Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File:                     HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier:          pqaVht8z5jrSDVGF6VU8Jovm+qyabHDm4bmBvpCWxpI=
Subject key identifier:   C7:57:46:00:35:A9:01:7D:35:6E:03:B7:70:4B:9A:03:66:B1:3E:0A
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer:       /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial:       01A0CF36807344E28C41281E6295F7258076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number:          11C0
Signing time:             Wed 23 Sep 2026 17:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:50 +0000
Files and hashes:         1: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: cHRi2ZqUa+T6gXc3K1l03Rx5wY9ODCxTQpgIhLJ1EyE=)
                          2: XWBsB_cZ5qidLCmlV0HYPquJmRY.roa (hash: K9lGKjaA0sTZUshIhYC2Vc0Nnn9645Zh7HW4fKMC9/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:80:73:44:e2:8c:41:28:1e:62:95:f7:25:80:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
        Validity
            Not Before: Sep 23 17:00:50 2026 GMT
            Not After : Sep 24 17:00:50 2026 GMT
        Subject: CN=c757460035a9017d356e03b7704b9a0366b13e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:0c:e7:a0:3d:6e:21:44:88:75:1c:b0:35:
                    de:53:c4:7d:29:25:0b:e1:a2:5d:23:04:f5:57:d9:
                    e4:aa:7e:33:ab:0a:0b:f9:d6:a5:d8:8b:02:ed:d2:
                    a9:bc:e2:09:81:52:86:f4:bd:34:02:88:5a:8b:bd:
                    6f:68:31:d0:b1:39:22:89:e4:f0:5c:c9:da:f8:92:
                    87:d9:33:5a:b7:ff:45:bc:8d:a8:65:02:ab:6a:6b:
                    f9:05:b5:ba:44:9f:fd:52:92:6d:25:9b:f9:01:b4:
                    9e:2a:95:72:77:76:fb:e2:0a:b8:db:f0:6d:f8:b6:
                    d1:e6:f5:4b:00:9c:74:5e:1b:ee:26:56:88:77:3d:
                    b4:6a:80:b7:aa:ac:43:f5:dc:68:c6:b9:3f:58:53:
                    0e:fc:0c:be:c2:70:54:ef:28:4d:5c:54:1a:6c:cc:
                    47:53:c2:1d:2a:ca:7b:63:4c:b1:70:50:ba:5f:ed:
                    c0:d6:31:b8:27:00:14:a8:dd:67:0a:4b:0f:17:5f:
                    59:9b:1d:ff:f9:10:9b:e1:85:60:8d:43:6b:5a:d5:
                    88:46:e5:80:8a:4f:c3:7d:22:9b:0e:c5:bf:a8:4c:
                    78:b2:6d:66:bb:69:79:d2:73:a6:60:f5:ce:1c:5b:
                    a4:0f:9a:e0:63:25:ed:1b:ab:54:e1:e3:b5:5e:66:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:57:46:00:35:A9:01:7D:35:6E:03:B7:70:4B:9A:03:66:B1:3E:0A
            X509v3 Authority Key Identifier:
                keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:cc:ec:2c:11:7b:34:f3:e3:53:31:b0:5f:ce:21:ce:58:
         fb:c6:82:99:c7:4a:f4:81:0e:2b:a2:4e:af:da:49:49:99:7b:
         e0:fe:ba:14:9f:8c:50:92:83:cc:e9:7d:c6:13:6b:2d:28:b6:
         53:12:6b:7a:f8:3d:82:61:a6:75:cd:85:59:c2:06:2f:d6:9d:
         dc:73:25:dc:bc:41:76:8c:98:ac:a5:5d:1a:53:15:c3:9c:1e:
         de:91:f6:82:a1:93:64:a9:ba:f3:73:de:c9:6b:fb:c2:6f:3f:
         a4:c3:40:cb:dd:93:26:6f:97:93:5b:b6:fd:eb:d9:e9:8a:e2:
         75:7e:1c:e0:2d:67:27:3a:2a:ed:a7:6f:41:2e:e4:5c:ec:85:
         51:90:08:57:ab:4b:f6:f4:13:2c:fd:e1:e7:a8:0a:91:06:6d:
         3c:8d:5e:13:55:c5:d7:e9:08:d3:7d:1e:8e:10:ce:e2:ed:b5:
         f3:ee:62:ce:3b:dd:ad:fe:1c:1f:6b:95:bd:94:c3:e2:46:a3:
         f7:4e:e6:80:1a:82:dd:0f:43:aa:f8:97:89:fd:50:e9:f4:f7:
         cc:73:48:a6:f7:b9:ae:36:9b:6d:f8:31:c8:44:e3:2d:9c:c9:
         0d:1b:4e:89:66:5a:97:2b:96:06:5f:cc:48:4e:58:85:98:9f:
         9d:e0:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:59:03 2026 by rpki-client