Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File:                     hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier:          kYnyUbNKJYns1zZLB4U1nYkwl3WDhfw4pqoGfDgtcTs=
Subject key identifier:   65:14:45:C3:E3:01:1C:9D:A4:9C:4D:2C:99:78:CE:8C:E1:D4:F9:C5
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer:       /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial:       01A0CBFE98E59C1D679743073FEEC3B0CC84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number:          1A7E
Signing time:             Wed 23 Sep 2026 02:00:55 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:55 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:55 +0000
Files and hashes:         1: LcSdh4tedCpmAS17t3yRnbgmEdk.roa (hash: hiklecs4t1l45JXffh9PyN2aehgshHQGA7Lc04Y7log=)
                          2: heKnF0nPw3navL7mvVdrP7ZenfE.roa (hash: SN8nxNReThCLTC+u68FN/Bqg6og3YUjtGA8xvnnpO7A=)
                          3: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: oByAyWVbnGXC0q9NO07dinla3q2nAxy6gcHj4AD2PXk=)
                          4: raFuC_u8FXIkL3qzbF_M7uzS1bY.roa (hash: rn7vhUa/CpBOHdDH6ILdMBUoshBfT4bHqwrkhi/LUAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:98:e5:9c:1d:67:97:43:07:3f:ee:c3:b0:cc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
        Validity
            Not Before: Sep 23 02:00:55 2026 GMT
            Not After : Sep 24 02:00:55 2026 GMT
        Subject: CN=651445c3e3011c9da49c4d2c9978ce8ce1d4f9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:90:c4:91:63:44:8b:bf:4c:05:80:80:0e:42:
                    98:4e:9c:bd:af:12:4d:4e:4f:88:e6:46:87:66:d8:
                    eb:d9:23:92:ab:65:d1:42:a5:e7:36:58:f9:e5:03:
                    bd:c9:31:c9:3e:65:42:0e:78:75:05:ce:d9:dd:97:
                    1a:b5:13:96:32:ff:bf:2a:96:60:11:a5:01:83:80:
                    c7:0c:c1:90:e6:0a:56:a7:78:5f:31:81:79:37:52:
                    2f:11:08:97:47:93:98:77:c2:1c:43:64:e0:6e:29:
                    54:10:71:ee:0d:75:fa:1e:90:a5:9a:76:ee:77:52:
                    2c:bc:92:69:7e:32:79:6f:0c:a0:81:78:e7:77:09:
                    f4:31:44:84:3e:21:36:88:02:4d:4d:90:46:9e:d3:
                    ae:8b:56:db:db:3d:81:1c:f7:6a:d9:c1:a1:30:0b:
                    fd:89:0c:75:ed:2f:2f:6f:98:ed:dd:25:c4:5d:5b:
                    fa:a6:b0:66:70:87:36:85:cc:e6:e5:f8:2d:da:8f:
                    7d:e0:f1:80:8f:be:bb:88:1c:77:aa:c1:8b:4d:94:
                    58:8c:95:73:83:6c:de:72:56:a9:e3:80:52:81:f7:
                    eb:cf:d8:e6:b6:e1:6e:f6:40:4c:c8:18:62:b1:8f:
                    b7:5c:b9:88:c6:38:87:41:f5:aa:9b:93:41:76:a5:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:14:45:C3:E3:01:1C:9D:A4:9C:4D:2C:99:78:CE:8C:E1:D4:F9:C5
            X509v3 Authority Key Identifier:
                keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4c:9a:cb:9d:82:ce:8e:5b:d4:2b:a9:65:6e:e2:5a:99:72:
         3a:30:dc:0e:e8:19:17:c6:00:89:82:46:88:8d:17:51:3c:56:
         2b:09:4b:d2:64:5a:c8:31:fb:40:8a:af:e2:48:99:c3:4d:55:
         b6:5f:37:04:7c:ff:df:8d:70:5e:9c:b2:9f:75:df:74:24:12:
         da:35:93:de:c3:7d:2f:86:8b:de:1a:7a:2c:7d:72:cb:1f:79:
         9e:d0:c4:84:9b:e6:7b:11:84:d1:b1:f3:b0:30:ae:83:ff:4f:
         3d:d5:f3:e6:78:e5:d2:2b:f2:de:6b:c0:25:1d:00:a0:6e:96:
         e4:8d:3e:b1:85:13:fd:10:2c:75:e2:3f:83:e5:41:3d:1a:47:
         a4:10:ac:ca:d0:cb:ad:22:ac:42:11:16:d1:0b:39:41:d8:39:
         e1:3d:47:0c:df:0c:1b:b4:fa:ff:4e:fb:d8:95:fc:3f:d7:06:
         ac:3e:5d:ab:80:8e:71:b0:4e:c6:28:e5:d7:4f:dd:ac:75:c9:
         74:33:c7:7e:e1:5f:05:d0:4e:7e:a7:0f:06:b2:f8:70:db:a0:
         bc:44:3f:b8:dc:55:99:14:01:1a:b7:fc:4d:eb:35:c2:44:67:
         01:92:b4:9a:1b:6d:a7:06:e6:24:97:1a:91:df:e7:a5:01:77:
         f2:3d:01:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:38:05 2026 by rpki-client