Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File:                     HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier:          DgL9VgFmnaFIRmwjrmBNtinKLg2OczhVtyCRXb5L2fU=
Subject key identifier:   6C:10:60:6A:A0:86:5E:78:F4:30:A5:12:4A:62:76:C8:E4:96:1C:42
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer:       /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial:       01A0D34A77F0023475AB81958235C0C78E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number:          17B2
Signing time:             Thu 24 Sep 2026 12:01:07 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:07 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:07 +0000
Files and hashes:         1: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (hash: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c=)
                          2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: q9hFr0+wl0oJUMO+DOlYOk8Yh1FslCdTlLeQG9/e4a8=)
                          3: lJxYVzr-KS-fYsC57OKvflP8A4c.roa (hash: 4pvbPMsGzdgVlC585Dyoz1kyokZkz2DdP27jl7Yydb4=)
                          4: r-1SzrZjoEXcWaVFk74aF23TjJ0.roa (hash: sRjFv0mWTbb1HZj7c7GM888be2VPScRA9imdmTy3Guc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:77:f0:02:34:75:ab:81:95:82:35:c0:c7:8e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
        Validity
            Not Before: Sep 24 12:01:07 2026 GMT
            Not After : Sep 25 12:01:07 2026 GMT
        Subject: CN=6c10606aa0865e78f430a5124a6276c8e4961c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:65:68:eb:b8:1f:db:2a:f5:4f:37:9c:b9:
                    f0:08:02:1d:97:11:f7:fd:9e:89:06:bc:0d:3d:40:
                    47:2e:47:31:45:fe:a8:d8:cc:13:d4:ba:57:65:eb:
                    e9:6a:d9:0f:13:c0:e9:2b:28:58:14:2d:e7:1f:bb:
                    a9:e2:e8:f7:93:28:f6:49:e7:9b:ff:96:7b:17:b6:
                    65:cd:e9:08:97:c7:eb:53:cd:1d:5c:89:12:ed:00:
                    08:24:ce:db:93:30:6a:0f:c2:ba:4b:c3:34:9f:2c:
                    89:d3:d4:77:32:1f:6d:28:48:fd:71:3e:7f:1a:6a:
                    3a:2d:96:9a:f4:ac:e9:ef:0c:ba:58:54:6f:00:57:
                    d2:92:d2:76:c4:5a:3b:4e:95:4a:d1:ac:53:de:98:
                    ed:42:b6:4a:42:9a:d1:d3:a9:a4:af:64:df:98:d5:
                    03:bb:92:21:bc:24:6f:83:34:68:e0:89:f0:18:ef:
                    72:ef:2e:6b:98:6a:f4:d3:d9:c5:43:10:c9:2b:f2:
                    89:1d:b7:2e:86:b7:1d:7f:8a:16:16:40:f8:75:5a:
                    ca:b0:2d:f1:d2:89:ff:28:17:ab:f1:eb:eb:f8:a0:
                    8c:3d:70:cd:2f:17:01:2b:8e:c7:1d:83:f3:18:e0:
                    7c:38:55:59:92:98:86:1e:bb:33:f6:5e:46:ec:f5:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:10:60:6A:A0:86:5E:78:F4:30:A5:12:4A:62:76:C8:E4:96:1C:42
            X509v3 Authority Key Identifier:
                keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d0:78:68:29:d2:e7:4b:36:39:ef:49:5a:25:88:57:92:a8:
         d2:78:f7:d3:f6:8a:45:e0:3b:e0:c7:50:d3:cb:78:96:30:2b:
         14:d3:8f:11:4e:2c:fa:50:e3:2f:41:84:f9:d8:73:fa:eb:91:
         ae:12:c9:f5:8e:e4:21:5c:ab:b9:05:39:d8:d0:21:b8:b6:71:
         88:32:82:90:31:cb:48:57:80:8e:8a:b8:99:69:ab:90:e9:27:
         55:2d:b8:cb:7d:4b:f4:2d:f9:f5:1b:6e:07:5b:be:f7:6d:23:
         b4:cf:a4:c4:05:ff:e8:df:1c:ca:29:19:ea:a7:da:25:48:e7:
         9e:bc:ca:97:63:5b:1d:ac:3e:92:49:67:5e:8e:9b:3d:e1:67:
         c0:66:81:d9:cf:24:81:69:e3:55:76:64:02:76:b3:10:d4:88:
         15:b2:5d:30:c5:80:aa:9f:50:67:4d:4d:74:20:b7:ef:a4:14:
         25:64:fc:ad:b9:9f:2f:87:a8:46:0a:72:1a:a4:0a:d8:ef:c9:
         75:67:fa:e6:c5:6a:ed:23:58:82:d2:a3:dc:fd:1a:02:21:f3:
         d8:07:bb:53:93:93:05:1e:5c:f4:b3:7a:6c:fd:34:c4:4c:3e:
         13:83:59:bc:0f:cd:3e:fc:38:09:7a:65:f5:e9:5a:e3:bc:59:
         e2:34:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:34:33 2026 by rpki-client