Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File:                     HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier:          aMseBJh9DWEiv3AeBkq96Vo/5vQmrjBLdvXflggS9Eg=
Subject key identifier:   17:44:66:A9:3A:A7:BD:CB:0B:5D:74:BC:61:74:CF:8F:46:91:79:A6
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer:       /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial:       01A0D91771472C6629B6B16F705D93C63163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number:          1A74
Signing time:             Fri 25 Sep 2026 15:03:07 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:07 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:07 +0000
Files and hashes:         1: GzWcoTtAUqi5IHJ21cRxIUTLGpc.roa (hash: AGr5HxX1J7ElW4g5zJTR1ojXT/07CVW4IMiNxRldrY4=)
                          2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: 2zMskJ/V8mpDf6CZF/XgyF4MpVUMFglqh4PTG6SZ95k=)
                          3: LcM90VNnvvV-Cm1OaIsrEHhQa8g.roa (hash: xXnlrcw8FbAmWQ6ks2MamfhjxI8QiO91NWqPRN/S9Bw=)
                          4: eHc6pv_nsOEvOj1b6H0UUy3Hz5g.roa (hash: 0jFiwjosF+a+C3GZzSfiQX91cGdMln4C3x+2DMdzk0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:71:47:2c:66:29:b6:b1:6f:70:5d:93:c6:31:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
        Validity
            Not Before: Sep 25 15:03:07 2026 GMT
            Not After : Sep 26 15:03:07 2026 GMT
        Subject: CN=174466a93aa7bdcb0b5d74bc6174cf8f469179a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:6c:89:82:df:84:85:e4:da:7c:b4:81:81:
                    9c:78:e3:f9:33:d4:a8:32:4c:57:ae:38:a5:39:42:
                    b8:16:5c:d8:ae:8f:d9:3b:14:7f:5a:cc:47:5b:27:
                    2f:2c:af:0f:d9:a7:06:13:ae:72:d1:05:6b:82:2b:
                    05:d4:fb:fc:a4:4c:b6:11:63:c6:31:fd:69:a2:dd:
                    9e:26:69:56:b2:af:58:7b:6c:1c:59:c9:82:eb:b3:
                    86:0a:6a:e5:ed:06:49:d4:8b:96:6d:bf:bb:ba:ff:
                    3e:51:1a:17:20:2b:45:5c:55:87:09:f4:82:14:4f:
                    e3:7e:b9:04:89:b6:a6:b4:e9:fa:8a:d7:f9:09:ed:
                    99:3c:96:20:d2:74:f1:20:5c:a4:1c:d7:4b:38:ea:
                    fe:87:a6:e2:b8:ca:40:bb:2d:0f:87:25:53:0c:bb:
                    54:06:7a:29:49:7c:73:e1:42:c7:0e:32:14:67:8a:
                    f2:a5:97:f8:de:18:2f:fa:ce:de:e5:2f:02:8f:b9:
                    df:5f:44:c3:9a:03:da:07:c0:02:c0:4e:61:94:6c:
                    33:9c:44:9e:23:f4:91:c7:d1:72:4e:b7:31:ff:e5:
                    6e:d5:be:61:20:a1:5e:97:93:2e:55:72:2a:18:8c:
                    1e:b6:7b:91:58:75:ef:ee:21:92:41:0a:a4:30:b0:
                    85:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:44:66:A9:3A:A7:BD:CB:0B:5D:74:BC:61:74:CF:8F:46:91:79:A6
            X509v3 Authority Key Identifier:
                keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1a:a4:2d:16:a3:34:24:d1:63:b3:06:a3:21:69:9f:a5:c3:
         d3:e3:d7:43:e0:fb:a0:d0:7a:4b:5e:e1:f3:38:65:09:39:ec:
         de:1f:49:c5:4e:9b:ec:db:11:a4:d4:f9:78:53:ea:72:93:60:
         32:60:4f:ad:68:51:3c:08:20:29:f8:f2:12:38:ca:2b:b9:91:
         d7:a4:93:02:0d:83:1e:3a:5f:74:2c:fe:38:0f:77:10:4e:a2:
         7e:66:6c:da:5f:3b:1b:ce:a5:7c:0e:4b:89:9a:c6:59:77:ee:
         bc:33:3f:a8:2d:65:ec:4d:f9:6d:80:bc:14:1e:e7:f3:e8:8d:
         85:79:71:0c:c3:84:bf:c3:1b:1a:e2:a7:b5:b8:e3:38:e7:fd:
         c8:59:38:a0:dc:f7:e7:7f:22:a5:e3:2d:06:4a:55:3e:30:44:
         06:4f:77:8b:73:36:b2:76:a2:5a:aa:63:a4:27:d2:fe:23:6b:
         42:be:d0:34:68:1c:d2:7b:97:b4:b3:2f:57:f2:d1:3f:82:78:
         a4:76:6d:42:33:f9:8b:e1:fa:31:f4:d0:19:23:aa:05:4c:29:
         8b:19:ab:b9:56:8b:ce:28:e9:9d:dc:2a:46:00:14:d2:4b:12:
         c9:47:81:7e:aa:f0:6e:d6:b1:38:c2:64:d1:d9:32:a4:70:09:
         fb:34:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:12 2026 by rpki-client