Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File:                     HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier:          +ArmZQmsFzJoLemo++/mu39Xi003IOuQeus+/0XQ0YY=
Subject key identifier:   82:77:F0:EF:DE:8D:95:75:98:B1:85:69:5E:DE:6B:54:70:AF:36:C6
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer:       /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial:       01A1DE394A2A97FA0D23708D7D064ACAD227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number:          0584
Signing time:             Sun 15 Nov 2026 08:00:58 +0000
Manifest this update:     Sun 15 Nov 2026 08:00:58 +0000
Manifest next update:     Mon 16 Nov 2026 08:00:58 +0000
Files and hashes:         1: 3I8r6nk9FMKnPoUmEICiYZh5jzo.asa (hash: D3onkOruVozUvicrMaDrSqAZyE2pIZAYfxt5MIWUe1k=)
                          2: 7M1lI4YMAFJOI48HyCagOBCBslA.roa (hash: stXzixjVqCCnGGdCyZumqUF4HhQbWS12UlJGaDGSUYw=)
                          3: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: //cSiHt/Mv+cf69N4W04BTuMC8Y6OULcpx70wUWeH3Y=)
                          4: MHoiiXnuGIuqxA752FuN8R9jVPM.roa (hash: SzNrSEjkkP0W8NbngEMXpCh2YtsU8XXfcwLlB39QSQw=)
                          5: QV1p24N--8uDMSfs42M3rD2K2po.roa (hash: Pu65mKKOVTKLMmUsLxQRkkjMG01PHkculnluA94snlA=)
                          6: QvycziUKMaWmYcEcRlMRlyPIZ0c.asa (hash: eRgM+CVbasQuEI1gHcfMnMWm39ev44mOjVcKTPnT5y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:4a:2a:97:fa:0d:23:70:8d:7d:06:4a:ca:d2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
        Validity
            Not Before: Nov 15 08:00:58 2026 GMT
            Not After : Nov 16 08:00:58 2026 GMT
        Subject: CN=8277f0efde8d957598b185695ede6b5470af36c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:27:f7:e1:99:a7:df:cb:be:f3:69:7c:38:
                    42:ad:41:2f:5b:a7:29:74:bf:79:a2:c2:76:dd:64:
                    5a:b8:07:8d:be:45:71:8f:9d:00:b0:64:97:73:6f:
                    85:1f:45:cb:85:f5:59:7e:61:95:64:b5:21:a8:95:
                    70:43:7e:61:4b:6c:73:1d:65:07:23:74:00:d5:ce:
                    c6:f2:0f:5b:8d:10:ce:28:1f:91:15:43:66:8f:f5:
                    1e:79:d8:db:02:4a:9b:50:c4:98:f0:22:d0:58:fa:
                    45:36:c8:11:09:98:09:9f:cc:44:c1:05:5c:41:31:
                    fb:54:22:9f:d1:4f:f4:c8:23:36:eb:8a:db:df:2e:
                    e2:be:b3:db:3b:2f:2b:d9:af:1d:4b:54:39:f9:6e:
                    78:2f:5b:c6:92:3c:40:b7:01:ac:74:7e:f4:98:3e:
                    78:d4:5e:fb:07:8b:0f:5b:22:1a:57:ad:88:50:71:
                    3c:e3:6a:97:6e:12:de:9f:13:fb:fa:21:f6:eb:e4:
                    20:60:0e:d4:e1:1f:14:c4:2d:90:85:02:c7:07:1f:
                    91:f3:de:f3:fd:67:02:fe:66:a7:5a:18:11:ff:22:
                    06:2b:c7:ef:71:dd:d6:a0:26:50:03:c5:e2:6f:1f:
                    f4:64:1a:93:a9:ca:d2:e1:f6:18:d3:bc:bd:d7:ea:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:77:F0:EF:DE:8D:95:75:98:B1:85:69:5E:DE:6B:54:70:AF:36:C6
            X509v3 Authority Key Identifier:
                keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:b8:4b:45:5f:f3:a6:9e:af:e5:be:b7:40:1e:6d:5b:bb:
         21:a5:8a:24:6e:6b:99:97:0a:6b:7b:5b:ca:81:26:38:c7:06:
         2d:91:07:0f:40:01:64:f0:ea:25:d7:55:b2:ab:bf:a1:4f:74:
         b3:62:b8:fe:60:df:ae:6c:52:f1:2c:cf:62:d2:1a:55:b5:62:
         a9:19:a5:02:bd:19:68:32:5b:be:80:de:7b:ae:f6:2b:b7:44:
         97:98:1f:39:ad:db:9f:f8:d2:0b:2c:9d:b0:d5:2e:c9:44:bc:
         9e:d7:20:12:9f:22:ac:10:12:cf:cb:29:6f:d6:f9:4b:19:d7:
         08:ed:fa:b5:40:c7:50:f8:46:e6:da:e3:8c:42:d8:47:57:cc:
         f4:72:0e:0e:5a:c6:21:d8:82:f0:ce:d2:bb:84:21:61:f4:10:
         21:df:79:98:1a:11:e4:53:7a:3b:f8:f8:61:cb:df:4e:06:5e:
         df:dc:48:27:88:d3:16:a9:7a:a8:bb:30:cd:46:a8:39:11:6f:
         81:39:59:21:de:e4:b4:7e:b4:28:92:35:b3:0a:d3:2f:00:64:
         2b:86:a3:21:a7:a1:67:b5:5a:99:b6:5b:ee:85:fb:cb:f5:0a:
         88:57:24:58:81:55:3c:5b:b5:ca:fd:0d:10:cf:88:87:78:17:
         05:c7:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:41:10 2026 by rpki-client