Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File:                     hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier:          nVCtqpPkMgdEy+McmqsQ6gzF1canMuwVApUNZ7w87GE=
Subject key identifier:   27:16:57:AA:AD:65:FB:31:F2:4E:12:26:BD:D3:F1:92:8F:EA:CA:D5
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer:       /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial:       01A0D3B83C35019FADA93DA26580F3ADF771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number:          14B0
Signing time:             Thu 24 Sep 2026 14:01:01 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:01 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:01 +0000
Files and hashes:         1: 1TVNFB2oqiU4XNjEv0BT-Pb2M0M.roa (hash: 3vvI5UYlWItjTSfQrco2BtzXvJBHGkk/x8CyOBqqD8U=)
                          2: 41gdFH-JudL678u_D6BB_y7EfU0.roa (hash: VnQDTpZib3x3twc60ulDPL39Qe1IesXf9+CLXJ4WNxw=)
                          3: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (hash: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg=)
                          4: YQ7UOE0fRKiUXxXL_L3iPhyJx88.roa (hash: 3O80VS4rsgTgEZbTwubyabO64/481tfENVUe6/Id6ow=)
                          5: a-1eulbURZwYdTXjQHmSQrhkepg.roa (hash: dU6/8b7jh8wXrhRwwYJ+BZWPnCRt/iCI6b/zuZGMbbY=)
                          6: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: 3PNMb0QiNBjhL3Eu5nY5Xqrz0ugS+ej/QxTKrFdpb+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:3c:35:01:9f:ad:a9:3d:a2:65:80:f3:ad:f7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
        Validity
            Not Before: Sep 24 14:01:01 2026 GMT
            Not After : Sep 25 14:01:01 2026 GMT
        Subject: CN=271657aaad65fb31f24e1226bdd3f1928feacad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:16:24:06:d5:63:9d:38:24:52:38:40:bc:
                    a9:b3:b5:7d:ea:a3:08:e9:66:c7:b4:55:0a:ff:5f:
                    97:90:ae:83:3b:ef:9c:e2:57:f2:6b:71:18:ad:5b:
                    7d:c6:f8:ef:b1:6b:3a:a9:e2:14:cb:da:a0:e7:95:
                    f6:38:2a:91:ae:8d:83:7b:d3:7e:96:2e:00:1b:d6:
                    d4:b9:c4:f2:8e:e8:ad:37:89:1c:53:bb:2e:8a:e3:
                    c0:b4:84:25:48:cc:57:e2:d4:9b:a2:01:48:65:68:
                    d9:dd:61:9f:cf:ea:7e:60:19:75:6f:f0:50:22:fa:
                    39:32:a7:d9:b2:68:54:a6:95:f2:58:01:fa:d6:19:
                    7f:b6:27:b4:9a:ee:07:36:b3:37:a2:52:81:8c:1b:
                    b8:d5:4c:87:83:9d:26:eb:e9:cb:76:b4:d6:9e:4a:
                    61:ca:58:db:8f:1c:1c:8a:fa:26:f3:23:eb:e1:b7:
                    32:ab:60:34:aa:90:fa:04:a4:00:5e:37:be:d7:60:
                    63:a7:1d:7f:0e:f3:2a:3f:6d:22:cf:6a:3b:bb:2d:
                    79:1c:ca:70:ec:32:e9:d7:1e:1d:80:e5:e5:a7:db:
                    7c:8b:b5:de:6e:80:dc:ff:0f:57:4e:25:e0:64:8c:
                    43:59:c6:d4:1c:66:4d:ba:e1:c2:6d:c5:50:44:29:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:16:57:AA:AD:65:FB:31:F2:4E:12:26:BD:D3:F1:92:8F:EA:CA:D5
            X509v3 Authority Key Identifier:
                keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:88:a2:72:5f:47:47:81:0f:47:ad:a2:61:67:94:2b:43:6e:
         10:20:a5:c3:fc:df:01:a6:b8:11:a8:cb:34:18:4c:02:07:3b:
         27:7c:87:a4:81:29:fc:37:b8:12:9e:9a:97:57:94:75:35:fa:
         6d:97:ee:13:cf:84:41:53:75:ac:d4:f9:30:2b:34:e0:d5:ec:
         32:ff:7e:56:31:b8:08:f5:6b:0e:78:07:34:54:73:5b:a4:25:
         ad:4c:32:d9:d4:55:0f:c9:6a:94:15:42:96:2f:32:e6:25:97:
         d0:4b:b5:f9:41:e4:23:fb:27:9a:9b:4f:11:27:51:17:cc:fe:
         cd:ae:f4:4d:02:ca:ac:01:42:2d:8b:52:31:34:95:e6:c6:d5:
         44:d7:51:3f:c2:95:f8:df:31:5c:30:af:c2:87:10:3d:9a:8a:
         0f:12:84:dc:84:9a:f6:a5:3d:f6:e7:95:17:b4:fe:52:fe:f2:
         2e:12:6e:eb:b1:0b:38:2c:e5:04:de:3a:82:98:45:09:ef:b4:
         e1:cb:07:fc:da:11:87:ba:46:c8:59:4c:8c:fa:d3:15:67:87:
         66:12:42:84:a9:f8:d7:b2:2a:2e:79:1b:37:d5:ed:5a:92:f6:
         70:94:80:a7:fe:ed:9b:3e:cc:57:cc:65:e6:61:66:57:4b:9e:
         d6:e6:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:21:41 2026 by rpki-client