Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File:                     hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier:          ck1DlR56Npd/TIuTH0RO9BlCMzpntoDqb2YHjnbXu+U=
Subject key identifier:   FB:58:A2:37:53:5B:D2:68:E0:BF:E1:6A:BB:48:B9:86:84:13:31:A9
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer:       /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial:       01A0DF4ED80F3C26D02F7C7962C0F2945D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number:          1A25
Signing time:             Sat 26 Sep 2026 20:01:21 +0000
Manifest this update:     Sat 26 Sep 2026 20:01:21 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:21 +0000
Files and hashes:         1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
                          2: Y3J2ud7jTrX4_kZX_16f1uueVbg.roa (hash: phuOOyFdkRfonnOS6jbXwYKqxA0Iu7gFVN1SwrhDuJ4=)
                          3: dD9dHGQ8gQw13ckZppje7kWpQsM.roa (hash: r4y30mkY+vW+Z9vUf+xkdGW81b+7QGW2Rple9BpVlfI=)
                          4: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: jHPX46sHRTyAfwTF3/Jebs6Js4HB64afkf3rJ4BJWF4=)
                          5: ztuH1Ib6x5wzUeQhgYqrotMVPQw.roa (hash: utfkpD2m+HS/flfgYbwUeyyWH7NvVuqHqyG3A5crwN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4e:d8:0f:3c:26:d0:2f:7c:79:62:c0:f2:94:5d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
        Validity
            Not Before: Sep 26 20:01:21 2026 GMT
            Not After : Sep 27 20:01:21 2026 GMT
        Subject: CN=fb58a237535bd268e0bfe16abb48b986841331a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:68:cd:eb:59:0d:e8:7c:c9:6c:a0:6c:8c:
                    e3:f5:38:db:2a:28:94:b3:3a:b2:8b:bf:f0:74:cc:
                    b1:9e:1f:4b:9b:2d:ab:fa:c0:e8:d4:51:df:7a:52:
                    52:6c:ee:1d:70:dd:c7:67:3f:bb:94:73:e5:0f:43:
                    46:2a:f8:bb:47:10:12:92:ff:61:ed:a4:c7:ed:98:
                    0b:c2:31:b0:f5:e6:72:7b:08:e1:d1:be:f1:d4:66:
                    62:e2:16:98:9b:75:6b:c5:c7:13:00:67:16:49:a6:
                    f8:17:bb:f6:fe:db:a5:61:84:86:56:f0:e4:f6:53:
                    ca:98:ed:47:bd:0c:4c:ea:fd:c3:49:bb:11:8c:7d:
                    9a:b5:25:8e:44:36:03:74:b6:fd:cf:09:94:38:3f:
                    29:ab:57:07:7b:62:ed:de:01:fe:1e:e8:18:16:fa:
                    a3:42:02:a5:24:7f:aa:91:42:ff:48:c4:58:c5:e4:
                    69:4a:fc:a0:c5:53:17:e6:27:ab:74:5d:91:93:9a:
                    f5:35:68:c5:54:54:3d:3e:37:ce:e9:9f:08:74:a8:
                    b0:a0:3b:b9:3c:f5:56:9c:f4:d1:99:c7:6f:1f:51:
                    59:d6:36:15:5c:99:52:3b:9b:75:44:df:bd:1a:4a:
                    9a:3e:a7:11:33:d2:9c:22:34:84:af:ae:38:33:86:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:58:A2:37:53:5B:D2:68:E0:BF:E1:6A:BB:48:B9:86:84:13:31:A9
            X509v3 Authority Key Identifier:
                keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f0:68:ed:a1:6b:75:2d:cc:5f:85:79:16:90:e1:3b:16:94:
         38:b2:9d:38:c1:fc:eb:8e:86:ed:b1:6a:fe:ad:09:5a:23:ed:
         e2:20:3a:76:89:17:c2:bc:4f:97:cd:4e:8a:d3:db:0a:4f:da:
         60:93:36:cc:37:a7:9d:b4:ec:79:a5:4c:4e:ab:e1:4b:a5:84:
         93:d7:3a:af:04:e1:61:18:b6:9f:37:30:40:bf:b1:dc:e7:bd:
         db:89:d0:e8:54:a6:03:e9:1d:be:74:ae:b3:7d:a6:e6:fd:fa:
         9f:19:ad:51:30:7e:8f:0e:e5:80:d5:e7:56:9c:7f:bb:ed:10:
         ca:88:39:53:6e:f6:84:49:79:df:5d:53:50:7e:dd:db:67:3e:
         bf:38:7c:47:36:fb:04:f2:0c:d2:b3:f1:57:1a:63:12:07:fd:
         3c:d0:14:74:fa:90:de:b2:87:71:66:23:49:f9:c9:85:d9:da:
         69:10:aa:a9:bf:15:f9:71:de:b6:52:e3:1d:0e:5a:6a:cd:e1:
         77:7e:6d:14:24:a3:4b:4d:02:61:14:f9:6c:d6:78:52:a9:7c:
         3c:7d:6a:b8:cb:2a:70:3c:b3:8a:32:93:e8:83:a0:f3:12:f1:
         1a:e3:b4:8f:b7:99:69:1d:71:88:f9:46:1f:21:94:8e:15:a6:
         85:a0:4d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:50:31 2026 by rpki-client