Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File:                     hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier:          G0nNboh0WKM7nC7Wig/z8mQFdQKxxLVlo6LWq+CufXc=
Subject key identifier:   B3:17:2C:06:13:94:42:F7:18:EB:CB:60:C7:4D:81:DF:9E:70:AD:E6
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer:       /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial:       01A0D87261F9004AD4F6451F75447E816A21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number:          0B2C
Signing time:             Fri 25 Sep 2026 12:02:49 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:49 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:49 +0000
Files and hashes:         1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=)
                          2: 8CXXxXOl_TgN0Sp_A7Pbzfq6fKY.roa (hash: x6lpEzFYhwFVijSBlfFL06mSEvzg6Wxii04ehpDZw4U=)
                          3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=)
                          4: GW4dInsub7k2BztNc9KO0RXqd4A.roa (hash: IMiWrs6n4JNtZ7SiOWqNyYDbPpDBAplDzPrQ8pcJs/g=)
                          5: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: AVUhKryYOvS4GkOQqgLP3ku6msKrgNOia5FNOwsWpmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:61:f9:00:4a:d4:f6:45:1f:75:44:7e:81:6a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
        Validity
            Not Before: Sep 25 12:02:49 2026 GMT
            Not After : Sep 26 12:02:49 2026 GMT
        Subject: CN=b3172c06139442f718ebcb60c74d81df9e70ade6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:d6:a0:b4:6a:8c:c3:dd:7e:93:fb:ea:56:
                    57:20:c3:75:37:c8:7f:e7:38:e9:93:e5:f6:9d:46:
                    24:f4:9e:49:17:80:ca:46:68:44:56:c0:9b:11:3e:
                    12:22:66:52:3d:ca:25:06:39:e7:f8:e2:85:ba:14:
                    83:51:4e:5e:12:9c:b3:a4:bf:48:e2:f7:90:91:48:
                    2d:fd:ab:e0:5e:ee:7b:1e:d9:8d:07:e3:3b:7e:5b:
                    c9:e8:77:1b:09:1d:58:cc:b1:c0:8a:3c:3e:86:bc:
                    0c:01:c3:44:e8:5e:10:5b:20:4a:86:f1:7a:af:7b:
                    88:22:7f:c0:32:4a:a8:a5:55:84:aa:52:4b:80:a9:
                    22:7d:61:1a:7f:7c:68:b6:e1:96:40:86:4b:dc:e2:
                    99:e5:4c:90:a8:23:19:86:92:81:a8:05:2d:de:ff:
                    dc:c3:9e:09:4b:82:ed:ba:3e:5b:f4:de:55:0d:9f:
                    63:69:4e:c4:85:31:dd:5b:f8:eb:7b:1d:e3:05:e4:
                    dd:fd:b9:f3:7e:46:27:ca:78:d8:6f:cd:d9:53:1a:
                    ad:e6:63:06:f8:f5:1e:a6:ae:1d:72:2d:0e:04:98:
                    72:87:5b:52:f3:ab:80:88:22:92:3f:47:9c:a6:92:
                    8d:fc:5a:74:80:63:e6:b0:04:d8:95:7c:49:28:f5:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:17:2C:06:13:94:42:F7:18:EB:CB:60:C7:4D:81:DF:9E:70:AD:E6
            X509v3 Authority Key Identifier:
                keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:83:54:d8:c7:de:ac:f2:fd:cd:36:72:13:3a:38:bc:48:32:
         71:93:13:59:90:78:0b:a0:79:fe:25:e4:38:cf:c4:51:76:59:
         67:34:f9:9c:fa:3e:52:7d:fe:d8:30:f5:fb:53:4e:82:ba:b6:
         6b:7e:52:87:e2:8d:bc:68:2d:1b:ef:92:47:74:75:46:ab:86:
         d8:96:cb:89:4f:51:b1:5d:dd:bc:e2:71:bf:ce:d9:ab:49:de:
         6d:98:5f:42:91:76:f4:9c:e5:28:23:f9:d7:68:90:7b:74:21:
         4a:54:4d:d3:9c:a7:67:5b:9a:05:4f:b9:e1:c5:6e:42:fb:d1:
         70:30:4e:db:e7:aa:64:54:2e:6a:58:a6:05:b9:1e:8a:1e:45:
         18:8e:0f:c3:a9:00:65:10:99:84:e5:c3:98:56:2e:19:30:ae:
         6c:ba:4c:be:c5:b1:30:28:03:df:ae:16:f1:dd:8b:1e:7b:93:
         0b:7c:7c:30:b9:3a:e7:bb:20:47:29:a1:23:f9:5d:74:e2:3b:
         ba:26:99:17:77:a6:f3:92:05:a6:80:02:30:3e:40:5c:50:4f:
         50:0a:d8:2e:d9:87:39:f2:61:6f:61:fa:a3:bd:10:06:ed:1d:
         b5:e4:67:36:b4:e0:0e:93:8e:63:4a:12:2e:d8:dc:a2:60:06:
         4b:80:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:26:20 2026 by rpki-client