Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File:                     HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier:          bQH4rPtbALLxJm0DmgSKkH62dehsRJ9wYKZQ12dao0M=
Subject key identifier:   BB:BF:52:3F:B7:75:F9:05:97:A5:D8:48:5A:7E:29:46:C2:09:31:55
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer:       /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial:       01A0F7FC38A792DF1880BE1D33F7668B79E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number:          06CB
Signing time:             Thu 01 Oct 2026 15:01:36 +0000
Manifest this update:     Thu 01 Oct 2026 15:01:36 +0000
Manifest next update:     Fri 02 Oct 2026 15:01:36 +0000
Files and hashes:         1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: vCNNsdgcfxl+yYPnJo7Gky//ZoDHmaPeIlIekKb07JI=)
                          2: WU3PqHe7IArJ57SO8_-72jZ4vgQ.roa (hash: kyYbbInYeN/I+hJfjzPW449FfnhjaOMYgCQZcySE4CI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:fc:38:a7:92:df:18:80:be:1d:33:f7:66:8b:79:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
        Validity
            Not Before: Oct  1 15:01:36 2026 GMT
            Not After : Oct  2 15:01:36 2026 GMT
        Subject: CN=bbbf523fb775f90597a5d8485a7e2946c2093155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:58:21:9c:cd:30:5c:d9:b5:75:48:83:96:
                    5e:57:16:c2:8e:3d:5c:0a:c8:b1:37:13:48:4c:cd:
                    36:d8:aa:26:92:09:df:be:f7:a5:81:90:da:8d:b8:
                    ff:39:00:af:81:d3:4b:f3:e6:1e:1e:4c:10:9e:b5:
                    2f:65:a1:52:79:c9:6b:96:ca:00:ca:3c:47:bd:e5:
                    27:49:96:99:6e:9d:2f:39:6d:7e:8d:c4:83:a2:da:
                    8c:7b:1b:d9:e0:51:81:7a:f8:1d:1c:b8:73:e1:a8:
                    75:e4:13:cf:e3:61:21:83:e7:b0:3a:8e:80:3d:eb:
                    78:95:b8:dc:4a:3e:e4:57:e9:74:5d:18:63:fe:12:
                    cb:d7:37:1d:9f:65:75:e7:eb:41:b4:cf:f6:1d:ec:
                    c0:e3:f0:b7:08:f1:ae:51:8e:f3:98:90:3d:fb:83:
                    2d:13:1d:92:31:b2:1e:0f:87:d4:80:03:5e:4a:ab:
                    86:48:79:4e:f4:f0:b7:cf:bd:66:82:93:bc:e3:b1:
                    e1:8b:1f:16:82:b9:e5:9f:66:85:d6:3c:d7:6d:20:
                    38:3a:cb:90:96:18:a4:de:ac:1a:b5:a2:6d:f0:9e:
                    a0:4d:ef:17:15:7e:8a:a3:5f:39:ef:e1:b5:ab:03:
                    16:8f:16:b4:10:4d:5d:bf:dd:3e:5a:42:ba:ba:4d:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BF:52:3F:B7:75:F9:05:97:A5:D8:48:5A:7E:29:46:C2:09:31:55
            X509v3 Authority Key Identifier:
                keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bf:da:0e:57:83:3d:de:88:1a:2c:7d:f0:8e:7f:83:15:85:
         8b:32:04:64:49:0b:aa:db:fc:44:1e:16:fd:d9:a3:3e:da:b1:
         b2:12:b1:49:6e:5b:f4:5c:87:bf:9a:8c:d2:fe:3d:d6:ab:cc:
         00:a2:bd:5a:c9:85:39:b4:9b:bc:93:47:35:5e:f7:fa:24:3b:
         22:43:10:b5:dd:a0:34:f8:80:5a:ed:ed:09:e0:91:b4:54:74:
         f9:de:fb:a7:37:45:1b:ee:c7:96:f9:d5:9e:76:98:b5:e9:69:
         d2:ea:b9:5a:9d:f1:b6:ac:62:e5:73:46:2b:65:e1:a1:85:16:
         b0:dd:96:ed:20:48:e5:cc:fa:81:a7:6a:16:60:44:01:23:cd:
         ab:75:10:94:9e:20:02:2b:8b:41:ec:82:5f:9f:eb:7b:2b:64:
         28:68:77:36:5a:32:01:ec:2d:c8:0a:ad:bb:65:89:86:8e:a5:
         4b:23:0c:27:ad:2a:ef:e1:74:57:03:9a:ee:0c:21:79:63:9d:
         d5:05:0b:d7:74:2c:74:cd:7e:40:b4:b5:bd:2f:91:a8:e9:71:
         f6:59:ec:9d:87:88:e8:2e:a2:97:12:c2:02:72:5f:f9:69:3d:
         d6:43:e5:65:15:65:30:ed:d4:bd:c5:ad:f4:e6:fa:56:b4:0b:
         68:51:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 00:48:01 2026 by rpki-client