Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File:                     HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier:          Y77ZFkZsCVmyJaQLSS53BmJASmt5PstHa37oOhyRDoA=
Subject key identifier:   55:17:F0:AF:18:8E:FE:E1:46:14:BA:1E:21:68:CE:A9:C8:A7:89:19
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer:       /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial:       01A0D75FF472DE297FADDC5AE713E4F40D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number:          0576
Signing time:             Fri 25 Sep 2026 07:03:04 +0000
Manifest this update:     Fri 25 Sep 2026 07:03:04 +0000
Manifest next update:     Sat 26 Sep 2026 07:03:04 +0000
Files and hashes:         1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: LhUN5g3JKuj4kAznWj6tPalpMdT/DIWP4IT04GYNZa8=)
                          2: jj4p-t17R-_1G4MNsVWsKf7lxt8.roa (hash: gxtd056u5s+5E72I3IyM1AJXXx0KOPdQmubbLYFzxYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:5f:f4:72:de:29:7f:ad:dc:5a:e7:13:e4:f4:0d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
        Validity
            Not Before: Sep 25 07:03:04 2026 GMT
            Not After : Sep 26 07:03:04 2026 GMT
        Subject: CN=5517f0af188efee14614ba1e2168cea9c8a78919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:f0:5f:9a:56:90:a4:b4:c2:6e:e9:8c:04:
                    01:31:5f:58:b4:92:88:1d:3d:fe:0c:16:93:54:6c:
                    25:38:94:0d:ec:b0:c4:b4:1b:7a:f2:fb:d7:b4:02:
                    fe:36:04:6b:78:73:80:ed:1d:3d:31:c2:50:99:f9:
                    d7:9a:02:ed:11:0a:35:84:bb:81:2b:6d:cd:92:2a:
                    8c:1d:e0:84:e1:29:c2:7d:d8:fe:f6:51:7a:e0:9e:
                    7b:06:8a:f5:8b:41:b6:dd:9e:87:0e:be:7e:be:c2:
                    be:c1:53:ee:da:21:d5:7d:55:5d:76:37:94:77:56:
                    70:7d:ac:89:e0:6c:1b:86:c1:cd:10:b1:2b:a7:c8:
                    60:b9:06:22:23:15:8e:ba:49:28:8d:63:c9:37:fb:
                    bf:02:45:84:78:b3:93:61:fd:0c:2c:aa:52:77:29:
                    56:a3:90:88:7b:31:f2:0e:60:c7:65:c2:0f:b9:e3:
                    00:c3:fc:87:0a:3e:3f:91:af:53:fa:66:10:f9:74:
                    85:33:bd:e7:1b:61:ec:c9:f1:a1:3a:8c:5c:d2:b0:
                    87:97:51:2d:88:67:3d:b5:91:be:58:5e:cc:db:ff:
                    80:8f:95:a1:64:d2:e2:a8:da:ab:77:82:45:2b:2b:
                    5f:c0:93:40:53:d5:98:fb:91:c5:4a:60:85:f7:cd:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:F0:AF:18:8E:FE:E1:46:14:BA:1E:21:68:CE:A9:C8:A7:89:19
            X509v3 Authority Key Identifier:
                keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:49:9e:15:b9:08:7b:4d:32:57:2c:00:ee:4a:41:63:b9:08:
         ac:50:a3:b7:6d:f5:f2:6c:59:66:bb:77:4c:a0:a4:4e:78:c2:
         f7:e2:52:34:ac:77:0f:ce:43:12:a4:f7:19:c7:18:21:84:1c:
         e9:1c:ea:d9:51:c2:18:1f:4f:44:64:32:7e:3c:d4:c8:42:9a:
         05:62:04:c3:f7:e6:c6:ab:01:4e:ee:ca:ad:b8:37:d4:53:33:
         2b:2b:4e:fc:40:3d:b7:d8:9c:cc:95:20:ec:aa:a5:6d:44:58:
         34:b7:08:3c:fc:aa:1c:1c:14:19:61:7f:34:80:44:41:4a:37:
         d6:a3:a2:0b:07:4f:86:1e:63:0f:9b:cd:0a:3d:82:9f:85:e7:
         ba:ee:4f:c7:78:16:77:49:3a:b4:91:23:f0:98:49:ad:bd:69:
         7a:c0:f3:6b:c0:17:4b:b1:ee:ad:18:99:56:f5:83:e5:fa:e7:
         59:1b:d3:a6:87:0f:67:07:be:c4:a1:97:f7:a2:17:91:bc:8e:
         10:1a:67:12:7d:94:0e:e9:58:34:85:25:80:05:21:6f:e7:cb:
         80:3c:6f:e8:85:a1:56:5b:47:bd:28:28:b4:5b:37:fe:7c:21:
         17:f0:b9:53:15:85:88:a2:10:2a:d0:53:71:3f:d3:30:03:8a:
         ac:c1:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:20:10 2026 by rpki-client