Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File:                     HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier:          gkRX4UcajhEYzrfVYAUu/tqgzkHD9k3yTCKmGRSvcMg=
Subject key identifier:   C4:87:F1:97:BA:28:D5:42:27:7A:89:70:56:04:E0:30:DE:95:01:7F
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer:       /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial:       01A0DACDA5131278F8CA239C853DC916F517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number:          19C5
Signing time:             Fri 25 Sep 2026 23:01:45 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:45 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:45 +0000
Files and hashes:         1: 1-PobHP3upTno8bW2i6EzwJRlSdc.roa (hash: k3oArZicPTjQ+oty+7iOYo7+c4L7ieRd9ba75n0lEZ0=)
                          2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: doXeFmUDqmZ2j9sebdO4yXp3XljfbHsOV2c63THzd5s=)
                          3: dNILgOFj-FxbjD8-2fl1xvfIJOw.roa (hash: fwgzfDaeuX5cT3VophtPxTyBR91VNu0Zs4kcr+pvJUc=)
                          4: oTGkNvJRZNRjPu-ktqx2ylM1aRI.roa (hash: Ek0IIB7EUCOuxacTHXe38ILHEJXneuaGMfbJ/YMGwwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:a5:13:12:78:f8:ca:23:9c:85:3d:c9:16:f5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
        Validity
            Not Before: Sep 25 23:01:45 2026 GMT
            Not After : Sep 26 23:01:45 2026 GMT
        Subject: CN=c487f197ba28d542277a89705604e030de95017f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ae:f4:47:80:96:db:5b:e3:b0:95:91:bc:11:
                    4e:a5:5b:27:a1:2f:70:37:59:71:83:1b:68:db:9f:
                    27:99:45:f6:9d:8d:b2:4e:59:1b:81:81:22:d1:67:
                    1a:31:4d:2b:df:c1:4a:96:54:e6:d9:33:12:22:61:
                    81:28:85:00:27:c3:3b:2d:81:3a:29:71:9d:47:01:
                    6d:22:1e:5c:fc:32:56:2c:e3:32:31:34:c1:99:41:
                    32:79:0c:e8:64:96:be:b0:58:3f:f6:aa:e4:ba:50:
                    9d:4e:ac:56:26:f6:d3:c8:39:ea:97:29:bd:c2:4c:
                    14:ec:b3:77:61:a3:ba:f8:72:56:39:5d:a5:f0:92:
                    b0:71:d5:60:6d:64:a7:81:80:2f:60:9d:66:a5:8c:
                    5a:78:f4:34:34:19:f2:b3:dc:3b:e7:2a:17:c4:2f:
                    63:fa:b6:a5:f2:f8:93:73:95:0e:fb:d6:4d:23:19:
                    df:f6:0a:56:0a:01:bc:f3:38:85:dd:7c:20:5e:49:
                    ef:48:86:bc:69:d1:c7:b6:2c:a4:aa:2c:17:54:ee:
                    1d:05:34:b1:a5:8c:f2:d2:ee:56:09:3d:bb:a3:ca:
                    55:a8:e4:64:c0:ea:bb:92:c8:37:52:74:c0:99:cd:
                    f8:5e:16:ed:bc:47:00:d3:e2:79:88:96:30:ee:f3:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:F1:97:BA:28:D5:42:27:7A:89:70:56:04:E0:30:DE:95:01:7F
            X509v3 Authority Key Identifier:
                keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1f:db:ee:31:9d:59:fa:4f:d2:f2:fe:9a:12:f2:00:7d:56:
         0c:5d:fb:ea:7a:f3:84:3c:0b:0a:fa:7d:80:0a:c6:91:a4:e6:
         fc:b9:e9:50:06:bf:8d:73:e1:e0:e5:30:a6:2c:93:98:b5:c1:
         0b:63:38:38:50:88:49:0f:89:0a:a1:a3:7b:71:7f:42:5b:99:
         12:4b:24:12:8b:f4:4c:f2:84:c3:6c:72:6e:97:55:57:9e:19:
         5a:e3:69:c2:c3:da:56:50:6e:a9:ab:86:36:54:a5:d5:22:86:
         13:2d:84:d6:4b:f8:54:52:0d:f0:96:5c:ed:00:fe:1c:0f:9b:
         f1:21:c5:c7:43:d2:3a:aa:e6:c4:e9:d9:30:61:69:c8:69:e3:
         c7:9a:ba:82:fc:fd:ca:66:0e:1b:c2:d7:6f:17:36:f3:b0:25:
         f8:31:94:69:6d:a6:48:b3:a3:b0:8d:1b:75:1b:14:95:c1:6a:
         0f:4e:db:87:e9:23:8c:78:4f:43:27:9c:48:7b:a0:89:21:6e:
         29:76:a6:1f:43:e9:6f:87:c9:da:38:49:f6:78:66:a0:35:12:
         80:6d:4e:30:bf:32:63:ff:59:01:0c:40:08:4a:97:ad:8d:e5:
         ce:2e:e3:2e:79:eb:41:3c:6d:a4:4b:f0:14:47:5e:85:50:95:
         47:78:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:15 2026 by rpki-client