Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File:                     hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier:          EaU8EAggX36/2z2VfTFqsquGg7fgiWQ3QPEn/kfPzBA=
Subject key identifier:   63:73:7D:F0:85:CC:75:2C:7F:B2:D7:E6:9C:61:C1:6A:3A:2A:22:B1
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer:       /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial:       01A0DB7253943E80767D5BA0B5707491262E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number:          1A74
Signing time:             Sat 26 Sep 2026 02:01:37 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:37 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:37 +0000
Files and hashes:         1: ZDyULkY7XdQ11kYjdum05r2DwuM.roa (hash: zq3BSwMTqEueaum+sWRBlqipTKD1rJ/mmOl8XQsz7Vs=)
                          2: dAmCb4Q0Lu8OSnL465WyYmvHdqs.roa (hash: ihhOeF2biIt0LZI2QoL/OX+WXgwfGmKMeTYYQxzMVw4=)
                          3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: 5cNEDAo0GeCzjJqmmLrrmU2/68ElEwxpUzo3m05/9KM=)
                          4: rU_aup43-JcvplAJDdsQtTE8z3s.roa (hash: 8xZqax6dDOxidmRdOp80eUZcDr3nHq4tvorScngCUzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:53:94:3e:80:76:7d:5b:a0:b5:70:74:91:26:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
        Validity
            Not Before: Sep 26 02:01:37 2026 GMT
            Not After : Sep 27 02:01:37 2026 GMT
        Subject: CN=63737df085cc752c7fb2d7e69c61c16a3a2a22b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:23:35:c7:fd:27:a8:26:84:af:8d:db:dc:
                    82:ea:10:53:84:1a:93:64:45:5e:3e:bf:50:83:6a:
                    6a:ad:90:e7:98:48:44:d0:a3:ff:f2:48:f4:87:48:
                    f7:f6:79:d3:cc:a0:a5:e4:14:6b:4a:b6:c5:fc:53:
                    c7:38:a8:6c:51:18:fd:f0:04:e3:53:8e:4d:3c:bb:
                    11:78:c7:77:ac:b9:58:f2:93:90:1d:80:f6:fe:d5:
                    79:19:f2:7a:b2:e9:64:ad:b9:d3:e2:08:9d:63:b5:
                    02:fe:0b:20:93:a4:f4:54:28:c9:a9:7c:3e:fe:05:
                    0d:7a:6a:b7:25:1c:07:a6:53:e5:25:21:01:16:9b:
                    40:0d:73:b0:c3:cf:e9:9e:71:8a:2e:56:03:aa:9d:
                    48:9b:cd:a6:b0:bb:06:c7:59:80:4f:f3:a5:0d:a7:
                    3d:9b:88:92:e1:ea:ef:a2:1c:99:a9:37:e9:43:72:
                    3a:5a:2b:03:c2:fb:d0:05:17:51:ad:b4:66:8a:08:
                    74:3d:cc:d0:33:9b:20:62:04:27:dd:ff:72:eb:82:
                    18:7e:3f:b5:61:3a:8f:eb:9e:3d:aa:66:3e:94:5b:
                    12:41:af:05:92:11:64:ac:96:b1:fc:92:95:82:27:
                    fa:4a:21:d1:78:4a:c5:6a:e7:c7:c1:24:8f:e5:49:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:73:7D:F0:85:CC:75:2C:7F:B2:D7:E6:9C:61:C1:6A:3A:2A:22:B1
            X509v3 Authority Key Identifier:
                keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:51:47:9d:91:58:80:52:e1:64:05:cb:53:dd:4d:36:1d:41:
         93:88:0a:6f:90:f6:8e:26:d8:d4:7d:6a:eb:ea:1d:dd:26:9a:
         aa:db:b5:a0:6a:29:77:43:10:e5:ef:47:94:74:cc:39:98:97:
         6a:32:04:4e:fe:e0:c7:4c:52:81:b8:34:f9:c1:f2:91:c9:32:
         f8:02:b6:b4:69:d8:cc:85:84:8f:07:f9:8e:bf:66:c1:77:eb:
         3f:f7:47:0a:d1:3c:0a:e3:6c:a1:1a:01:ea:23:fc:20:c9:04:
         b6:e6:ee:83:de:67:33:61:64:e1:b9:f1:cc:8b:69:fc:f5:d6:
         2e:c9:44:7a:ec:3e:3f:f1:1f:95:cc:74:a8:52:5c:c8:78:4b:
         77:cd:f6:43:b9:db:34:99:74:dd:c2:b8:24:2b:46:8c:eb:dc:
         1e:23:11:31:04:47:27:da:e7:09:8e:23:59:9e:9e:3d:e8:e8:
         02:78:86:b5:c1:ef:22:59:4c:3e:6c:55:53:a2:48:76:1b:f4:
         89:de:a9:e6:d1:94:6e:24:95:fa:3f:ff:1b:41:29:78:eb:f7:
         cd:d3:ac:86:3b:62:e4:be:79:4b:47:92:21:b3:25:18:3b:fb:
         ce:14:34:3a:5c:5e:a8:e8:6d:6d:83:ad:44:75:96:a3:a2:61:
         27:fc:c0:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbclOUPoB2fVugtXB0kSYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YWJmMGM5ODE3MDFhYmE5N2U0ZmNkMGJlZDRlNGNkYjg2
OTIwNDcwHhcNMjYwOTI2MDIwMTM3WhcNMjYwOTI3MDIwMTM3WjAzMTEwLwYDVQQD
Eyg2MzczN2RmMDg1Y2M3NTJjN2ZiMmQ3ZTY5YzYxYzE2YTNhMmEyMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB0jNcf9J6gmhK+N29yC6hBThBqT
ZEVePr9Qg2pqrZDnmEhE0KP/8kj0h0j39nnTzKCl5BRrSrbF/FPHOKhsURj98ATj
U45NPLsReMd3rLlY8pOQHYD2/tV5GfJ6sulkrbnT4gidY7UC/gsgk6T0VCjJqXw+
/gUNemq3JRwHplPlJSEBFptADXOww8/pnnGKLlYDqp1Im82msLsGx1mAT/OlDac9
m4iS4ervohyZqTfpQ3I6WisDwvvQBRdRrbRmigh0PczQM5sgYgQn3f9y64IYfj+1
YTqP6549qmY+lFsSQa8FkhFkrJax/JKVgif6SiHReErFaufHwSSP5UlpYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNzffCFzHUsf7LX5pxhwWo6KiKxMB8GA1UdIwQY
MBaAFISr8MmBcBq6l+T80L7U5M24aSBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAt
NjFiYzdlY2M0ODVjLzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAtNjFiYzdlY2M0ODVj
LzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1FHnZFY
gFLhZAXLU91NNh1Bk4gKb5D2jibY1H1q6+od3Saaqtu1oGopd0MQ5e9HlHTMOZiX
ajIETv7gx0xSgbg0+cHykcky+AK2tGnYzIWEjwf5jr9mwXfrP/dHCtE8CuNsoRoB
6iP8IMkEtubug95nM2Fk4bnxzItp/PXWLslEeuw+P/Eflcx0qFJcyHhLd832Q7nb
NJl03cK4JCtGjOvcHiMRMQRHJ9rnCY4jWZ6ePejoAniGtcHvIllMPmxVU6JIdhv0
id6p5tGUbiSV+j//G0EpeOv3zdOshjti5L55S0eSIbMlGDv7zhQ0OlxeqOhtbYOt
RHWWo6JhJ/zAxA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:42:21 2026 by rpki-client