Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
File:                     hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json)
Hash identifier:          TUiasE7Iaikn07pqHpm641uX6SEMw5RnMi6bQlMgW54=
Subject key identifier:   3F:C6:E1:39:CA:C1:DC:66:23:6E:93:E9:EC:5C:01:54:FB:58:49:23
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Certificate issuer:       /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial:       01A0E88983AA42BA015C67A7A9456FCF43F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
Manifest number:          0581
Signing time:             Mon 28 Sep 2026 15:02:01 +0000
Manifest this update:     Mon 28 Sep 2026 15:02:01 +0000
Manifest next update:     Tue 29 Sep 2026 15:02:01 +0000
Files and hashes:         1: HcMClhCRmKE60lpZDx5-BSB1cFo.asa (hash: RaiOYBO+NLhX7PmnS7SoVK0FIJWQ+F4Nt0bFD9R8aRc=)
                          2: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: /7Rrkx8rKD66ZOaoX8JkO9uRFfgDtPAUG34TtXXSZpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:89:83:aa:42:ba:01:5c:67:a7:a9:45:6f:cf:43:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
        Validity
            Not Before: Sep 28 15:02:01 2026 GMT
            Not After : Sep 29 15:02:01 2026 GMT
        Subject: CN=3fc6e139cac1dc66236e93e9ec5c0154fb584923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:7f:08:d0:7c:b3:ee:5d:ec:3f:42:b7:81:
                    94:ca:59:10:04:df:dc:77:7a:31:08:65:34:ff:cd:
                    7f:dc:b7:2c:93:38:49:54:10:c7:93:b6:18:87:03:
                    62:23:a1:2b:d6:9d:c4:08:17:ed:e0:72:62:c6:dc:
                    a3:b2:bd:b5:98:b4:7a:c3:2e:50:cc:c1:9e:f8:57:
                    95:dd:4b:57:95:d2:59:16:32:3d:3f:ba:75:eb:d5:
                    4d:ca:da:37:af:e8:87:5f:8e:5e:28:50:39:06:85:
                    7b:55:db:6c:0a:e2:60:55:36:d1:cc:8e:a4:e2:53:
                    39:6e:62:fe:99:4f:24:53:56:89:c1:69:37:1a:78:
                    cf:dd:1d:4d:f8:94:d1:dc:75:57:f8:75:94:5a:f6:
                    fa:93:f9:54:46:af:c1:63:03:ba:2b:58:0d:c1:7f:
                    db:66:82:63:d3:8e:9d:ce:55:ef:26:27:12:8b:7e:
                    09:2f:83:2e:04:05:36:44:1d:f5:5e:8e:e2:04:b4:
                    c9:d9:90:ab:b6:9f:5b:96:2e:6e:76:97:2f:f5:df:
                    90:ea:5a:c5:ae:9e:10:88:cf:86:45:0e:07:ce:17:
                    e8:37:d5:03:4d:4a:47:02:41:5a:a3:2b:90:69:4a:
                    7a:8e:ce:91:12:5b:4c:37:ed:da:a8:e7:a6:62:53:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C6:E1:39:CA:C1:DC:66:23:6E:93:E9:EC:5C:01:54:FB:58:49:23
            X509v3 Authority Key Identifier:
                keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:78:e4:d9:14:68:80:cf:dd:c7:64:9e:18:df:14:4f:31:
         84:81:30:08:63:d7:ab:6b:5b:93:9b:ce:db:b3:81:33:46:a8:
         5b:c9:3d:c4:e9:fc:40:de:f2:60:3a:6d:90:b5:4a:fd:b3:aa:
         b4:68:f3:ba:49:a6:a8:6e:58:15:2d:88:ee:81:a9:75:27:be:
         2e:4b:15:5d:f7:34:59:83:11:9e:a1:15:eb:5d:9f:92:68:f7:
         df:15:a2:41:ef:d8:30:fe:81:a0:9b:fc:3b:db:91:44:98:d7:
         d8:74:bf:c0:d3:55:f5:79:c3:a6:80:65:67:3a:8e:c0:02:73:
         6c:45:c0:bf:85:c4:2a:8f:10:13:19:93:fd:51:a4:9a:25:d3:
         b1:ca:bb:67:35:00:ad:55:5a:e3:c9:d7:fb:37:b4:2c:dd:31:
         8c:c7:26:a0:6a:77:af:7d:01:09:d6:a7:ab:0c:4c:4d:3d:4b:
         90:71:bb:c3:50:8e:6d:a4:c0:f1:0f:40:ef:72:1b:50:2d:93:
         e6:d9:45:9c:54:4e:da:02:ed:34:3a:5f:5c:5a:fb:8d:5a:8f:
         74:14:47:7d:79:c1:dc:14:ae:cb:94:ba:16:4d:9f:56:b9:81:
         02:ea:11:07:f1:d6:ac:6c:3f:7e:b0:d4:1e:30:dd:0e:d9:36:
         85:27:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:59:41 2026 by rpki-client