Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File:                     HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier:          RHW6uPtfmoytDIqDaIGBXPsydtMMcYOlZqdZAfXeKi8=
Subject key identifier:   87:90:6B:D3:CF:FF:BB:89:0C:BE:C5:EC:6B:3A:E0:13:F4:C3:7C:81
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer:       /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial:       01A0D42702D14D611E64DFE5E868FD5B1AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number:          04EF
Signing time:             Thu 24 Sep 2026 16:02:01 +0000
Manifest this update:     Thu 24 Sep 2026 16:02:01 +0000
Manifest next update:     Fri 25 Sep 2026 16:02:01 +0000
Files and hashes:         1: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: jrgBe5QuoR9UEZkN/7EMRurDnk/LlRPfW6TCFZUpwwE=)
                          2: KWrdKwj-aGY8MOfcLeQBvHUUMrM.asa (hash: 93izR3AJpKCj0JffNnplF5XSeltS5qXXfEr4WnEs8yw=)
                          3: MHoiiXnuGIuqxA752FuN8R9jVPM.roa (hash: SzNrSEjkkP0W8NbngEMXpCh2YtsU8XXfcwLlB39QSQw=)
                          4: RPryQDZ4ZBeKQbSSotriTPcBcyA.roa (hash: rf8GUTexO88mnsz47ToEecGRV8VhfCUV4jLIH6Tsuu8=)
                          5: Tfu-iHC5BstpfhPolGNfbxse7fg.asa (hash: YEZ17YdmoGtQ82f52dQj0LGU10zUa6Zk7/Q1gmzCL9U=)
                          6: pwG_-p96WEJCkBCjvw8vR6C4NJk.roa (hash: ReJzrM9LBiTAk6u/wPTtG7YxGNkyrsPS+099hU3DXtU=)
                          7: tDt_5ODn1mHTv_pdIXON-4IDz5o.roa (hash: 3vFxhzJK3v5qRq/kbdS50Ors6bxCI1f7dkj6bYPlujQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:27:02:d1:4d:61:1e:64:df:e5:e8:68:fd:5b:1a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
        Validity
            Not Before: Sep 24 16:02:01 2026 GMT
            Not After : Sep 25 16:02:01 2026 GMT
        Subject: CN=87906bd3cfffbb890cbec5ec6b3ae013f4c37c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:4a:95:08:54:fd:8c:c6:ed:73:9f:5c:f9:
                    31:63:d2:a2:3c:86:58:61:c2:2b:c1:8e:64:46:1c:
                    c1:05:45:3f:ff:65:0e:1d:f8:c4:96:f8:6e:91:67:
                    35:9c:b5:da:97:d3:2f:40:b7:82:11:7d:02:00:4c:
                    d0:a5:62:1b:09:10:7f:c8:52:e2:d8:a1:c8:7a:e5:
                    73:4d:57:3f:17:cd:68:35:35:dc:a2:e2:9a:9d:14:
                    c0:8d:cf:5b:c8:8d:ed:32:d5:65:33:9f:3a:6d:0f:
                    83:78:42:5d:86:d5:f3:07:31:11:57:8a:2c:f8:d3:
                    15:51:cc:9b:c6:02:1c:3e:c2:4c:19:8d:7b:23:2f:
                    93:15:b1:cf:c8:8a:23:9d:1d:b4:bb:93:42:ea:b1:
                    fe:39:e2:bb:c8:cd:7e:c6:1a:a2:01:43:32:35:0e:
                    96:16:aa:6c:02:71:9d:98:0a:2e:f4:4a:85:db:bc:
                    22:f0:bb:c6:28:93:a8:4f:b8:c0:78:b0:4e:bb:56:
                    8b:f7:e6:eb:1f:56:fb:ce:c4:c4:cb:5c:d1:1e:69:
                    e4:bd:db:e1:75:eb:c5:e7:14:56:29:cb:4c:4c:05:
                    fb:38:ab:05:8f:cb:9e:e5:6d:f4:0a:2d:f6:62:f6:
                    fa:66:03:e8:59:50:c4:81:01:6c:70:a7:46:8d:ab:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:90:6B:D3:CF:FF:BB:89:0C:BE:C5:EC:6B:3A:E0:13:F4:C3:7C:81
            X509v3 Authority Key Identifier:
                keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:00:41:0f:e9:a0:6a:66:b0:77:95:a4:9b:a7:b0:2b:d2:92:
         ad:ae:bd:66:dc:61:56:fb:15:84:77:45:1f:b2:d5:4d:db:dd:
         36:0a:ae:52:67:42:2f:d1:d9:71:fc:51:9f:3e:71:78:c7:89:
         84:bb:a5:d3:db:7b:0f:c1:a8:c1:80:b7:a2:7b:ba:35:20:58:
         14:b6:0d:30:71:94:80:a5:e1:af:09:fc:22:fd:52:8f:61:d2:
         57:37:7e:89:42:00:25:7a:0a:a0:c8:d1:c4:b6:a3:8f:fb:2c:
         f9:e3:58:2a:4a:a6:b6:ad:61:d4:15:f3:7c:bd:83:5e:d8:29:
         dd:68:1d:6d:d4:6c:0e:49:34:a1:2b:5a:76:e6:0f:66:1b:9f:
         d8:47:58:75:cf:5f:0d:f2:75:6f:54:4c:01:a3:59:f1:1f:2d:
         69:95:84:2f:75:b3:32:fe:c8:03:48:2e:57:09:ff:a2:8e:90:
         1a:5b:c2:d3:f1:28:ea:fc:52:e7:59:a2:52:1c:c4:ec:c4:a8:
         1b:89:db:8c:f2:f1:89:32:ad:1a:0e:41:31:82:28:71:9e:76:
         c8:33:63:30:23:d0:c2:dd:2d:2e:c9:1c:97:72:d7:8a:cd:f0:
         97:7e:3b:3e:4b:57:ad:f9:22:16:ac:fc:97:0c:5a:02:a2:3b:
         b5:f4:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:02:52 2026 by rpki-client