Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
File:                     hcEp31AMjfmKQosomcbNYSTxaKE.mft (raw, json)
Hash identifier:          oDNi+zcBCP9sJPsANsz4e4I7RMuKyV1y8Cn9iYnPcp0=
Subject key identifier:   27:BF:B1:F7:CB:F8:0F:0E:E6:32:C5:B9:32:79:7D:18:4E:D9:6E:2E
Authority key identifier: 85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1
Certificate issuer:       /CN=85c129df500c8df98a428b2899c6cd6124f168a1
Certificate serial:       01A0F0E852D66889EAE21CFEB823A4FCC991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
Manifest number:          F6
Signing time:             Wed 30 Sep 2026 06:02:32 +0000
Manifest this update:     Wed 30 Sep 2026 06:02:32 +0000
Manifest next update:     Thu 01 Oct 2026 06:02:32 +0000
Files and hashes:         1: JHT6ESoo6q0bOi3_neOwXu64U4c.roa (hash: 1z9FjYu9NjkAWLtxnb2DnFiLMcGnPYdwdwCvpCkxJqM=)
                          2: hcEp31AMjfmKQosomcbNYSTxaKE.crl (hash: DXuy/m7hwX3SMUe3GZ97UnN6dpjt84E3c77MZOhC9YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:e8:52:d6:68:89:ea:e2:1c:fe:b8:23:a4:fc:c9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85c129df500c8df98a428b2899c6cd6124f168a1
        Validity
            Not Before: Sep 30 06:02:32 2026 GMT
            Not After : Oct  1 06:02:32 2026 GMT
        Subject: CN=27bfb1f7cbf80f0ee632c5b932797d184ed96e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:fe:e4:c8:61:6b:2e:1d:e3:7c:b7:bc:48:
                    08:e4:bc:c9:4d:27:89:70:19:ee:25:1b:89:70:f6:
                    bb:60:86:8b:64:3f:14:75:5e:f9:1b:de:f0:92:95:
                    d1:0a:2e:fe:c4:4f:d6:88:71:b0:fd:ca:7f:85:59:
                    b1:ca:55:fe:f3:ae:e4:51:80:8b:d8:c1:a9:d9:ad:
                    e5:97:32:f1:19:3a:bc:63:0a:cf:21:85:7a:f7:49:
                    5b:ad:8f:a2:87:23:ef:e6:2c:fd:71:95:ba:46:b0:
                    f7:85:95:c7:21:82:52:09:b7:c3:40:89:95:49:91:
                    8b:04:4d:2f:ae:f3:21:88:75:3a:bf:52:03:ec:1e:
                    ac:cd:b9:11:11:fe:d8:0c:8d:d3:f8:06:4e:6e:11:
                    12:c5:55:06:f4:8a:09:14:53:fb:7d:19:0f:dc:7e:
                    27:10:7b:04:0d:f6:ea:ee:9a:cd:6e:cf:6d:0a:a7:
                    98:65:c9:d2:ef:8e:52:56:52:52:f3:79:fe:a9:85:
                    e0:ee:0e:df:52:cc:ef:9f:d6:7d:15:f6:ab:1a:83:
                    a8:b3:9e:07:67:31:1c:96:08:63:e9:bd:46:1c:4e:
                    e9:f9:75:58:23:e9:a8:8f:3a:fd:01:0e:0e:ad:5e:
                    de:66:de:0e:33:11:dd:e1:cf:dc:61:19:eb:6d:af:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BF:B1:F7:CB:F8:0F:0E:E6:32:C5:B9:32:79:7D:18:4E:D9:6E:2E
            X509v3 Authority Key Identifier:
                keyid:85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:39:90:12:43:36:67:c9:97:1a:e0:2d:11:61:e0:30:96:65:
         fe:24:9c:e2:34:29:8d:9b:ad:06:95:b8:08:72:84:f6:54:c0:
         fd:6d:f4:42:d2:31:42:fa:2b:e7:89:ac:77:7d:17:c3:58:75:
         1b:20:e8:a7:f2:43:93:e2:c4:1c:da:d6:3b:9c:3e:9c:8e:5a:
         ec:07:a0:15:0c:8b:d2:05:cb:91:55:1a:94:25:c2:3f:02:73:
         b4:df:2b:22:ad:20:06:05:01:af:32:33:a6:5d:e5:5b:ec:72:
         c3:e8:67:fb:c1:e5:2b:ae:e2:ca:96:3d:25:54:cc:46:a4:2f:
         b2:d6:05:73:59:6e:8a:c0:b3:ce:a0:59:71:22:3b:15:ff:1e:
         a9:7b:8c:2d:fc:a8:42:d5:34:2d:c8:6b:74:51:9e:bb:0c:73:
         1e:4b:d1:31:3d:31:03:aa:ed:6c:c7:2f:e7:9f:1b:1f:87:3d:
         8e:a0:f2:c1:b3:77:a9:b8:e2:71:7f:ac:60:f3:e2:03:01:ec:
         a6:74:9a:ad:ab:f0:81:7b:80:c7:9b:aa:5c:ff:0b:61:9f:f5:
         8b:d4:80:2d:21:94:e2:40:1a:41:2a:1f:f4:f1:41:e4:98:59:
         ed:c0:7a:11:ef:51:d4:07:8e:73:ee:c5:83:31:00:7f:9e:ed:
         0a:12:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:06:02 2026 by rpki-client