Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
File:                     1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json)
Hash identifier:          pOMQiZV9LRnwpgp9LJGv7/sZy6AW+9148ThXEPia84A=
Subject key identifier:   07:C3:84:86:93:32:55:D2:F6:9B:97:7A:A0:18:50:87:80:91:E1:FD
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       01A0C2FB6455F8FA4F8808311194FE717E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
Manifest number:          162D
Signing time:             Mon 21 Sep 2026 08:00:50 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:50 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:50 +0000
Files and hashes:         1: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: 5RoiF2GjW4fdOIuV8WAjajXbEUPNgMZrG8lRsl49LMc=)
                          2: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (hash: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q=)
                          3: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (hash: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ=)
                          4: UcCqMTHisbto-8lkUT_tLgAeR84.roa (hash: MKKos7zvQxC3AHlxEIyIz2TorbEhj+M5Gg1Z5qYM5Vw=)
                          5: dKrxZh5eXZLlr4ulHUj3rX7iLKw.roa (hash: 3Y0TgUH+fONslolgRyWTVgCSVHlc4/LZlKQTJy+uJA8=)
                          6: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (hash: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc=)
                          7: zNwZgS-KWr_tdZQlJYw7r-bncj4.roa (hash: bFzYQzvtRgyI5Sf4GLvJJ0QPWEhrGxWF/aPyki12aFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:64:55:f8:fa:4f:88:08:31:11:94:fe:71:7e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Sep 21 08:00:50 2026 GMT
            Not After : Sep 22 08:00:50 2026 GMT
        Subject: CN=07c38486933255d2f69b977aa01850878091e1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:7d:c0:57:be:86:97:ed:86:fc:db:a7:ba:
                    10:4e:b3:73:95:46:39:c6:6f:45:5d:8e:ee:b6:a1:
                    b3:a7:3d:12:57:54:ae:29:94:d7:10:b6:2c:04:fc:
                    59:0e:e4:35:66:18:84:97:9e:4f:91:c4:9c:60:d5:
                    be:be:19:c3:be:e5:a0:8d:f3:1e:53:d4:8a:3b:79:
                    87:7c:83:02:ba:e6:89:8a:aa:3d:eb:02:7e:a2:a5:
                    58:69:5a:38:fe:fa:93:3a:da:61:31:2f:42:9d:de:
                    a6:1d:9e:81:83:bb:5b:76:39:2b:d3:30:c0:ef:e3:
                    7e:f1:0a:5a:4f:c6:cf:ef:45:3c:e7:a5:d2:d8:fb:
                    eb:0e:16:57:fd:dc:ef:d2:45:07:14:1f:00:99:fd:
                    f5:04:ac:ad:58:6f:a1:09:1d:f1:36:e0:96:23:63:
                    60:ae:b1:e0:ef:03:b3:9a:fe:07:fc:64:6e:62:36:
                    ce:55:5f:72:83:d3:92:42:7c:17:ef:84:40:d7:2a:
                    90:6a:b5:e5:85:80:f3:6d:0a:fa:bb:f6:44:54:94:
                    e2:cd:46:ab:ff:8a:f4:87:fb:21:54:2f:84:8d:f9:
                    36:78:96:1a:d8:09:cc:41:04:2f:ce:fc:3a:36:a0:
                    7e:1b:8b:eb:1b:64:38:08:05:e7:7e:be:7a:ec:cd:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C3:84:86:93:32:55:D2:F6:9B:97:7A:A0:18:50:87:80:91:E1:FD
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:58:fe:9c:76:a1:42:c9:95:6c:a5:2f:ba:64:60:2a:f4:
         73:3a:cc:44:82:4e:da:6c:7f:c1:e9:64:1a:b3:50:14:b7:28:
         eb:47:f6:5a:09:49:fe:0e:c1:d6:c8:94:b1:b4:b5:83:a1:bb:
         48:7c:6e:4c:2e:ab:67:82:6c:82:b1:b5:17:78:7d:af:16:4b:
         7f:2b:25:8a:94:46:17:24:72:cf:bf:56:b8:85:61:e2:65:42:
         8f:36:97:4c:26:ed:51:4c:ab:01:ab:59:a1:9f:f8:5f:93:06:
         43:bd:f9:92:ef:49:74:60:d3:3a:05:f0:c7:71:72:20:69:7c:
         a9:04:34:cc:5f:b9:2a:1b:b4:dd:58:1e:f9:a7:9f:ab:78:1e:
         13:b7:d8:75:e3:3e:03:64:c7:34:db:65:06:ab:78:03:3b:2f:
         95:7b:d9:48:83:1b:aa:d7:86:bb:f2:28:ec:b2:73:c3:e8:af:
         ba:a4:48:d9:69:b6:2b:42:c9:7a:83:fa:47:58:6a:fe:74:f0:
         86:75:f7:ba:67:68:61:21:9a:29:88:01:11:cf:b1:46:fe:de:
         4a:8f:c2:6a:2b:6b:d6:8a:aa:9d:ce:2c:f6:2e:35:9e:2f:01:
         23:dc:7b:3d:df:8b:70:82:87:b7:cb:50:d0:75:ca:4e:05:7d:
         dd:71:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:57:26 2026 by rpki-client