5b:
         ef:2b:c5:be:12:c9:94:f8:ea:22:02:aa:fe:98:32:ba:0b:e5:
         ec:df:2e:7b:6b:55:12:30:fb:38:76:6f:c1:be:ba:de:5e:9b:
         a8:f5:3f:1d:f9:22:8c:f2:72:7c:7d:67:22:cc:7b:16:7e:7d:
         ef:58:f6:ca:d4:1e:98:23:29:a7:b1:c6:e2:b6:cd:df:f9:56:
         9f:dd:8a:76:aa:4a:d3:63:b7:17:2e:4f:79:45:30:2e:50:45:
         a7:b0:95:f0:38:66:a6:18:7a:11:65:58:ee:a7:81:08:cc:10:
         b7:c2:9e:f2:b9:88:4f:9f:10:08:2c:43:54:2c:91:93:09:c5:
         c6:08:71:1b:d2:7b:e5:09:54:b9:40:3c:d5:2a:cd:78:f0:bf:
         83:f0:31:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAkQ4J+RGb4q5rFK54LT4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDVjMDcxOTJhODEwNmZlZGIwNzYwYjg5NDUwMzJjYTFk
MzA1NGIwHhcNMjYxMDAzMDcwMTA4WhcNMjYxMDA0MDcwMTA4WjAzMTEwLwYDVQQD
EyhjMTE4MjViMzBkOGY4ZTRmZTdhNDU0ZTdkOWFlZjExMWMyZmZlYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+qQVkE7QFm383xdxrCRYWDNKq9s
a+UBGM4Jl14dk4pXS0fghjVJFXPkbhLA/SEfIkIdyomTMilhh07DCW3YAzjt2MIs
K6KZllXMCTJuzu+pfvgoSRY8W2vqFEiG3O/3Uo0xSKd2k9OVjSdIOacnD4+s/4wd
9QvY+9RQy6dfGTbZ2+9ljN55SL0y+ln0lV+UBFMa3IbjTmjI5pvj6x5bucnZ6ekN
Cahp272XejN+o6AJaigqakY+YBIi6REJ4SGMbGYPWLxLQtaJdTkC65N3SKe3IkId
Cs//WDpnFqukk2EZ7QROb1DbcRo94pUA7knYpAEvkG8l91psDVzR/1GlPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEYJbMNj45P56RU59mu8RHC/+rJMB8GA1UdIwQY
MBaAFIQFwHGSqBBv7bB2C4lFAyyh0wVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDIt
NGM5M2JlZTI3ZDU0LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDItNGM5M2JlZTI3ZDU0
LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcETur2DZ
QJ3Ah98+yMbXcgkK9qVnNs3MkCgHpDlxVZIDgBAZgOFVhjiHfbxqWs3T6tWJaXun
+vSh+BNlX91tP0N+rUvvHE7tkw2fTIZDf/+2xgSMjkpFDFst7ueEkP6tzigoKa9u
W5Genphb7yvFvhLJlPjqIgKq/pgyugvl7N8ue2tVEjD7OHZvwb663l6bqPU/Hfki
jPJyfH1nIsx7Fn5971j2ytQemCMpp7HG4rbN3/lWn92KdqpK02O3Fy5PeUUwLlBF
p7CV8Dhmphh6EWVY7qeBCMwQt8Ke8rmIT58QCCxDVCyRkwnFxghxG9J75QlUuUA8
1SrNePC/g/AxqQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 17:50:18 2026 by rpki-client