Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
File:                     Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft (raw, json)
Hash identifier:          8ZZY3WPzEd/0Ep5iPyv3qtZi3pwE0PHe6Bq7H3XJaao=
Subject key identifier:   74:10:C4:8E:CA:34:82:A9:3C:94:19:84:32:DE:33:4B:CA:8A:30:2A
Authority key identifier: 1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61
Certificate issuer:       /CN=1ede33150c1d268dae3b04d2aa69e30430816f61
Certificate serial:       01A0C47B646AC292CF977F5C56BA9FB0A556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
Manifest number:          DF
Signing time:             Mon 21 Sep 2026 15:00:15 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:15 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:15 +0000
Files and hashes:         1: Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl (hash: 91K+rLCEdAu8ZMUN/6RqSFdJUuulbwvxq9sO6vzmSKk=)
                          2: nOWw_Lrr2bgT8qlKsyD4_Yimth4.roa (hash: 6zSk/eu9Fh0Y0k4njwXKHhSTfWBnk84TWmm0U218WXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 15:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7b:64:6a:c2:92:cf:97:7f:5c:56:ba:9f:b0:a5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ede33150c1d268dae3b04d2aa69e30430816f61
        Validity
            Not Before: Sep 21 15:00:15 2026 GMT
            Not After : Sep 22 15:00:15 2026 GMT
        Subject: CN=7410c48eca3482a93c94198432de334bca8a302a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:5a:e4:25:56:b8:e0:62:4b:b0:23:ef:48:
                    e5:17:f9:ba:ba:c5:33:2f:59:65:c8:e0:14:2a:c7:
                    fa:86:3d:80:a7:0f:8f:01:7d:96:e0:28:de:e5:cd:
                    62:5e:46:d6:ef:ab:92:15:81:4c:2f:c4:97:23:9a:
                    a2:34:77:c8:d4:90:71:5b:7b:0a:32:95:54:04:38:
                    3c:7b:d6:38:8f:a8:13:af:00:66:a9:d3:8c:cc:24:
                    fc:3b:7d:bc:d7:48:13:89:d9:db:83:9f:85:a4:3e:
                    9c:6b:71:52:9d:4b:c4:89:b1:40:3a:3f:ed:d7:dd:
                    9a:06:0f:a9:eb:cf:d0:81:6c:7d:0e:fb:46:00:c9:
                    6f:e6:f6:c1:8f:c3:a1:cd:11:c7:00:53:d6:2e:cd:
                    3a:53:f7:df:ae:c3:6f:c2:7a:c8:aa:22:5e:07:f7:
                    8c:34:c0:c1:41:b7:d8:c6:72:ad:67:bb:a7:eb:af:
                    d7:0f:50:75:e1:dd:9b:2e:dc:1d:9c:1f:93:1a:2c:
                    dd:de:99:db:8a:d2:c6:83:6f:c9:e4:32:ab:9e:ed:
                    02:ad:50:92:53:5d:de:bf:73:c5:f0:80:59:b3:0e:
                    60:bd:a6:ad:bf:34:45:15:0e:22:d8:b4:b7:5f:4d:
                    d3:f5:a3:02:01:a9:11:5c:49:57:3a:46:0f:b8:2e:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:10:C4:8E:CA:34:82:A9:3C:94:19:84:32:DE:33:4B:CA:8A:30:2A
            X509v3 Authority Key Identifier:
                keyid:1E:DE:33:15:0C:1D:26:8D:AE:3B:04:D2:AA:69:E3:04:30:81:6F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a9bddc-450d-4e8b-843e-159b520f884a/1/Ht4zFQwdJo2uOwTSqmnjBDCBb2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:52:b9:09:ac:e9:c2:02:d1:95:d7:98:05:9a:26:48:0a:6f:
         57:99:7f:27:7d:2b:16:c9:89:44:47:43:c1:66:d5:77:b6:d2:
         49:fc:b7:21:6c:1c:22:1a:79:70:ee:2d:3d:41:f9:2c:c9:6b:
         93:ba:4f:85:3e:b9:e5:4a:9f:84:b9:f1:1a:dc:37:f7:f7:9f:
         32:36:be:2a:c0:75:1a:c3:c6:c1:d0:f3:e5:1e:29:90:bb:04:
         65:01:d0:63:b3:23:e8:48:ad:71:00:7f:8e:b7:e4:70:36:5a:
         75:98:79:c9:b4:a8:46:4a:4c:a6:48:f2:34:4b:79:1d:15:01:
         26:48:45:bf:06:06:80:35:a1:69:c8:49:f7:37:60:2d:8c:c8:
         80:cd:2d:f9:a5:b2:63:64:af:ba:3b:1d:b8:be:8f:af:ec:bb:
         cf:9b:27:6a:46:26:3e:26:52:e2:32:c6:01:0d:33:60:64:5d:
         89:42:89:ec:02:26:1a:cf:04:62:bf:ba:a3:c9:f8:e0:c6:79:
         a8:58:32:54:e2:e0:58:29:a0:0d:7b:30:80:8a:90:27:43:c6:
         8f:d5:7d:9c:53:97:3c:5d:65:a0:19:61:70:9d:ad:83:e6:6d:
         95:09:4c:98:17:25:c9:7b:7a:ef:f2:87:46:8a:25:28:48:35:
         e4:77:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:14:52 2026 by rpki-client