Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File:                     _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier:          JSR4DW+gXQqDd47Y4vGPtDDk1aV2m2xqYlBqGUS2TLY=
Subject key identifier:   8F:56:E8:00:7A:13:9E:DC:64:C2:61:D1:F4:A5:EA:D1:F8:CB:17:03
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer:       /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial:       01A0D1C910BCAA5194D919A0F42031C9AF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number:          170B
Signing time:             Thu 24 Sep 2026 05:00:10 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:10 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:10 +0000
Files and hashes:         1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: T0fkAJSDJ458UoLr2Ps1+Pfp8wv0mHKEW/R8t4GWpO4=)
                          2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:10:bc:aa:51:94:d9:19:a0:f4:20:31:c9:af:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
        Validity
            Not Before: Sep 24 05:00:10 2026 GMT
            Not After : Sep 25 05:00:10 2026 GMT
        Subject: CN=8f56e8007a139edc64c261d1f4a5ead1f8cb1703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:d1:80:34:31:5b:80:b0:f7:24:3e:58:7e:
                    74:f1:4f:04:53:d5:a4:e4:1a:52:14:03:d8:36:f4:
                    22:e3:7d:7e:66:15:53:8d:20:27:00:15:79:d2:a9:
                    c7:ff:33:c9:5f:02:6b:99:16:31:27:06:23:86:4d:
                    de:06:37:7e:82:98:70:58:7c:01:64:0f:3e:1c:20:
                    e2:57:7a:e3:09:8d:95:5c:6b:4d:b1:14:13:c8:a0:
                    d7:a9:62:4a:35:68:77:6c:d3:4b:01:b2:7a:1f:e6:
                    f3:1e:d9:7e:98:94:9a:db:f8:c9:03:2a:0b:53:c5:
                    7c:23:7e:cd:81:19:55:87:0f:c1:1e:2d:bd:68:d6:
                    8c:6b:eb:e2:04:1c:1c:77:c1:72:42:bf:94:a0:53:
                    52:4a:47:60:87:8e:90:e6:15:16:18:53:20:7a:1c:
                    f2:52:7b:1f:94:37:bd:68:f7:b8:a6:f2:6c:39:6c:
                    73:99:6b:c3:c9:ce:50:f0:ed:7b:6c:af:9b:03:ce:
                    1b:3c:7b:f2:2a:3d:62:e2:35:84:2d:5c:c8:4b:10:
                    94:9e:c6:17:4d:0a:10:05:2a:cf:11:81:b0:8f:f1:
                    54:7f:74:76:f4:be:c9:f4:43:b5:99:94:06:af:76:
                    e6:5d:7a:15:42:df:ac:d1:ca:94:e1:e5:23:11:9b:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:56:E8:00:7A:13:9E:DC:64:C2:61:D1:F4:A5:EA:D1:F8:CB:17:03
            X509v3 Authority Key Identifier:
                keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:81:fd:aa:df:f0:2b:62:dc:ee:87:87:01:07:23:4b:4b:14:
         14:b9:e0:cb:3d:95:e7:35:1c:0c:9a:7f:03:b5:71:dd:e8:b4:
         2f:d7:26:e9:dc:cc:91:c8:70:b8:c1:4c:ed:44:a5:a4:9b:be:
         b6:2f:27:90:14:d3:de:a8:64:55:57:86:c7:60:0b:2f:f8:85:
         7d:5c:d5:5e:61:fa:0f:ba:af:12:de:db:09:26:ab:73:77:aa:
         ca:c0:8f:05:47:e8:1c:4b:f2:3a:d7:5f:f4:c6:55:a5:09:41:
         f4:7f:54:38:82:89:b5:64:07:a9:a3:44:d7:b6:82:1b:40:69:
         13:37:f6:55:b5:e4:1d:5f:b0:52:89:8d:08:92:0d:34:87:61:
         7f:ed:22:b0:d6:7e:10:ab:90:a2:03:a5:03:46:09:d1:b2:ca:
         c2:55:c0:59:de:91:14:f0:67:60:7d:65:74:bb:37:48:5b:5d:
         41:b2:54:fc:c6:d7:3f:22:49:77:8c:59:6e:da:5b:fc:ee:d1:
         b2:e4:2e:9e:7b:c4:8f:23:fa:69:62:5f:33:cb:00:1e:fd:2e:
         c1:e6:10:53:f3:06:ce:d2:2b:c5:50:6b:45:00:40:ca:5c:11:
         a2:33:0b:7b:f3:d9:7b:14:c1:bd:54:e7:93:ac:27:38:57:44:
         03:4e:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:24:15 2026 by rpki-client