Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File:                     HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier:          O6tRCpUqEAfomuknvNPQlaooZkp9zYIcdIKzpw+UfUs=
Subject key identifier:   CC:05:25:FC:21:54:CD:44:6E:6D:A6:78:C9:A8:7F:4B:A1:93:2C:87
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer:       /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial:       01A0CC6C23FEE5C45EED49174A7F3FC28749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number:          110A
Signing time:             Wed 23 Sep 2026 04:00:34 +0000
Manifest this update:     Wed 23 Sep 2026 04:00:34 +0000
Manifest next update:     Thu 24 Sep 2026 04:00:34 +0000
Files and hashes:         1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: X/Lbg90F8lJEWiMKOJyau8HvTjem92Sau8AD1UqDsV8=)
                          2: JtB-_mP0CPyoUgsFyVWDrEIlud8.roa (hash: egfxT7xeT/hTTg3h54ZByaWRlZbXWQEqw5+/1nELFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:6c:23:fe:e5:c4:5e:ed:49:17:4a:7f:3f:c2:87:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
        Validity
            Not Before: Sep 23 04:00:34 2026 GMT
            Not After : Sep 24 04:00:34 2026 GMT
        Subject: CN=cc0525fc2154cd446e6da678c9a87f4ba1932c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:87:83:c1:fe:99:c4:6c:13:c5:35:56:34:
                    e4:09:e9:44:6e:e8:0b:de:56:79:61:93:db:4e:00:
                    89:c2:18:83:dc:58:7b:48:9e:73:8c:4c:92:5a:fe:
                    8c:9f:d8:1a:c2:72:bf:6a:61:07:ef:de:70:4d:7b:
                    94:93:3e:99:f7:8c:23:5c:06:63:d8:41:96:75:09:
                    85:49:9f:5c:22:ee:77:df:84:46:11:ea:c7:da:a0:
                    90:36:a2:3e:a3:7b:64:31:12:cc:00:ec:f3:94:ed:
                    30:7d:4b:18:9c:fa:d2:72:28:6f:b8:5c:4a:94:8a:
                    60:df:7c:b2:d2:83:ee:b8:0e:a3:4d:87:86:a8:95:
                    5b:88:85:0d:3d:60:a1:d0:73:c3:dd:a5:71:d8:f3:
                    ae:1d:37:c5:8d:28:c3:7f:a3:30:bc:fe:0e:48:ab:
                    83:6d:66:21:7a:38:88:39:89:a7:e9:de:48:72:09:
                    46:12:8e:ba:c9:61:81:2e:90:74:45:30:3b:82:a9:
                    48:79:04:b4:4d:42:fe:9e:41:a0:14:69:0b:3f:9c:
                    e7:7f:82:07:4c:63:33:28:ce:f7:49:8f:df:3c:fb:
                    49:16:d9:f0:da:da:9d:c0:9b:6d:e1:e7:3f:54:d1:
                    c6:93:31:7c:9f:42:4b:8f:cc:e0:f4:a5:43:ca:c6:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:05:25:FC:21:54:CD:44:6E:6D:A6:78:C9:A8:7F:4B:A1:93:2C:87
            X509v3 Authority Key Identifier:
                keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:22:47:15:4f:2c:01:0d:57:f5:d0:2f:7b:d9:0a:ea:32:
         16:d2:fb:e4:6d:eb:33:17:48:b5:61:7a:5f:d7:e0:59:8d:97:
         44:b5:ac:15:bb:e3:f3:fd:aa:d2:9f:d5:44:31:cb:5e:c1:2c:
         31:d1:90:bc:e2:a5:2d:1b:62:a1:71:97:62:75:d5:31:19:30:
         e7:21:b0:38:eb:22:a9:57:35:ac:c2:2a:25:bf:df:d6:cf:fc:
         19:62:67:0b:74:4d:7a:fe:1e:21:09:af:b9:e0:a9:80:ca:43:
         c2:db:cc:c1:e5:27:78:80:8f:78:5e:f7:04:97:12:62:38:4e:
         c1:5b:61:fc:85:31:f0:a2:73:4d:1d:fc:5b:0a:24:84:13:3c:
         e1:3a:d1:43:bc:d6:29:0d:32:5f:e6:8a:16:15:44:0d:23:fd:
         33:67:c9:56:db:ff:d1:d9:6c:36:18:58:85:8d:3a:77:fb:f6:
         02:c8:b5:ef:51:40:48:92:6a:a3:c0:84:62:a0:6a:92:05:c4:
         de:85:7a:e4:dd:83:91:09:8d:05:ca:bf:69:02:48:71:30:87:
         75:52:63:98:f7:24:f2:9c:23:dc:76:2e:b4:1e:ed:7e:0d:b8:
         70:b3:7b:dd:b0:b9:a9:62:3d:ab:6e:e3:ba:5e:a8:b2:a5:ce:
         4a:ed:56:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:51:09 2026 by rpki-client