Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File:                     hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier:          TqFsgWPLf/uAIf3XiBvB7tXRu2JwUPUkZWxyIhvkvhc=
Subject key identifier:   ED:36:A6:BF:6D:36:33:44:80:A5:92:D3:16:60:F7:21:6D:8E:4D:D1
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer:       /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial:       01A0D80410B10DEDD4982DD805EC9C899B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 10:02:20 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:20 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:20 +0000
Files and hashes:         1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
                          2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: gnRYiNq7tNzDLwDWgXWY9PdaiuqWdVDjfXHN8XR0Frs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:10:b1:0d:ed:d4:98:2d:d8:05:ec:9c:89:9b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
        Validity
            Not Before: Sep 25 10:02:20 2026 GMT
            Not After : Sep 26 10:02:20 2026 GMT
        Subject: CN=ed36a6bf6d36334480a592d31660f7216d8e4dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:a4:88:a9:49:ba:6f:fd:15:c9:32:fc:d4:
                    1b:b0:40:15:4d:95:ff:25:2f:2a:9e:b8:a6:9b:a4:
                    e2:19:83:63:3c:aa:41:cb:12:b6:81:7b:90:72:ab:
                    95:5c:61:a2:b3:1a:48:dc:7e:b9:78:7c:4a:6f:1b:
                    33:5a:83:7f:2a:69:34:59:79:8d:4b:ff:21:00:2c:
                    bb:06:d2:09:cf:be:ce:07:38:3a:4a:dc:b9:99:51:
                    68:4c:f6:cf:30:22:87:62:6f:34:64:2f:57:3a:a7:
                    a5:59:f1:d2:75:fd:5b:ff:6d:8f:ef:bb:69:2a:ae:
                    4d:2a:d2:77:5f:26:59:c2:18:f8:c3:8c:b3:d3:59:
                    aa:c9:64:e8:4b:fd:f9:53:d3:92:b2:f7:a6:4a:a1:
                    6d:6d:f6:1d:f7:1a:6e:fd:3e:51:3d:85:9b:75:61:
                    ef:c9:63:2e:75:d3:0b:43:74:1e:2f:f0:38:2e:6e:
                    38:2a:12:fb:98:a2:45:bd:36:c4:ae:59:11:ce:77:
                    10:2f:a2:ca:63:0d:97:11:51:bb:3f:72:7c:9c:21:
                    6a:ff:4b:0a:33:17:05:13:c7:e0:a9:3f:b2:ee:11:
                    9b:3b:e8:cd:95:b6:b2:28:1f:0a:21:0c:7a:fc:2e:
                    f6:76:7f:9d:0b:4c:d0:47:3b:b1:28:a7:5a:40:3b:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:36:A6:BF:6D:36:33:44:80:A5:92:D3:16:60:F7:21:6D:8E:4D:D1
            X509v3 Authority Key Identifier:
                keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e2:f5:5d:ed:00:50:1a:c2:e5:a0:ec:b1:69:5b:7d:d8:b8:
         31:80:5a:75:39:24:b2:e1:12:83:0b:4e:6e:b2:a5:25:c2:ee:
         f5:b8:e5:b4:79:28:de:aa:cb:0d:40:d6:29:8f:9b:9b:c4:db:
         b4:4a:9f:f4:66:95:76:7f:db:1f:73:c8:8f:a2:02:61:36:a8:
         4d:b1:31:df:fa:18:b3:c0:2f:47:9a:67:d9:42:c8:94:e8:0a:
         04:f1:b6:f6:2d:e9:9e:bb:17:6c:f9:5f:c2:3a:5f:05:b3:59:
         78:95:ce:fb:d2:e9:f3:a6:19:15:8d:9c:e7:ca:8c:c5:49:ef:
         d2:25:5c:70:88:82:6a:77:65:1d:ed:29:99:f2:43:d9:70:db:
         d3:9e:ca:ab:2b:76:4f:35:0f:64:1a:65:40:e3:26:c5:f0:a4:
         c3:25:94:3a:99:5e:dc:54:36:e3:fd:2c:36:a6:0d:c4:5c:bc:
         d9:11:7b:c9:da:51:63:31:52:36:55:99:01:d3:ab:28:03:19:
         68:c4:b9:4b:32:ef:39:a7:78:2e:4b:80:8a:aa:a2:e0:bd:0f:
         9c:77:8d:b1:db:fb:1d:e4:54:10:c8:74:d0:74:25:85:d3:30:
         c9:8c:69:e2:d7:03:b7:a9:1c:6c:eb:f7:27:28:37:6d:82:bb:
         d1:80:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:44:32 2026 by rpki-client