Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File:                     hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier:          8SHYVgdFm9fdQ9TlASQEPCtnOG8qQMKLCk+s8idly4U=
Subject key identifier:   81:45:D2:2B:C3:11:00:9D:E1:44:93:A4:19:35:70:EF:B3:CD:C0:42
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer:       /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial:       01A0D45D61167663ADC292FF732100005EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number:          150F
Signing time:             Thu 24 Sep 2026 17:01:24 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:24 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:24 +0000
Files and hashes:         1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
                          2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: 0wBkwTRUNygQw2OZeoH8fI00JxFS97yg3Grpx2EjLSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:61:16:76:63:ad:c2:92:ff:73:21:00:00:5e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
        Validity
            Not Before: Sep 24 17:01:24 2026 GMT
            Not After : Sep 25 17:01:24 2026 GMT
        Subject: CN=8145d22bc311009de14493a4193570efb3cdc042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:ee:9c:3c:88:4d:2a:1e:30:64:f3:85:76:
                    ee:94:ac:19:b9:e0:83:2c:a7:93:4d:86:ef:e6:a0:
                    cd:d1:b3:00:6d:8c:df:69:d3:94:a8:7c:a4:32:d0:
                    2e:41:54:95:26:9d:4a:cf:80:0c:38:36:31:25:5c:
                    6c:94:39:51:a3:88:d5:af:18:31:a9:2a:47:f9:e9:
                    28:2e:bc:6d:1c:24:0f:fd:4b:2f:c6:4d:aa:0c:46:
                    d2:cb:ab:9f:94:f6:b9:de:e7:3a:76:27:b3:2b:ae:
                    e6:ac:12:12:11:63:5a:d3:e6:70:d0:62:16:8d:7b:
                    27:ac:ac:80:e4:3f:a3:7c:95:37:d7:c0:82:2f:69:
                    26:b7:91:a9:ea:22:21:40:a1:03:88:54:f8:87:73:
                    a6:24:f8:a7:89:cb:f9:51:c5:96:f5:89:73:85:4d:
                    f9:46:0b:72:10:e0:bd:ad:f6:cf:ec:af:4d:23:a7:
                    16:88:a1:61:fa:ca:21:a3:72:d3:03:11:4b:8d:ca:
                    45:53:81:2e:35:1c:be:8d:28:fb:4a:02:91:be:43:
                    7c:8d:2d:a6:46:ca:2f:97:e9:29:25:81:d9:3d:9c:
                    29:3e:d5:0b:f1:68:b0:44:f6:77:81:8a:37:21:36:
                    42:9b:c3:42:45:a2:e3:00:3e:b7:73:b8:8f:2d:96:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:45:D2:2B:C3:11:00:9D:E1:44:93:A4:19:35:70:EF:B3:CD:C0:42
            X509v3 Authority Key Identifier:
                keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:28:9f:66:00:75:ae:0e:c8:d0:f8:8e:20:d2:f7:c3:62:
         34:ce:2f:7e:a7:50:97:d3:57:86:d5:fc:fd:f6:a7:e2:72:b4:
         cb:15:06:67:a7:e7:00:ca:c6:e2:0d:5c:8d:be:4b:07:3d:7c:
         21:fe:e4:ad:4f:38:4c:0d:6f:4f:ac:31:99:0e:f0:25:6c:1a:
         54:00:13:09:0d:ba:56:70:7a:1d:f6:ca:d5:73:aa:ec:fa:da:
         9c:5f:58:b1:2a:e1:43:8b:a0:5e:56:82:6e:da:d1:ce:be:13:
         95:dc:66:f9:9f:9f:40:97:03:56:a5:5b:36:65:87:cb:b5:af:
         85:3e:f7:25:1a:8b:af:f5:cd:87:c7:9f:91:dd:ca:be:54:39:
         c9:0d:50:62:62:41:67:50:f2:d1:a2:da:6c:cf:d5:de:0b:1c:
         13:d4:b6:98:f7:1e:1c:2f:0b:69:52:bf:bf:09:bc:e4:2d:32:
         d2:46:aa:21:a2:25:93:92:29:b8:51:b8:09:38:f4:dc:00:44:
         96:1b:19:5e:42:ff:a6:db:c2:13:8e:4b:06:89:b4:47:59:f9:
         c4:16:c0:24:a3:d8:93:6d:7c:bc:d9:d2:52:71:23:d7:77:dc:
         bc:e9:13:db:19:b4:81:cb:02:3d:63:4f:fd:8e:58:09:c3:9b:
         d6:7b:16:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:46:23 2026 by rpki-client