Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File:                     tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier:          /2Oz0xbM4KkFLQsPF6s5ddaNZYttWcXo5/dMXdFHCYQ=
Subject key identifier:   54:48:24:1D:E7:01:99:C1:DA:26:9A:CD:47:A3:54:27:64:2D:D4:9F
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer:       /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial:       01A0DBDFF1FF7B24B98EB3FA87C031FC4AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number:          1799
Signing time:             Sat 26 Sep 2026 04:01:21 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:21 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:21 +0000
Files and hashes:         1: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (hash: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA=)
                          2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: 1Mp0FPX/PRYPqaIA9Qz+qItTW65g4BiY1R0S6Ghqeqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:df:f1:ff:7b:24:b9:8e:b3:fa:87:c0:31:fc:4a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
        Validity
            Not Before: Sep 26 04:01:21 2026 GMT
            Not After : Sep 27 04:01:21 2026 GMT
        Subject: CN=5448241de70199c1da269acd47a35427642dd49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:dc:b2:eb:8a:1f:a1:6c:e8:ae:cf:86:5b:
                    33:a7:98:98:9e:55:2a:6d:e0:6d:fa:c8:40:fa:87:
                    6b:f2:5c:df:08:c8:76:c4:91:3a:c4:bc:de:77:10:
                    c9:a3:af:f4:36:72:4d:18:4c:ba:38:3f:6e:9d:5e:
                    39:9f:01:0a:a3:28:4f:0c:b4:3c:f0:7b:a2:3c:35:
                    6f:9b:16:cb:36:12:58:5e:ec:0b:9a:f3:f6:75:72:
                    4b:9e:54:5e:47:b7:0b:00:cc:12:bc:52:54:12:b0:
                    6e:9e:10:94:f7:4d:9b:d1:62:f0:6a:7f:c3:10:9f:
                    62:e1:e8:3d:64:18:4a:bb:77:5a:99:02:c9:45:92:
                    19:b3:eb:0d:a8:d4:19:1c:27:0d:52:a2:f7:39:bf:
                    aa:36:71:48:6f:66:4f:54:f2:18:df:71:95:8f:a3:
                    14:aa:8b:ae:65:8e:48:2e:78:a2:1f:4d:79:11:be:
                    be:23:11:4d:97:37:89:d1:83:60:9c:1a:79:21:21:
                    f6:bf:5c:5f:31:3f:7d:19:14:33:ed:c0:09:ab:c0:
                    1a:93:f0:a5:cb:fa:7c:ff:1d:c6:c5:1d:c6:9a:3a:
                    17:d2:7a:a2:16:1d:09:48:15:04:3e:bb:1b:5d:7a:
                    f2:40:a7:cc:46:0c:81:b6:89:d9:71:e8:7d:4e:f3:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:24:1D:E7:01:99:C1:DA:26:9A:CD:47:A3:54:27:64:2D:D4:9F
            X509v3 Authority Key Identifier:
                keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:87:b2:1d:6c:1b:a6:d0:d2:2c:d6:cb:d7:66:c2:3f:2e:8f:
         e8:d1:71:36:48:e4:50:9a:ab:5d:ed:b7:71:3a:05:ee:bf:f3:
         0d:49:f2:fc:8d:b9:a0:af:7d:f4:a7:a1:bd:b6:13:e9:4c:c5:
         f7:71:4a:f2:85:71:e5:7b:96:6b:07:4e:4a:e5:31:7d:58:6f:
         75:57:33:0e:a0:65:d5:a9:37:eb:cd:1c:92:c2:c0:41:93:3d:
         15:92:eb:1f:d3:f0:c7:79:85:77:9e:be:11:89:c3:5b:e7:82:
         22:c9:11:4d:c7:b6:71:1e:bd:8c:04:0d:a0:1b:f0:f7:54:ce:
         be:94:61:b8:d0:8d:50:2e:9a:64:a8:e8:a2:16:ba:4c:20:48:
         c3:2b:62:12:0c:aa:a7:52:8a:81:75:6e:2e:79:8e:f4:bf:29:
         8f:b8:5d:01:2a:a5:d1:91:e7:e1:0d:53:79:b2:f5:93:f6:af:
         6c:e1:45:49:2f:6d:8c:66:2a:8e:11:cd:2e:8d:f8:d7:51:59:
         fd:d7:e4:4c:5f:f5:f4:28:9a:a6:70:40:d7:81:aa:36:45:22:
         4a:1f:2b:a9:45:5d:bd:b6:16:9d:58:8f:56:40:29:6a:c2:91:
         a0:09:33:56:87:1e:aa:1d:25:41:61:fd:78:f3:4e:34:c4:9d:
         d7:d9:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:13:34 2026 by rpki-client