Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File:                     HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier:          gSEqN7hjkVmQX9AT+oi0WGDjgpnkqBhRJPxgkuqclRk=
Subject key identifier:   84:A8:00:43:C2:3E:71:F7:A4:10:9C:23:CF:03:92:CA:16:0D:45:5C
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer:       /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial:       01A0D94D4833AB63581D86CFBE85721B3BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number:          0CC0
Signing time:             Fri 25 Sep 2026 16:01:55 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:55 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:55 +0000
Files and hashes:         1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: +pmv42B4XpRgymHtb2v23aY2Yd+tXnEEZ1aEe62mots=)
                          2: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (hash: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA=)
                          3: ehIM4r7y0MNk_6X7PPB_Xq7ctEo.roa (hash: x9UHBy6St0JPZwyF+fAa8ymLClmistFAKiLBfqM/Jyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:48:33:ab:63:58:1d:86:cf:be:85:72:1b:3b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
        Validity
            Not Before: Sep 25 16:01:55 2026 GMT
            Not After : Sep 26 16:01:55 2026 GMT
        Subject: CN=84a80043c23e71f7a4109c23cf0392ca160d455c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:56:61:48:92:b9:1b:2a:84:ba:ac:56:d6:
                    1e:39:7d:3a:e2:03:4e:7e:14:e5:0e:e4:e7:2e:2d:
                    26:58:73:48:72:37:b6:d7:1e:82:e1:69:4d:59:77:
                    bf:65:2d:61:7c:9f:36:a5:3b:a6:25:8c:96:30:45:
                    d4:7a:c7:af:0f:73:99:60:a0:d2:dd:00:54:be:ad:
                    44:1a:ad:1b:e1:45:99:e3:a2:80:dd:5f:10:83:52:
                    45:0a:af:b3:53:ae:06:07:cd:d3:07:55:ad:1c:4d:
                    be:4d:c5:1e:b7:e3:22:9e:a0:16:dd:bd:aa:4a:fe:
                    87:23:6c:0d:a4:05:60:f3:81:10:af:fb:bb:3a:31:
                    64:d2:81:15:85:e4:64:ec:06:ba:e6:69:b2:4f:e9:
                    32:b0:4c:c3:dd:6c:49:54:44:33:87:dd:ad:54:5f:
                    22:92:11:15:51:9d:03:0d:01:d2:6e:1b:d6:0f:f7:
                    36:ac:e9:b0:e2:b0:67:8b:56:ee:32:9b:09:e0:69:
                    57:f9:48:a2:d0:7f:c0:54:ce:89:7d:da:32:31:ef:
                    e2:05:f0:81:7a:33:5b:00:9b:a1:24:ab:6e:20:8d:
                    8a:40:d0:b2:85:0c:21:f1:06:37:74:45:cc:34:43:
                    80:39:8e:4e:89:df:fb:93:4c:1f:af:71:05:df:eb:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A8:00:43:C2:3E:71:F7:A4:10:9C:23:CF:03:92:CA:16:0D:45:5C
            X509v3 Authority Key Identifier:
                keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:52:ea:9d:70:7d:b3:e7:0a:22:9f:fb:63:80:ef:48:13:14:
         91:35:53:60:4c:09:11:4f:7b:e1:61:17:93:34:99:34:cb:c4:
         31:7a:c8:e9:96:12:de:62:0a:ae:a1:d7:62:b9:dd:09:6f:33:
         4e:04:07:ce:6e:34:90:3c:c1:40:c7:cc:58:83:c2:ba:1a:3a:
         7c:2e:3d:dc:58:53:a3:20:02:ed:ad:44:8d:9f:cd:d9:44:46:
         0c:fc:2e:62:43:ad:8b:d2:ed:95:a7:8c:ce:ea:f6:c7:dd:bb:
         d9:f9:4e:2b:68:ae:62:c1:28:f2:fa:a6:f8:29:0b:02:86:87:
         55:04:af:23:57:99:52:7d:07:55:dd:d2:61:fd:71:df:4d:7a:
         04:d5:ba:08:23:47:e6:d1:10:5c:90:57:bf:58:7e:f0:12:0f:
         82:f1:ff:07:b3:a6:a6:d8:20:50:7e:79:67:95:47:a5:2d:52:
         90:61:2e:91:f5:7b:ae:9c:51:d5:61:13:cb:4f:02:87:52:be:
         f3:53:8f:69:99:6b:c0:99:6e:ef:09:7f:c0:e7:70:c6:ab:71:
         2c:7f:b2:a5:77:7e:b9:8b:fa:ad:11:c8:d8:16:62:ec:02:4e:
         2b:0e:6d:de:ec:14:4f:84:46:62:13:90:13:25:1f:d1:af:b3:
         32:d7:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:24:38 2026 by rpki-client