Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          cqCwxDjrW8keT7mOnfRTMZ3sd8V+OOlq6B9qLhx6xwo=
Subject key identifier:   A7:A3:50:08:18:5B:D4:CD:57:AA:E3:A8:72:25:F6:34:5C:66:C6:A9
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       01A0D64BD979E50B15CD95837E9298F9D8AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          09A5
Signing time:             Fri 25 Sep 2026 02:01:29 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:29 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:29 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: 3cUTN0aXb9RQA2pp3dK/GiEEoEB1M0NSrkQ8vliGtaA=)
                          2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:d9:79:e5:0b:15:cd:95:83:7e:92:98:f9:d8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Sep 25 02:01:29 2026 GMT
            Not After : Sep 26 02:01:29 2026 GMT
        Subject: CN=a7a35008185bd4cd57aae3a87225f6345c66c6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b7:ae:f0:1b:de:bc:3e:1c:c6:9b:e7:39:81:
                    1a:ad:b6:ee:23:fc:c6:41:85:f6:6f:d7:85:fd:eb:
                    f1:82:4b:36:5c:37:31:87:36:ed:a9:39:39:14:76:
                    47:50:38:96:2f:2f:9c:76:4f:57:5e:a3:7f:31:ef:
                    ce:7e:70:4d:86:64:1b:d3:33:21:fd:f3:35:7c:5b:
                    84:01:f5:cb:85:78:1f:1c:32:5f:1c:c0:b2:d2:a0:
                    a4:43:e3:98:92:64:b0:47:9f:1d:0b:6a:dc:ba:3e:
                    34:d1:80:46:39:f3:68:15:f5:88:b8:75:5f:bd:5b:
                    3d:40:e0:c0:89:93:c6:1a:04:1d:88:d9:7b:e0:81:
                    df:f3:81:36:72:c9:24:db:84:0e:35:3a:2c:4a:c4:
                    25:2f:9e:33:09:ce:89:79:fa:13:b8:84:c1:65:a9:
                    6d:31:1b:68:fc:67:72:2c:72:72:1d:49:ce:91:72:
                    f7:59:92:78:8a:bf:39:dd:61:f4:fe:90:5c:52:2e:
                    db:6e:f7:84:96:ae:d1:9c:1d:74:2d:89:94:70:ae:
                    93:b6:ed:d4:47:49:b6:68:28:1e:6d:c9:94:71:1a:
                    9b:01:e2:84:6a:1a:02:0c:08:36:f5:b9:96:a2:06:
                    b7:cd:c0:96:55:0c:cd:8a:1a:34:47:50:28:61:f1:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A3:50:08:18:5B:D4:CD:57:AA:E3:A8:72:25:F6:34:5C:66:C6:A9
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:2e:a2:97:9a:b6:f2:1e:dc:c4:5f:38:52:59:82:8a:b0:
         59:3b:61:dc:48:a0:69:c3:ac:9b:c6:d5:e3:4a:d0:e5:c5:cb:
         b2:d1:d4:d0:b9:ae:46:00:27:c6:94:48:b6:51:92:f9:9c:ce:
         ad:df:e0:e4:f8:33:19:81:a9:1b:87:b3:3e:60:94:61:ad:ba:
         17:e5:0a:c3:24:f2:91:66:d1:8e:9f:82:01:af:dc:34:ac:18:
         0b:ba:40:67:f8:82:b5:d0:1e:10:15:6c:37:b3:f2:43:bb:dd:
         3d:f6:ab:b0:db:3f:a6:1d:a2:09:a9:34:d0:e4:84:18:11:98:
         76:2b:8d:19:34:c0:cb:86:46:6f:2d:e6:8f:57:d1:7c:2e:c2:
         a1:c8:37:18:5e:c8:ed:67:b1:a2:bd:87:14:92:6c:14:10:72:
         02:fb:4f:64:f1:7b:86:a0:cf:6a:1d:3c:3f:5c:6c:0f:58:1c:
         22:89:18:0a:91:b3:8d:58:b3:e1:21:d5:59:21:c8:d9:cc:7f:
         90:01:3e:38:51:c4:1c:39:3a:42:55:74:71:11:ff:0b:40:fa:
         74:fa:35:3f:c8:f6:bb:92:a9:a1:3f:d9:e9:e8:e9:fb:b9:78:
         f5:6a:6b:cf:92:ab:69:67:4a:b8:48:74:69:5e:ee:db:fa:49:
         23:46:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:55:48 2026 by rpki-client