Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File:                     1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier:          kzC2A3O7zXrExoyz7s5FylNFAq+YxWSsJnDbrG+goGA=
Subject key identifier:   6A:6C:B7:3F:6B:9B:66:C5:E3:1E:FF:82:6E:56:C9:B0:F2:60:98:72
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer:       /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial:       01A0D9BB1535B4D1EEFB6314EF7AFEC3493A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number:          1826
Signing time:             Fri 25 Sep 2026 18:01:51 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:51 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:51 +0000
Files and hashes:         1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: KDnAPTJ757iu9Sr89riIOcphlu36xM+uaoX8eD8qaRo=)
                          2: En5Rx9q0qO7unPONCeYGr0E8Ypo.roa (hash: m4mIVNNksRXGC54BCyZfvQgPVP3myy6JZj2rGnHsmaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:15:35:b4:d1:ee:fb:63:14:ef:7a:fe:c3:49:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
        Validity
            Not Before: Sep 25 18:01:51 2026 GMT
            Not After : Sep 26 18:01:51 2026 GMT
        Subject: CN=6a6cb73f6b9b66c5e31eff826e56c9b0f2609872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:97:27:c6:6c:6d:78:98:a4:94:97:3e:ad:
                    2d:2c:a9:17:1b:7f:56:38:59:f2:95:81:dc:db:83:
                    51:f9:55:97:3d:d1:13:d9:bc:3f:36:4c:89:1c:ab:
                    6e:09:08:9a:14:ea:72:b8:3a:51:ae:af:29:0e:92:
                    a6:b7:9d:34:a1:69:70:1e:af:51:57:42:07:5e:d9:
                    4e:f6:37:8e:b8:02:e7:11:4f:4f:bc:bb:4c:ba:19:
                    97:a1:92:04:7f:ad:c9:ba:4c:2c:fa:46:ea:51:c5:
                    08:59:cb:c5:ea:69:6a:94:1c:a8:e0:07:27:ce:e8:
                    83:0a:67:cc:3a:14:81:54:39:dc:5b:00:7a:e7:d4:
                    32:d8:a4:ef:bb:94:41:8f:b1:62:b2:d1:8a:47:67:
                    d5:61:44:8f:80:2a:46:c5:0f:a7:5d:07:ac:f0:1f:
                    1f:db:ae:f5:b2:e9:93:e9:8f:c9:11:73:27:bb:e7:
                    33:51:88:59:39:48:1d:d2:b6:63:22:2a:d6:d0:65:
                    1d:56:ee:1a:34:77:57:c6:1c:0a:da:6b:e9:e4:95:
                    22:d5:62:5b:b6:fb:b1:b0:ac:ef:d1:ac:cc:a9:98:
                    91:17:07:f0:c1:61:ef:e6:d6:52:c2:1e:ed:43:9d:
                    81:12:d0:04:67:69:02:24:77:ff:33:60:43:89:9c:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6C:B7:3F:6B:9B:66:C5:E3:1E:FF:82:6E:56:C9:B0:F2:60:98:72
            X509v3 Authority Key Identifier:
                keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:c6:ff:14:74:bf:a4:58:dc:bf:5c:4b:ce:e4:95:d4:15:
         da:8c:15:16:a8:1e:10:56:3e:93:10:bc:75:63:bf:4c:8d:25:
         3a:d5:31:96:72:db:37:f6:0e:f1:76:40:d6:1d:75:6d:7a:70:
         0a:d3:3f:b8:0e:78:8c:a7:1f:b6:b2:1a:c5:eb:03:07:84:ee:
         ee:c0:74:b4:14:69:7b:d8:77:ab:8a:19:80:83:bf:45:34:c8:
         6a:4b:7d:3e:d6:18:80:66:09:1a:f4:f1:4b:80:07:db:ab:34:
         97:c8:c5:f5:eb:4b:8c:77:6b:17:31:10:ab:d8:8a:04:cd:bc:
         a9:33:ce:22:58:67:61:80:cc:44:4a:3b:f8:f0:d7:b4:86:65:
         1f:3f:9b:64:ef:81:d5:f1:2e:50:da:ea:17:0e:12:af:d7:9c:
         9b:67:ee:04:b9:51:51:a1:54:f9:0a:3c:2b:65:54:f2:b8:50:
         74:ca:c1:3b:1a:d6:68:0b:ea:f8:86:38:d3:64:20:f2:d7:12:
         57:53:5c:08:f0:b1:e7:0a:4c:95:8c:56:5b:24:7e:eb:80:00:
         c7:3d:39:28:44:1a:af:de:d0:62:a0:05:a7:35:c1:f7:29:e6:
         b6:ad:a5:d4:e3:c9:58:21:13:c1:6d:0d:20:b6:55:9b:db:4f:
         bf:15:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:21:49 2026 by rpki-client