Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File:                     HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier:          8oaDn1/8Moo+URfwxmXHidkyFNJt5GaWn+pU5+EYYc0=
Subject key identifier:   C1:69:D4:D6:CA:5D:00:57:4B:8B:19:0C:1E:02:63:90:1C:EC:43:54
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer:       /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial:       01A0D3F0ADD8A144A1057F5868A019D9B0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number:          1A00
Signing time:             Thu 24 Sep 2026 15:02:40 +0000
Manifest this update:     Thu 24 Sep 2026 15:02:40 +0000
Manifest next update:     Fri 25 Sep 2026 15:02:40 +0000
Files and hashes:         1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: Q+5Xk8D+XZtyFfzf4H1uOHVGGLLAAAAC0j+V9A/B+2M=)
                          2: LtF7nKZF5Eu_SugtCNfVkUGiFHM.roa (hash: DT5yTfPTZI2KTOuvzB4Bd0By5xLBRBjLmkPSrqIV9B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:f0:ad:d8:a1:44:a1:05:7f:58:68:a0:19:d9:b0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
        Validity
            Not Before: Sep 24 15:02:40 2026 GMT
            Not After : Sep 25 15:02:40 2026 GMT
        Subject: CN=c169d4d6ca5d00574b8b190c1e0263901cec4354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:05:26:4f:fb:a6:2d:66:0c:2f:8f:d0:e1:
                    03:f9:3c:34:cd:ec:eb:a3:0b:85:89:80:72:fe:76:
                    93:c3:ff:ec:64:de:04:69:bf:3d:b2:d0:db:8f:b9:
                    d9:57:8a:53:95:0f:76:6c:2f:37:71:d2:0c:84:e0:
                    57:74:21:5d:cf:37:89:72:12:4a:c9:7d:1f:32:69:
                    df:21:f8:ab:08:65:21:f9:9e:eb:72:48:d1:26:6c:
                    ac:72:8f:ed:6b:fb:b6:0c:d1:7b:27:c3:98:e5:c7:
                    97:3f:e7:6d:ed:fd:55:13:43:d7:54:1c:9e:19:b5:
                    c8:ac:4c:8a:8b:3f:b5:e0:6b:1e:ed:75:39:46:39:
                    0e:7d:4f:52:68:94:6a:df:39:97:f7:ae:3c:33:3b:
                    05:1e:41:89:d1:cc:00:59:60:63:2c:e3:4b:d5:06:
                    61:bf:cb:5c:af:1e:5e:a6:63:c0:1b:4a:b1:34:21:
                    ce:f7:84:5f:d5:46:8a:04:be:d2:6c:4d:34:c4:97:
                    1b:cd:27:1c:e2:10:7d:e8:e6:74:51:e7:29:5e:90:
                    c0:47:ce:8d:e3:a7:8f:a0:2b:83:af:13:5d:f5:64:
                    4a:19:f4:38:f4:90:f9:74:75:68:01:cb:c9:66:47:
                    f9:6e:3e:79:cc:9f:76:b6:94:f4:6e:e3:22:fb:67:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:69:D4:D6:CA:5D:00:57:4B:8B:19:0C:1E:02:63:90:1C:EC:43:54
            X509v3 Authority Key Identifier:
                keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:66:77:fe:f3:e3:60:ac:b8:24:b3:02:44:44:0d:07:89:7e:
         2b:e1:a1:2f:ce:8e:79:9f:6b:4f:35:70:f5:f4:3c:53:40:9c:
         e9:9f:50:69:31:bb:50:f3:56:fd:5f:c7:6c:4b:ac:7a:f1:1e:
         1f:06:1f:f6:fa:7c:b9:db:cf:d0:4a:99:f2:12:34:22:8e:43:
         79:0d:99:73:19:13:16:99:36:f3:4a:bd:01:6f:a5:ad:f4:e9:
         f0:bd:ce:73:f2:e4:31:50:c8:cf:97:c0:a9:05:53:54:1c:11:
         0c:e8:a4:f2:2f:6b:6d:cf:72:1d:77:6a:b6:2f:98:fa:bc:2f:
         19:e5:20:5c:54:87:04:03:46:73:da:f2:83:ae:63:e8:e8:98:
         82:0b:24:10:55:ad:4f:2c:13:c1:ed:eb:7e:7d:f2:f6:ad:c8:
         10:f7:bf:92:19:6c:11:bd:66:18:89:13:3d:b5:e9:8c:c6:8a:
         29:8e:53:0c:fc:b6:55:a0:83:f6:2e:43:d1:01:4e:ab:f0:d4:
         54:bc:49:b9:b0:2d:7d:13:36:b6:43:4f:e7:dc:78:68:cd:73:
         7a:21:f3:71:d2:b6:68:2a:8c:80:8f:ec:c6:8c:90:f4:3e:4f:
         67:24:45:c6:f5:60:01:67:5b:60:42:fd:bc:6e:c7:04:44:7c:
         0a:7d:9d:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8K3YoUShBX9YaKAZ2bDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOTAzNDRkY2FmZmJkMzNlNjhkODQ4OTVkODdkOGFiZjUz
Yzc0YTMwHhcNMjYwOTI0MTUwMjQwWhcNMjYwOTI1MTUwMjQwWjAzMTEwLwYDVQQD
EyhjMTY5ZDRkNmNhNWQwMDU3NGI4YjE5MGMxZTAyNjM5MDFjZWM0MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB8FJk/7pi1mDC+P0OED+Tw0zezr
owuFiYBy/naTw//sZN4Eab89stDbj7nZV4pTlQ92bC83cdIMhOBXdCFdzzeJchJK
yX0fMmnfIfirCGUh+Z7rckjRJmysco/ta/u2DNF7J8OY5ceXP+dt7f1VE0PXVBye
GbXIrEyKiz+14Gse7XU5RjkOfU9SaJRq3zmX9648MzsFHkGJ0cwAWWBjLONL1QZh
v8tcrx5epmPAG0qxNCHO94Rf1UaKBL7SbE00xJcbzScc4hB96OZ0UecpXpDAR86N
46ePoCuDrxNd9WRKGfQ49JD5dHVoAcvJZkf5bj55zJ92tpT0buMi+2eWyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFp1NbKXQBXS4sZDB4CY5Ac7ENUMB8GA1UdIwQY
MBaAFB2QNE3K/70z5o2EiV2H2Kv1PHSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYt
ZTUwNjRkYjIxYjIwLzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYtZTUwNjRkYjIxYjIw
LzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2Z3/vPj
YKy4JLMCREQNB4l+K+GhL86OeZ9rTzVw9fQ8U0Cc6Z9QaTG7UPNW/V/HbEusevEe
HwYf9vp8udvP0EqZ8hI0Io5DeQ2ZcxkTFpk280q9AW+lrfTp8L3Oc/LkMVDIz5fA
qQVTVBwRDOik8i9rbc9yHXdqti+Y+rwvGeUgXFSHBANGc9ryg65j6OiYggskEFWt
TywTwe3rfn3y9q3IEPe/khlsEb1mGIkTPbXpjMaKKY5TDPy2VaCD9i5D0QFOq/DU
VLxJubAtfRM2tkNP59x4aM1zeiHzcdK2aCqMgI/sxoyQ9D5PZyRFxvVgAWdbYEL9
vG7HBER8Cn2dNg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:09:09 2026 by rpki-client