Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File:                     Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier:          PWED5S4L6agbLE863vPkxrGdfhLzOg3oL+yt4MRGMwo=
Subject key identifier:   46:8B:BB:E3:C7:9C:ED:16:E4:1B:3E:EC:CF:2E:36:7E:41:72:94:90
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer:       /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial:       01A133D9437BDB3824EC43E8444D53224363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number:          13E3
Signing time:             Tue 13 Oct 2026 06:00:38 +0000
Manifest this update:     Tue 13 Oct 2026 06:00:38 +0000
Manifest next update:     Wed 14 Oct 2026 06:00:38 +0000
Files and hashes:         1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: tOuuffiLIhjRQu0ponfIRgUrRF204B8/Ewfs5mBT7Wc=)
                          2: fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa (hash: pVD8HGH2rJXCl52itQj8YwGZtz7maygncTTWGAdWmOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:d9:43:7b:db:38:24:ec:43:e8:44:4d:53:22:43:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
        Validity
            Not Before: Oct 13 06:00:38 2026 GMT
            Not After : Oct 14 06:00:38 2026 GMT
        Subject: CN=468bbbe3c79ced16e41b3eeccf2e367e41729490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:74:ce:da:29:a1:19:9d:71:1c:c2:94:cb:
                    d4:96:72:d0:fe:55:99:63:79:6c:8b:cc:e8:9c:e1:
                    76:f2:1f:98:17:27:e9:16:ad:36:3e:5b:54:58:d3:
                    dc:1d:f3:00:1e:bf:e5:67:71:0a:49:f6:99:4f:60:
                    86:cb:80:3c:50:4b:0e:3e:c5:ff:f1:cb:85:e4:b9:
                    4c:0a:10:6a:d7:4f:d5:7a:7a:62:85:4b:80:ed:c3:
                    7e:eb:97:9d:23:f6:50:2e:33:12:88:48:d4:e4:f1:
                    bc:63:9b:af:20:b9:0e:f3:54:a4:e6:fa:fc:a0:1e:
                    15:1c:e2:f8:ec:a1:df:76:6b:06:81:db:cb:cc:39:
                    64:ea:72:32:ef:9d:75:98:ce:bf:bc:6e:f1:e0:9e:
                    9f:52:da:b3:64:37:6e:11:49:9a:10:30:30:5a:d8:
                    69:3a:91:10:24:03:64:0f:62:15:e4:02:70:60:95:
                    a6:fd:ef:7f:b1:14:65:b9:a9:d9:69:55:8d:f6:17:
                    d8:88:81:ba:05:cc:7a:c0:73:0c:14:e2:36:4c:b8:
                    19:c9:bc:28:ea:29:ed:29:b7:3f:74:87:f3:83:b9:
                    4d:f1:f6:19:f5:4d:42:6c:f1:e3:34:d4:5d:50:0c:
                    30:ff:83:17:18:a0:64:fa:73:ff:9f:9e:b7:e3:70:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8B:BB:E3:C7:9C:ED:16:E4:1B:3E:EC:CF:2E:36:7E:41:72:94:90
            X509v3 Authority Key Identifier:
                keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:5d:5d:dc:94:a9:a6:be:69:b3:cf:43:55:bb:ab:a3:b2:
         c2:a8:b6:0a:52:da:ff:87:76:48:9f:29:55:3f:be:ab:85:e7:
         d1:54:21:48:6c:15:20:db:03:85:1c:5f:a3:c9:26:62:f8:30:
         2b:4c:6d:6f:62:42:e5:6a:ea:aa:45:5f:7d:0b:10:9a:79:9d:
         e1:cd:cc:a3:0d:26:bf:ec:18:e3:98:1b:a2:e9:d6:84:10:02:
         75:3f:47:8d:66:58:ce:30:3d:30:5a:db:01:e7:15:ec:3e:34:
         2e:d9:ca:5e:74:51:42:89:a1:74:ed:c1:92:b7:ca:1e:4e:06:
         15:25:4f:b0:ef:ee:38:3c:f5:ee:b7:c2:7d:c4:90:79:83:01:
         91:1d:0d:46:c1:a1:d2:41:5e:d1:3f:a1:e5:87:57:a6:28:3f:
         49:fb:12:00:82:20:46:d7:b0:f6:c3:99:97:e3:09:6f:e9:2a:
         9b:43:be:46:c8:73:c7:1b:f8:c2:8c:cc:18:31:97:2c:71:f4:
         6d:1d:f4:97:14:de:60:77:81:11:06:d4:6a:44:f0:17:f7:ab:
         91:1f:8a:81:41:b2:b7:60:a8:34:ce:90:d9:ab:c6:fb:63:29:
         b2:ea:6b:68:5c:1d:5a:e5:ef:54:90:8f:ec:58:73:13:b1:ce:
         bf:d5:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:18:06 2026 by rpki-client