Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          QvyTV9u7KLSZ2xgPmJSQSfsuHCKLsvI9btYaMPEoN4A=
Subject key identifier:   1F:E4:3B:99:43:7B:FB:38:0D:1C:3C:55:EC:BB:A8:27:1C:59:B4:98
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       01A0D1249816AD3CF3C3F0FAF10B6223F01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          04B2
Signing time:             Thu 24 Sep 2026 02:00:31 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:31 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:31 +0000
Files and hashes:         1: GA-VcXz1vXl1-W4ySsL5yRbRR90.roa (hash: sabt7kSP6Ub+Pf7PD1DhCfJjvsVteYy09jKtBPh49Ec=)
                          2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: P0AMR64qt9mbzQZ89aOKsr3YY5BvsZVnIvKswig/l9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:98:16:ad:3c:f3:c3:f0:fa:f1:0b:62:23:f0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Sep 24 02:00:31 2026 GMT
            Not After : Sep 25 02:00:31 2026 GMT
        Subject: CN=1fe43b99437bfb380d1c3c55ecbba8271c59b498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:10:8c:4b:de:b4:e6:33:13:36:3d:84:93:
                    96:f7:5d:00:31:4d:12:a0:6b:bf:b8:f2:25:f2:dc:
                    f0:94:cd:3c:16:f3:56:dc:43:0f:f5:2f:9a:36:83:
                    10:13:ae:5c:95:50:e1:5c:12:f2:61:ca:0c:f8:46:
                    ed:c8:22:3b:8f:e2:19:fc:b3:25:e7:87:9d:00:4e:
                    f4:0d:35:7c:4f:b0:d0:e5:44:45:0d:da:85:27:92:
                    fa:1b:bb:dd:66:b7:33:d0:bf:79:da:4a:e3:6e:62:
                    b9:35:f0:58:af:bf:cc:80:96:bf:83:d7:77:22:32:
                    61:aa:04:06:e0:97:9f:35:9f:fe:d6:70:6f:63:25:
                    13:54:e2:2b:e1:2c:cf:ca:d0:22:7e:e5:ab:12:6f:
                    75:ea:e6:75:7b:27:31:00:0a:ed:10:7c:8e:a3:f8:
                    3d:68:b0:46:5d:ce:60:28:04:15:33:6e:ae:7a:8b:
                    65:7a:ca:b3:38:52:eb:ea:7a:87:0b:d2:93:cf:5d:
                    7b:8e:a3:b2:09:12:84:43:01:42:43:e3:4b:7c:f7:
                    fb:e2:3b:f9:74:08:de:0d:4f:e9:d5:69:eb:f9:fb:
                    dc:e6:09:ed:e4:1c:90:12:18:6f:82:eb:31:30:c2:
                    85:2f:5d:c4:d9:3b:ec:9b:99:0c:95:d3:93:d1:45:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:3B:99:43:7B:FB:38:0D:1C:3C:55:EC:BB:A8:27:1C:59:B4:98
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:67:27:ec:36:19:6f:a6:f0:e0:3b:1a:35:21:c0:0a:25:bc:
         b3:2e:1a:5d:70:45:a8:4c:d7:29:19:cb:91:19:9b:8d:96:94:
         e4:48:83:b9:9e:ac:96:ac:5e:8c:81:8c:ff:8d:e9:06:e8:e1:
         4e:88:d9:ea:16:36:38:79:fe:e6:68:65:5c:39:8c:81:bb:22:
         9b:24:c8:40:86:00:9c:05:2f:06:ae:f1:68:ac:50:60:51:d4:
         3a:e0:c8:ea:e1:46:a3:16:bb:1f:a7:30:51:09:57:bf:61:97:
         7e:56:a8:87:73:53:a7:a9:7c:21:08:93:43:9e:ae:25:7e:e2:
         ba:72:e8:70:5d:65:53:10:03:bf:8f:9e:d2:2c:f5:5f:fa:f3:
         a9:8c:db:7a:30:96:7c:e4:4d:f8:5b:ed:a3:f4:a8:9f:9f:92:
         1c:06:c7:dd:ce:63:e8:47:75:f0:4e:1f:ec:46:86:1a:20:8b:
         40:d1:6b:39:bd:55:08:ea:9f:23:a9:a6:d7:4f:17:4e:37:44:
         16:bc:8c:5a:aa:b0:ab:3f:15:e1:51:d3:96:a4:b5:fc:d2:75:
         a0:92:3e:27:08:27:80:60:92:6e:87:ce:19:bd:39:70:3a:14:
         7a:c0:63:2f:e3:35:05:4b:29:50:77:84:05:de:79:88:2d:2a:
         d6:d6:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:24 2026 by rpki-client