Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File:                     Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier:          kU4cQWegiVutPGinN+ZoHx4vGEhoafyq6/IGsklmfyI=
Subject key identifier:   F1:DD:6E:11:45:28:80:97:57:C2:2A:D9:16:B2:82:A5:B7:E4:05:1D
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       01A0D6B973FCF0B1CDD43FEE15F45724422F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number:          14CE
Signing time:             Fri 25 Sep 2026 04:01:13 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:13 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:13 +0000
Files and hashes:         1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
                          2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
                          3: 9QcZs2zkek-gn2Ui4swbuoO2vr4.roa (hash: 6q/w90WCRN2heb1yDVdybCSeCfBGkK6uBIDIiKl07Rk=)
                          4: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
                          5: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
                          6: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: dgV8qo2X+eu7pgk2wkjn5z4Sv1iGMZ1b964waL0RLZs=)
                          7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
                          8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
                          9: Wpllp8x3IPSIu2NKqMIsX4CqA-M.roa (hash: y6yVGF74iM63320M/aisDv7GfSSwpDKSPPaZofgGzow=)
                          10: ZLh5PnaXaFDa2H68oOQrm4QWzUc.roa (hash: n8EPYXHHmAj3BuzhP+7twXQ5g88qMPOrqw3/TWqaivg=)
                          11: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
                          12: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
                          13: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
                          14: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
                          15: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
                          16: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
                          17: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
                          18: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
                          19: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:73:fc:f0:b1:cd:d4:3f:ee:15:f4:57:24:42:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Sep 25 04:01:13 2026 GMT
            Not After : Sep 26 04:01:13 2026 GMT
        Subject: CN=f1dd6e114528809757c22ad916b282a5b7e4051d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:29:47:cc:84:19:66:e7:aa:d2:60:2a:99:
                    ca:8e:db:ba:ec:26:fe:ac:36:36:ea:63:31:74:b9:
                    c2:46:33:bd:f1:fe:27:9a:13:35:5e:e0:a2:73:fa:
                    45:86:1e:19:17:e2:c1:d6:7b:ac:82:cb:52:b7:df:
                    4a:e5:9b:10:ab:9e:cb:cb:ef:a6:c2:f3:81:48:45:
                    c0:16:98:6f:a9:3f:b1:53:4c:1a:9f:02:86:a5:b7:
                    d6:9e:e8:ee:2a:21:45:ae:db:36:30:b9:72:b1:37:
                    49:b4:ef:92:e1:3e:82:e8:03:1d:7f:0e:89:7f:64:
                    12:cb:57:e7:1c:39:8c:d9:58:f6:fd:8a:3f:70:47:
                    f4:8e:d4:c0:14:53:a1:99:ad:c1:1d:7c:9c:2a:67:
                    c8:0d:b7:99:b6:6e:8d:bb:7d:39:f4:62:71:03:7c:
                    a3:90:9c:36:47:f5:37:40:23:9d:8d:a8:51:20:b6:
                    c6:04:6e:c8:dc:de:3b:ce:e5:03:6b:61:17:b7:d5:
                    7c:9d:7a:31:ef:6d:da:cf:e4:8a:f3:10:95:ce:a4:
                    08:a3:91:0d:81:9f:73:eb:ac:17:ef:12:11:71:90:
                    d2:4a:e0:f3:41:92:86:fa:14:63:6d:8a:42:a7:85:
                    0a:d8:a9:de:6d:bc:32:8b:63:e3:d7:09:d0:7a:57:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DD:6E:11:45:28:80:97:57:C2:2A:D9:16:B2:82:A5:B7:E4:05:1D
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:f9:02:e1:f0:f1:57:42:b1:2b:42:b5:7d:9b:3f:0f:18:
         f5:1c:7b:e7:77:cc:57:c8:f6:1b:6d:e0:d9:4f:3b:34:30:2d:
         7a:14:ab:a5:ea:03:5c:c8:20:78:68:5b:31:53:95:8f:d4:14:
         6f:5c:67:01:a6:f1:97:fc:c8:df:2a:8a:01:ff:b7:95:16:03:
         c6:be:65:8e:fd:8c:70:87:92:bb:a2:6f:cf:6e:7a:fd:85:ff:
         75:64:30:a0:5c:1b:4b:36:ab:e5:cc:a1:e6:64:5a:c0:90:3a:
         74:6c:06:26:fc:a9:37:d6:61:7d:f9:b3:01:38:ab:80:c5:4e:
         bf:70:1f:8b:c9:ab:1e:d3:7c:d3:f8:ce:86:6f:85:33:83:09:
         ec:57:21:81:0a:89:9f:54:e3:c3:b7:95:b4:2b:44:07:c5:22:
         d2:93:6d:ca:04:53:80:d8:7a:7c:ba:40:29:3d:f3:2f:34:69:
         04:3d:71:55:22:ee:7d:bd:ac:10:fa:fa:10:f2:d0:47:0e:87:
         bf:f6:95:2f:dd:7b:f8:c3:fb:34:a0:dc:15:8f:6f:e2:1a:ae:
         60:c5:66:a4:e5:3e:22:26:e1:ba:8c:24:ea:6b:8c:3e:b2:d3:
         87:d6:fc:62:59:53:c0:a1:18:c9:2a:d8:1d:4c:1f:a3:8d:7e:
         62:07:8b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:29:49 2026 by rpki-client