Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File:                     HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier:          E0kevVJY+aNh1EJWCviWH8ZjGnIE8i6u44CMWXqCTQM=
Subject key identifier:   BA:E5:48:E7:F1:8F:B8:64:A3:B1:AF:FC:B0:37:24:10:33:12:B5:E0
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer:       /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial:       01A0C369251EEFDB884AA6743FDE7E71502B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number:          197F
Signing time:             Mon 21 Sep 2026 10:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:42 +0000
Files and hashes:         1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: JrSp7RT7Cuw9aH4djBJSHecvbVaSbFU0d9/kfKzpN1I=)
                          2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=)
                          3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=)
                          4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:25:1e:ef:db:88:4a:a6:74:3f:de:7e:71:50:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
        Validity
            Not Before: Sep 21 10:00:42 2026 GMT
            Not After : Sep 22 10:00:42 2026 GMT
        Subject: CN=bae548e7f18fb864a3b1affcb03724103312b5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:1c:ff:39:1b:ce:54:f5:83:09:a1:d7:64:
                    08:f7:cb:24:42:11:44:ab:55:4d:c4:84:54:72:b7:
                    cc:94:71:45:dd:ff:ca:84:33:3a:d9:68:55:d1:86:
                    50:2e:26:6b:0b:49:fe:c8:18:c8:ad:0b:9b:ee:8b:
                    7f:fe:db:97:58:d0:3b:18:a1:07:08:99:7e:6a:10:
                    3d:b0:22:ed:49:79:25:bc:b1:e7:91:52:4c:89:e8:
                    2a:d2:ed:1a:17:86:6d:e3:6c:6b:86:24:72:80:9f:
                    42:e7:32:09:8f:cf:f8:cc:95:b9:61:01:61:f6:61:
                    2c:61:66:a9:65:4f:4e:1b:63:4f:f0:5c:5d:97:33:
                    3f:14:ac:53:dd:e7:91:22:50:34:a9:8b:2a:a8:0b:
                    73:fc:6e:6b:b2:40:67:2e:ee:76:f3:9a:c5:d0:27:
                    d5:d7:8a:98:39:01:05:62:da:29:4e:79:e3:24:22:
                    6a:78:4e:25:81:46:d4:f5:5f:49:d7:9b:ef:a7:73:
                    80:f9:e2:75:07:98:61:b4:39:7f:c7:c2:0e:4c:f0:
                    d9:a6:54:a9:cc:1b:49:87:32:cf:7a:71:8c:8f:95:
                    5c:46:b2:b7:11:01:9c:4e:70:0f:c9:d3:f8:4c:4d:
                    35:9e:ba:7d:2c:fd:37:af:cc:de:cf:b8:ae:1b:36:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E5:48:E7:F1:8F:B8:64:A3:B1:AF:FC:B0:37:24:10:33:12:B5:E0
            X509v3 Authority Key Identifier:
                keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:97:60:83:34:f9:65:71:be:59:38:fc:e5:ef:03:f7:00:
         0e:36:aa:0f:70:13:c9:96:1d:d5:0a:81:cb:ab:a2:23:ea:9f:
         be:ad:18:ea:a1:98:17:72:34:c0:90:9e:21:3b:0c:12:5b:91:
         ed:0c:e9:69:d7:72:6f:be:37:2f:a3:36:14:08:b3:58:9a:2f:
         74:4a:27:00:23:d9:42:32:e9:73:b0:67:d5:ba:c1:1f:87:38:
         96:13:71:e0:dc:f7:87:28:e3:20:aa:5e:52:f8:b4:b9:51:e6:
         e8:6a:b1:b6:db:42:69:ef:74:cc:45:44:bc:3c:f1:d1:27:c8:
         d3:6b:54:af:bb:93:e1:c1:72:8e:7e:04:7d:d1:b7:76:94:02:
         ad:a4:3d:de:11:51:9a:23:89:13:10:d5:a6:ce:ea:9d:d7:c0:
         22:4b:a5:61:52:df:67:a8:e4:6c:36:25:99:df:6b:bc:ce:6f:
         b3:32:99:99:2d:00:c7:f8:d7:44:a0:e6:88:ef:67:8a:78:87:
         4c:ba:f4:33:37:d0:00:e0:43:ef:63:99:48:32:8c:35:e7:33:
         3b:48:0f:9c:4c:bc:10:de:be:00:95:22:8e:c8:48:6f:4c:f2:
         07:08:70:19:1b:3a:65:9c:41:59:af:52:3d:e0:22:dc:23:95:
         0a:17:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:52 2026 by rpki-client