Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          FF/CcDYDHIIio1d2MR2pSwSEPb5uH+J2b5p/clrC/2o=
Subject key identifier:   51:69:CC:1E:DB:54:7B:3E:A8:B2:7D:5D:4D:EB:DB:FD:C8:E9:37:CF
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       01A0D15BEECAE29691D05956F5177A502CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 03:00:58 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:58 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:58 +0000
Files and hashes:         1: 3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa (hash: iEhzHIRnRxzpQUWkwXpH8+wLuqzBi2WgNixBv2cWr5c=)
                          2: 4dtT2zpOkX0M7815CYFyhrrEj7w.roa (hash: pUvuTTzJiPGDI0tk56sxaLiwIp0+DLwoX1SaGdq6b1Q=)
                          3: DPEXaJsdpwunEHWISAhP8hFXOUI.roa (hash: +8xOQY/MLqFDz3F9RapHgwM88JkcxWRhi/gr4+Z5Fes=)
                          4: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: 5C9SPS92lnVJ/jxOHBOvehaDY0Ud523WQyjqqlc4T5M=)
                          5: nJNnJik0D06rHfwp0JH-RW1i8d4.roa (hash: PZkJCh1a5eNPEm8fstSBrrfjyNUedpDjFwbI97jj8c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:ee:ca:e2:96:91:d0:59:56:f5:17:7a:50:2c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Sep 24 03:00:58 2026 GMT
            Not After : Sep 25 03:00:58 2026 GMT
        Subject: CN=5169cc1edb547b3ea8b27d5d4debdbfdc8e937cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:82:61:23:a9:a6:86:8e:59:cb:14:0a:de:
                    ff:af:34:41:42:59:56:43:e9:17:fe:d6:6d:42:3a:
                    86:ee:92:0b:71:d0:3d:7c:e2:9e:16:25:fa:ba:dc:
                    af:3d:43:68:60:ac:45:74:8f:3b:5d:d0:58:22:e5:
                    32:96:04:fb:51:f9:3a:03:df:38:23:2a:60:41:64:
                    ed:1a:3c:36:56:d9:8e:ab:f9:b4:70:22:e9:f5:8a:
                    72:cf:69:a4:c4:92:02:9e:95:1d:a4:12:45:99:c3:
                    2d:31:a5:20:d5:bf:26:fd:06:2b:35:b9:5d:2d:76:
                    af:3d:7a:9f:ec:9e:18:93:cd:ee:80:21:65:89:37:
                    8b:86:e6:6b:7c:fa:35:82:3b:71:e4:ff:10:da:62:
                    4c:bb:65:ab:8f:f9:17:41:1a:69:30:66:02:6e:42:
                    2c:28:88:2a:b7:c4:a1:d4:85:b2:51:0e:79:9c:50:
                    75:0b:a7:6d:a9:84:e7:6a:c5:5a:4a:d4:d1:3b:af:
                    85:61:f8:8e:2f:fc:f2:5c:15:0d:b9:43:5d:7c:9b:
                    27:8c:45:3f:1a:26:b0:41:aa:87:43:38:d5:c1:89:
                    17:1c:42:9f:a3:09:ba:11:6a:42:c6:b9:a7:60:57:
                    f2:8f:98:96:8f:bb:64:58:47:8c:32:17:d1:f0:36:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:69:CC:1E:DB:54:7B:3E:A8:B2:7D:5D:4D:EB:DB:FD:C8:E9:37:CF
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:26:63:09:78:cc:a1:61:89:a3:46:39:7c:22:ec:70:ac:55:
         b4:63:e7:f3:14:2f:06:fa:3a:bb:52:63:d4:65:18:aa:bb:2f:
         2b:a3:d1:a4:35:a4:01:1c:c3:30:ae:82:3e:bd:2f:14:ff:a3:
         22:47:c3:77:a3:5a:43:16:69:3c:ba:3d:4a:30:c6:c9:25:fd:
         36:08:3d:dd:93:e9:f8:99:a1:24:4f:6f:54:22:8f:cd:7f:4b:
         2a:b3:20:25:d2:33:fc:32:ca:0d:63:cc:03:c9:72:2e:15:23:
         fd:34:b0:0d:bc:b4:98:ed:0c:99:32:5f:d4:7c:37:fe:49:c2:
         10:78:ca:7c:b4:91:e7:40:46:5d:2d:52:6c:fa:20:a4:53:f4:
         2d:ac:c7:e1:3c:fd:50:d2:a8:47:c4:da:50:e5:bb:29:d0:5c:
         bd:a2:95:a1:99:d7:7b:64:76:66:06:f2:fa:d0:af:9a:9e:41:
         07:48:e2:eb:a6:47:20:5c:1f:6a:93:7a:35:49:26:32:ff:21:
         62:56:97:8a:b2:04:95:d4:42:46:d5:92:d6:fb:95:6a:6b:30:
         6a:9a:dd:40:c6:c9:40:2b:6c:7a:95:2f:3f:88:21:19:55:20:
         87:9c:4d:35:ce:8e:ef:46:d1:bf:d5:40:f7:35:42:b6:1c:51:
         3d:72:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:22:06 2026 by rpki-client