Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File:                     hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier:          TNC5MICet6aQQziP7Jvv6kTOBB1ptCAoUbz6ObPO85A=
Subject key identifier:   5D:05:FC:57:CF:83:78:82:74:47:DB:20:99:0E:0F:AC:E3:FF:8B:ED
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer:       /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial:       01A129C3D84361340994338BFDA064AE0D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number:          1A9B
Signing time:             Sun 11 Oct 2026 07:01:02 +0000
Manifest this update:     Sun 11 Oct 2026 07:01:02 +0000
Manifest next update:     Mon 12 Oct 2026 07:01:02 +0000
Files and hashes:         1: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: 8pLB6Sn8y/COkehbiIAVy+NBsxlvWVOpDGSdvEO8pl8=)
                          2: lGyQDQVBEMCDFsipbxjBTxxJg7Y.roa (hash: /B4wk8kwo/lxwB8Izsd2oZk4yH80dIbNot8H0bXk6bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:c3:d8:43:61:34:09:94:33:8b:fd:a0:64:ae:0d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
        Validity
            Not Before: Oct 11 07:01:02 2026 GMT
            Not After : Oct 12 07:01:02 2026 GMT
        Subject: CN=5d05fc57cf8378827447db20990e0face3ff8bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0a:c0:02:af:41:56:80:d1:85:32:b1:c5:06:
                    18:a5:21:ba:f7:81:bc:5a:5e:e3:dd:55:ce:9b:7a:
                    50:fc:27:a9:be:8a:24:8c:5f:40:c7:83:40:80:22:
                    75:c1:09:b8:a0:e0:6b:13:6d:80:f1:e1:3e:1d:1a:
                    2d:cd:1c:eb:94:b9:6a:1f:9a:e0:62:b7:93:80:3b:
                    e1:e4:55:ef:7b:07:98:ec:65:07:b8:52:ba:55:fc:
                    3a:89:d6:db:e3:85:86:9f:7a:fc:96:11:72:23:58:
                    39:3f:e0:cc:cb:ed:a3:41:11:cc:25:99:b9:29:74:
                    ea:2d:14:79:71:39:70:18:29:6f:2c:e7:18:06:b0:
                    35:74:35:84:ea:6b:79:d9:ba:40:43:cb:82:fd:bc:
                    52:4b:c3:a7:a2:8c:e9:ae:00:12:9d:e2:8f:37:57:
                    3d:6a:6b:4c:f6:24:2d:9e:2f:72:e6:96:16:15:2b:
                    e8:09:db:21:81:d2:be:a9:47:d1:07:c7:81:b1:73:
                    b4:fb:e2:6e:bf:a5:d8:f4:55:4f:a6:1c:88:a9:02:
                    d0:af:fb:c6:ae:10:7b:3a:20:60:e7:59:e8:11:8c:
                    7c:eb:96:b4:96:e4:32:6b:d8:ef:73:51:a2:b0:a1:
                    ca:48:7f:c7:c7:7b:54:16:16:87:02:e6:21:4a:ec:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:05:FC:57:CF:83:78:82:74:47:DB:20:99:0E:0F:AC:E3:FF:8B:ED
            X509v3 Authority Key Identifier:
                keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e5:53:63:59:bd:a8:b1:66:75:06:d3:2a:42:04:17:23:c5:
         a1:d7:54:fd:53:91:25:fd:50:cc:fe:18:96:36:b0:f4:08:b5:
         7e:17:f4:22:ab:2e:82:71:f0:a6:cd:73:d7:9a:06:e2:a5:ff:
         fa:4f:78:9b:e8:da:9c:9e:33:9d:d1:53:8a:22:70:cd:4e:88:
         71:a7:c2:df:ec:58:c6:20:32:61:5e:d5:5d:ca:7a:a6:53:b7:
         6b:ce:0f:00:f3:67:07:70:cf:ef:33:6b:b4:50:f7:11:5a:f8:
         55:62:53:0c:51:83:67:b9:9a:69:5a:af:42:74:9a:08:cd:c0:
         a7:0c:46:e5:5f:e0:a0:96:e8:54:7d:e1:80:13:c0:7c:8f:b1:
         35:6d:85:f5:62:cd:61:bd:28:77:3d:34:6e:7e:ed:fb:91:b0:
         d3:1e:14:2c:e6:55:56:57:42:2b:2b:58:13:c6:05:0c:cc:51:
         3c:18:9e:f7:c4:68:00:aa:57:31:e2:45:98:49:06:52:5d:e8:
         80:55:13:c2:64:25:08:e4:a0:fd:a8:55:74:7a:10:18:b9:3b:
         c0:6b:91:41:fc:85:e7:67:1c:1e:d6:29:c6:a0:bd:4a:91:26:
         e3:99:f2:0d:d3:73:84:1d:27:1d:6f:48:c1:9b:c7:69:72:82:
         12:7b:5e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:32:27 2026 by rpki-client