Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File:                     HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier:          XUZ/daicpTissReGimjPupP6+CGxkdYr8tFTLHPxvRM=
Subject key identifier:   A6:A4:63:DE:E3:77:21:C5:FA:C7:BE:9E:CE:75:41:6E:51:FD:2E:43
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer:       /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial:       01A0D04935F25B01E9FB544320A377DE73F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number:          04ED
Signing time:             Wed 23 Sep 2026 22:00:53 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:53 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:53 +0000
Files and hashes:         1: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: ASb2tyxszm3wu1+KWKrmSsP79n96yOgAGu3M+yHkvTU=)
                          2: KWrdKwj-aGY8MOfcLeQBvHUUMrM.asa (hash: 93izR3AJpKCj0JffNnplF5XSeltS5qXXfEr4WnEs8yw=)
                          3: MHoiiXnuGIuqxA752FuN8R9jVPM.roa (hash: SzNrSEjkkP0W8NbngEMXpCh2YtsU8XXfcwLlB39QSQw=)
                          4: RPryQDZ4ZBeKQbSSotriTPcBcyA.roa (hash: rf8GUTexO88mnsz47ToEecGRV8VhfCUV4jLIH6Tsuu8=)
                          5: Tfu-iHC5BstpfhPolGNfbxse7fg.asa (hash: YEZ17YdmoGtQ82f52dQj0LGU10zUa6Zk7/Q1gmzCL9U=)
                          6: pwG_-p96WEJCkBCjvw8vR6C4NJk.roa (hash: ReJzrM9LBiTAk6u/wPTtG7YxGNkyrsPS+099hU3DXtU=)
                          7: tDt_5ODn1mHTv_pdIXON-4IDz5o.roa (hash: 3vFxhzJK3v5qRq/kbdS50Ors6bxCI1f7dkj6bYPlujQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:49:35:f2:5b:01:e9:fb:54:43:20:a3:77:de:73:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
        Validity
            Not Before: Sep 23 22:00:53 2026 GMT
            Not After : Sep 24 22:00:53 2026 GMT
        Subject: CN=a6a463dee37721c5fac7be9ece75416e51fd2e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:26:71:af:fd:5c:c8:11:6f:5a:1d:b8:81:
                    16:13:72:8d:71:89:61:bb:eb:3e:4f:aa:42:2b:ec:
                    de:34:c3:cd:76:4c:13:f5:3e:08:16:dc:5e:54:96:
                    32:0f:3f:1c:72:6a:61:6c:96:d8:a7:61:6e:66:9e:
                    f5:c1:75:cb:2e:b6:fa:c9:b2:a6:63:5c:51:f2:d4:
                    60:43:6a:4c:ab:50:51:79:f8:cf:99:21:d9:6b:6c:
                    c2:81:59:47:d9:12:2e:81:bc:46:7f:91:45:a1:dd:
                    57:ef:1b:d5:f0:cb:82:eb:f6:d6:b1:95:86:62:ee:
                    9e:84:81:9e:06:bf:2d:fe:2c:a2:de:d2:f9:da:1f:
                    e2:9a:18:ff:9b:3c:fe:22:21:01:c3:71:6f:5d:1c:
                    73:57:03:8a:70:e7:fd:3d:2c:8c:b3:d1:ec:a7:de:
                    10:70:d5:b2:0f:0f:7f:42:fa:fe:db:d7:60:fe:e5:
                    dd:94:f5:75:dc:ae:18:2c:aa:4a:59:a7:0f:79:71:
                    88:be:5e:df:c1:2a:95:80:bc:77:c9:69:62:62:bd:
                    97:9c:b4:2f:ae:26:66:9a:91:5a:d6:e1:23:b0:59:
                    01:aa:ae:c6:5b:a9:8c:50:41:d5:c1:61:76:3a:b1:
                    76:fd:42:2e:ee:06:ab:75:f8:cd:eb:c4:45:30:33:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A4:63:DE:E3:77:21:C5:FA:C7:BE:9E:CE:75:41:6E:51:FD:2E:43
            X509v3 Authority Key Identifier:
                keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:00:a7:86:d7:d0:2a:76:fd:b5:d4:25:63:43:a3:cd:69:
         97:98:cf:95:35:fe:a6:3b:de:05:8d:af:8e:de:f3:91:23:e9:
         3e:5d:80:67:c3:2c:bc:93:31:fe:c7:ef:b7:d6:38:ed:1a:6b:
         d1:d2:0a:d2:f3:b8:8c:f2:64:87:cf:6b:23:db:2f:c7:84:15:
         49:92:e5:fa:8a:cb:39:52:fa:ff:f5:2c:7c:d4:b7:a5:ce:ef:
         ed:73:ea:75:02:3d:73:d7:8b:33:11:96:99:6f:71:54:dc:57:
         d3:b7:af:f0:ae:cf:17:0b:e6:32:95:95:ef:fd:bf:d6:7d:db:
         76:58:97:58:9f:c9:b7:e6:37:dc:ee:56:0d:82:1d:21:84:c6:
         e9:44:5b:7f:c1:90:2f:4f:26:27:b1:43:06:be:78:ca:82:55:
         2f:1c:82:e1:85:52:b6:f5:f9:fd:7d:b3:7a:f9:5f:d1:fc:d2:
         4c:ef:fa:66:99:e2:66:85:3d:55:fd:9e:ff:0c:ff:94:ca:98:
         c6:af:56:19:fd:fd:e1:e4:d6:07:c7:35:50:9f:29:0e:da:a8:
         bf:b0:37:e1:63:4e:ed:0b:50:47:9b:22:bc:b3:63:16:15:1e:
         7d:c2:95:d9:bd:17:db:08:75:ee:c5:b8:49:c7:57:ac:10:c9:
         fc:46:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:33 2026 by rpki-client