Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
File:                     HBV2r1ubyOiNSAz86FrcxV_N0CY.mft (raw, json)
Hash identifier:          VKG4WeCWI/OzDBLt3rJiav7QFG2d84LDyfiaA8hMKeU=
Subject key identifier:   E7:F7:2E:9A:47:5A:59:F7:6E:A0:D3:EB:0C:08:C5:EB:84:5E:C0:4C
Authority key identifier: 1C:15:76:AF:5B:9B:C8:E8:8D:48:0C:FC:E8:5A:DC:C5:5F:CD:D0:26
Certificate issuer:       /CN=1c1576af5b9bc8e88d480cfce85adcc55fcdd026
Certificate serial:       01A0EB1C921245F70AF87106735EB153E246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
Manifest number:          AE
Signing time:             Tue 29 Sep 2026 03:01:53 +0000
Manifest this update:     Tue 29 Sep 2026 03:01:53 +0000
Manifest next update:     Wed 30 Sep 2026 03:01:53 +0000
Files and hashes:         1: HBV2r1ubyOiNSAz86FrcxV_N0CY.crl (hash: zD9xbTZn/yLU2zrp4z+EqSTzDNDCgtieOLeeMqQ9Xc0=)
                          2: RMrZUiMMSt3R9zFrkxOPZL2P6LQ.roa (hash: ZCPLqSOaXN6zp9uC89mjjEue1DLY3x3B14Iog4p5db0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:1c:92:12:45:f7:0a:f8:71:06:73:5e:b1:53:e2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c1576af5b9bc8e88d480cfce85adcc55fcdd026
        Validity
            Not Before: Sep 29 03:01:53 2026 GMT
            Not After : Sep 30 03:01:53 2026 GMT
        Subject: CN=e7f72e9a475a59f76ea0d3eb0c08c5eb845ec04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:2a:2a:c0:74:40:34:48:fe:4f:a7:50:8a:
                    24:56:c9:e5:db:e5:a3:4c:cb:5c:67:d7:13:2d:b0:
                    9b:d0:4f:14:73:17:93:1b:a0:cc:e6:50:04:be:07:
                    4c:68:3a:4a:29:c4:92:0b:d2:57:36:41:19:45:ea:
                    16:69:33:38:1b:44:21:d3:d5:80:5e:1f:d6:bb:fd:
                    00:46:18:7a:e3:8a:b5:69:4c:b7:f0:ff:bb:f8:12:
                    7e:32:78:8e:cf:2a:52:7f:a2:6a:4d:40:95:86:a8:
                    84:40:68:c4:8a:b3:84:d9:56:bc:26:18:a4:e5:d3:
                    c8:58:9a:a1:f9:76:04:5d:54:54:5e:c7:86:80:45:
                    36:33:09:c1:cd:54:24:5f:da:51:09:b9:1f:e2:57:
                    90:91:b7:63:e8:df:5b:2a:b3:3b:0a:53:13:59:df:
                    c4:1b:6d:60:99:bb:a2:b6:79:5a:0f:f4:93:49:cb:
                    f1:c1:b8:e7:3c:70:00:22:d6:70:03:61:7c:03:4b:
                    b8:0a:60:3d:d6:9a:c7:fc:4f:d9:ed:a8:4c:1f:e8:
                    ab:63:dd:3c:ce:84:f8:36:6c:11:25:31:05:92:59:
                    e3:ed:87:a5:f9:e5:23:96:90:6b:3e:d5:ff:6c:60:
                    bd:e7:f0:57:75:96:de:5f:f7:ef:a1:0b:1e:74:eb:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F7:2E:9A:47:5A:59:F7:6E:A0:D3:EB:0C:08:C5:EB:84:5E:C0:4C
            X509v3 Authority Key Identifier:
                keyid:1C:15:76:AF:5B:9B:C8:E8:8D:48:0C:FC:E8:5A:DC:C5:5F:CD:D0:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBV2r1ubyOiNSAz86FrcxV_N0CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/45d5d0-8afa-4905-8e4b-3f11afc64bf0/1/HBV2r1ubyOiNSAz86FrcxV_N0CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:c0:9f:e1:3f:a6:af:d6:a0:7c:a8:20:b5:f4:2f:4b:98:
         e3:57:cf:13:71:f5:08:4b:fc:46:1e:8a:eb:9e:f4:60:47:9a:
         4c:f3:50:fb:f4:94:6d:ce:d4:e0:04:e0:83:e7:0a:2b:48:61:
         bd:b8:43:bd:78:7b:05:40:7e:6c:a0:c9:32:74:3c:ad:03:95:
         71:bb:b0:71:fc:90:45:e0:22:4a:28:cc:2c:9b:2a:1d:c8:5a:
         49:a4:0c:1d:d7:ce:56:f9:40:79:99:cc:a4:fa:cc:9f:10:c2:
         1a:50:b2:83:90:7e:e5:83:42:07:74:ef:4e:a1:c3:c1:cc:e2:
         23:2f:38:1b:34:33:87:73:93:77:03:84:ee:3f:fa:48:2d:07:
         c3:05:c9:1d:5f:75:d3:f6:4e:77:4e:30:eb:67:be:62:28:ab:
         47:11:44:e4:86:76:f5:48:56:54:b9:ca:25:ad:94:36:cc:a9:
         5f:74:51:de:0b:a6:1a:1f:51:74:ed:77:90:39:29:2c:d1:68:
         8c:95:0f:93:25:91:ad:c2:6b:01:da:e9:7b:93:71:61:a5:95:
         ab:fe:8b:f4:d2:9a:36:af:40:4b:1d:70:81:dd:a2:f8:fd:ee:
         13:7a:cd:4b:0d:10:2d:d9:a2:9a:ee:ee:ce:be:38:4a:aa:80:
         df:cf:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:19:22 2026 by rpki-client