Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File:                     H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier:          AuofIU1SZ7+YHWO3p0WYOCW/qYTzBPL3Z7k6RXZmlSU=
Subject key identifier:   B0:A6:59:1F:A9:77:35:57:EA:76:70:24:DB:D1:BD:EF:C0:5F:4D:54
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer:       /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial:       01A0CF367209127F0A483813A3DFF56EA01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number:          1325
Signing time:             Wed 23 Sep 2026 17:00:46 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:46 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:46 +0000
Files and hashes:         1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: rcLVevDvu0Yog1Jx6WGH5r3yPIQY9tR5cV1mRq62rJg=)
                          2: Vf77xukhBIpUTcfDdQGILMMSa4Q.roa (hash: tmWyKSyKboTPLB52PoBpJE8efgve3egkhQ+0cqtz0+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:72:09:12:7f:0a:48:38:13:a3:df:f5:6e:a0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
        Validity
            Not Before: Sep 23 17:00:46 2026 GMT
            Not After : Sep 24 17:00:46 2026 GMT
        Subject: CN=b0a6591fa9773557ea767024dbd1bdefc05f4d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:8c:13:54:74:58:53:1e:8d:ba:20:b0:24:
                    fc:78:f5:32:48:67:c5:9c:2c:c1:73:61:17:f5:cf:
                    6d:65:fc:ed:b9:a0:f9:ff:e0:c4:3e:b5:a7:1d:0b:
                    0e:35:fb:27:96:74:d8:7c:88:5c:19:a1:34:35:75:
                    42:a6:1e:20:ca:cb:a2:57:35:e1:d5:3b:ed:df:f6:
                    e0:45:1a:55:65:c2:e1:e6:02:66:e7:9d:4e:e4:cd:
                    8b:70:cb:c9:e1:3d:1a:04:d1:21:dc:5d:78:4e:ee:
                    b9:60:cf:3d:a3:ca:bb:49:d5:a8:d0:a9:eb:56:d5:
                    36:44:2f:44:54:0e:04:ea:b9:db:7c:9f:f2:4a:b7:
                    90:9f:13:6d:72:7b:4a:ea:02:eb:4a:d0:00:5b:cc:
                    9f:51:bc:32:37:83:a9:ab:ed:87:24:7b:93:06:ed:
                    88:14:e8:72:a0:4d:51:a8:d5:6e:93:5b:73:78:9a:
                    d8:7f:4f:0f:cc:07:34:90:87:cf:7f:fc:48:cd:22:
                    cf:92:50:f0:e8:19:ac:b2:ac:00:4b:63:99:2c:3a:
                    a4:22:84:3a:42:fb:2c:46:df:56:fa:93:1e:16:dc:
                    4b:3f:bc:9e:bd:ef:a5:37:b6:2c:19:71:ea:c6:5c:
                    43:27:ee:bf:6f:13:dd:3a:f3:1d:43:65:d3:79:0f:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A6:59:1F:A9:77:35:57:EA:76:70:24:DB:D1:BD:EF:C0:5F:4D:54
            X509v3 Authority Key Identifier:
                keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:63:da:2a:77:4e:52:be:6b:d7:ee:78:66:93:ba:25:0b:3b:
         34:e0:31:3d:97:5e:8d:d4:f1:81:e0:b6:79:0b:ee:0f:16:82:
         7b:05:3e:f2:e4:dc:03:b8:ee:d3:f0:dc:4d:a2:6e:1b:3e:5c:
         0e:75:7b:ab:31:16:7b:0e:e6:08:4a:22:12:4c:42:00:28:6d:
         b4:1f:78:1d:c7:56:88:63:53:c8:d3:d8:8c:07:4e:b0:c3:c5:
         18:e6:23:3c:83:96:08:37:ae:9e:ab:98:39:f3:5a:f0:d5:31:
         44:34:ef:46:ce:e5:16:82:6c:4f:cf:f8:f6:ef:45:5e:30:cd:
         7d:79:ca:ba:1a:bd:f4:9b:71:22:39:f8:c1:00:bb:68:1e:f5:
         0e:7f:01:bc:2e:76:42:19:23:c1:ae:02:18:6f:36:e2:c1:43:
         f2:5f:52:4f:83:01:45:81:68:89:76:40:af:31:18:a1:08:34:
         4d:fc:b2:40:fd:da:46:4e:43:f3:6a:30:40:c6:68:61:ad:2f:
         69:42:3a:37:6f:2c:31:4a:d1:3c:ab:43:6d:23:0d:b7:7e:1b:
         69:a2:5b:46:ea:fa:c6:35:55:47:96:8d:32:91:b3:84:b3:0b:
         49:6d:2d:3b:59:6e:ae:67:e3:a3:95:3f:6a:ba:ae:1d:35:ca:
         54:dc:aa:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNnIJEn8KSDgTo9/1bqAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNGFmMmI0Nzk4MTVmMDdjZDgyZTlmODJiYWIyZmVhMTNm
YjIxYjEwHhcNMjYwOTIzMTcwMDQ2WhcNMjYwOTI0MTcwMDQ2WjAzMTEwLwYDVQQD
EyhiMGE2NTkxZmE5NzczNTU3ZWE3NjcwMjRkYmQxYmRlZmMwNWY0ZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVGME1R0WFMejbogsCT8ePUySGfF
nCzBc2EX9c9tZfztuaD5/+DEPrWnHQsONfsnlnTYfIhcGaE0NXVCph4gysuiVzXh
1Tvt3/bgRRpVZcLh5gJm551O5M2LcMvJ4T0aBNEh3F14Tu65YM89o8q7SdWo0Knr
VtU2RC9EVA4E6rnbfJ/ySreQnxNtcntK6gLrStAAW8yfUbwyN4Opq+2HJHuTBu2I
FOhyoE1RqNVuk1tzeJrYf08PzAc0kIfPf/xIzSLPklDw6BmssqwAS2OZLDqkIoQ6
QvssRt9W+pMeFtxLP7yeve+lN7YsGXHqxlxDJ+6/bxPdOvMdQ2XTeQ+pswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCmWR+pdzVX6nZwJNvRve/AX01UMB8GA1UdIwQY
MBaAFB9K8rR5gV8HzYLp+CurL+oT+yGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjIt
MDg2YzE2ZjczNmIxLzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjItMDg2YzE2ZjczNmIx
LzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2PaKndO
Ur5r1+54ZpO6JQs7NOAxPZdejdTxgeC2eQvuDxaCewU+8uTcA7ju0/DcTaJuGz5c
DnV7qzEWew7mCEoiEkxCAChttB94HcdWiGNTyNPYjAdOsMPFGOYjPIOWCDeunquY
OfNa8NUxRDTvRs7lFoJsT8/49u9FXjDNfXnKuhq99JtxIjn4wQC7aB71Dn8BvC52
Qhkjwa4CGG824sFD8l9ST4MBRYFoiXZArzEYoQg0TfyyQP3aRk5D82owQMZoYa0v
aUI6N28sMUrRPKtDbSMNt34baaJbRur6xjVVR5aNMpGzhLMLSW0tO1lurmfjo5U/
arquHTXKVNyq1w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:58:26 2026 by rpki-client