Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File:                     HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier:          YMQS1dcQM4mkfPHBMpNlqhJWespK0hIvB6mexmcz55U=
Subject key identifier:   18:6B:DC:B6:88:D9:5F:46:A6:3F:F7:EA:92:24:36:0C:C6:A1:F4:94
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer:       /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial:       01A0CAB5442D396F33A787E1F4B259C73D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number:          1684
Signing time:             Tue 22 Sep 2026 20:01:11 +0000
Manifest this update:     Tue 22 Sep 2026 20:01:11 +0000
Manifest next update:     Wed 23 Sep 2026 20:01:11 +0000
Files and hashes:         1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: Nu1iNd4EaPnDhESkpv4nSVtY5zwHovcDiho0dbZXrtE=)
                          2: fFVfaPEPvGKjg4kJa5a5tDcfzyc.roa (hash: d3fxlkjjTmTR/qE5MofQAuscWNxHOBVvr2boR3ObEX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b5:44:2d:39:6f:33:a7:87:e1:f4:b2:59:c7:3d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
        Validity
            Not Before: Sep 22 20:01:11 2026 GMT
            Not After : Sep 23 20:01:11 2026 GMT
        Subject: CN=186bdcb688d95f46a63ff7ea9224360cc6a1f494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:eb:98:c1:8b:5e:a3:e7:1b:6f:36:73:46:
                    35:5c:2f:0d:fe:99:d5:73:70:81:b0:de:46:16:15:
                    24:cb:60:13:ae:a9:f1:52:4f:5e:7c:72:e5:01:6b:
                    23:21:b1:af:5f:01:c1:e3:c7:64:82:4f:8a:e8:b0:
                    d1:b0:78:0c:59:c4:a4:ce:53:0b:0d:ae:79:6e:06:
                    1f:bd:86:48:b5:74:b0:90:22:68:e2:f0:f0:9a:7c:
                    5f:c0:08:2f:a3:ca:5e:83:88:c9:fb:f0:da:09:d4:
                    92:5e:88:cf:77:7f:41:fb:d7:c9:74:06:22:1b:e8:
                    8b:57:1c:99:09:fc:8b:fa:fa:a9:68:48:2e:a8:aa:
                    bb:69:3f:09:76:3a:c1:d9:f7:b1:a1:c4:f8:d4:8d:
                    6c:2c:a2:a7:e1:6c:12:b3:8b:26:90:86:98:78:28:
                    1d:88:5d:9d:a3:dc:3c:76:9e:53:e8:ce:95:1c:e1:
                    05:6a:91:ea:1c:bf:4a:09:57:75:0d:ed:a4:b3:45:
                    c5:c8:05:9c:bd:18:cb:7a:3c:66:cc:3a:05:00:97:
                    45:70:3e:45:61:c7:41:85:3c:b5:7c:65:36:8e:b3:
                    cd:35:75:31:a0:76:83:4d:5c:e8:2b:3b:fa:1a:bb:
                    e5:dc:8c:14:b8:c4:e4:15:69:ea:58:fb:7f:75:9d:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6B:DC:B6:88:D9:5F:46:A6:3F:F7:EA:92:24:36:0C:C6:A1:F4:94
            X509v3 Authority Key Identifier:
                keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:03:ba:d1:85:fa:84:c6:8b:37:83:5d:dc:5a:27:65:40:
         e9:bd:d5:67:ab:bc:9e:f1:9f:9f:48:93:6d:df:1b:9e:4c:a4:
         0f:e5:c7:e0:d9:2a:77:50:2f:ca:0d:28:3e:1d:a0:57:20:1d:
         4b:d4:b0:94:a8:f1:86:36:28:a9:6a:b7:61:6d:b1:a0:22:a1:
         87:b4:ab:6f:2f:9c:09:66:d0:7c:5f:0a:ca:0b:b9:2f:bd:9d:
         84:0b:ed:70:a8:7c:47:53:f0:67:19:82:a4:2f:df:82:a1:90:
         c3:71:97:de:c9:00:dc:e8:fa:dd:d9:2d:7c:98:4c:cb:0e:a2:
         fc:0c:56:93:02:f6:2a:d4:8c:9b:68:fb:b6:6d:ca:d2:96:3b:
         e1:c8:cf:3e:da:77:e2:2b:c5:8e:e7:c4:cf:df:44:39:4f:1f:
         6d:e1:c6:6d:b7:20:fc:d5:ca:7e:35:b4:b0:f3:25:a2:30:9b:
         02:38:51:18:0b:2a:3d:bf:15:a1:55:1b:e1:ec:c1:97:f2:81:
         bf:de:ba:de:b5:d0:17:84:55:9e:04:ee:36:0e:07:8a:93:52:
         03:da:0c:b3:88:f9:3c:55:c5:8c:46:b5:42:87:c3:98:47:52:
         94:7b:03:9a:8a:1a:24:0f:2b:d4:a2:7a:4d:e5:2c:df:7d:6d:
         d1:82:c3:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtUQtOW8zp4fh9LJZxz0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmZkMjk3Zjk1NTMxZmViODJjOTY0ZmQ2N2Y2Yzk0MzIw
OTM4ZjYwHhcNMjYwOTIyMjAwMTExWhcNMjYwOTIzMjAwMTExWjAzMTEwLwYDVQQD
EygxODZiZGNiNjg4ZDk1ZjQ2YTYzZmY3ZWE5MjI0MzYwY2M2YTFmNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2HrmMGLXqPnG282c0Y1XC8N/pnV
c3CBsN5GFhUky2ATrqnxUk9efHLlAWsjIbGvXwHB48dkgk+K6LDRsHgMWcSkzlML
Da55bgYfvYZItXSwkCJo4vDwmnxfwAgvo8peg4jJ+/DaCdSSXojPd39B+9fJdAYi
G+iLVxyZCfyL+vqpaEguqKq7aT8JdjrB2fexocT41I1sLKKn4WwSs4smkIaYeCgd
iF2do9w8dp5T6M6VHOEFapHqHL9KCVd1De2ks0XFyAWcvRjLejxmzDoFAJdFcD5F
YcdBhTy1fGU2jrPNNXUxoHaDTVzoKzv6Grvl3IwUuMTkFWnqWPt/dZ1C8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhr3LaI2V9Gpj/36pIkNgzGofSUMB8GA1UdIwQY
MBaAFBxv0pf5VTH+uCyWT9Z/bJQyCTj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDct
ZWY3OGE4YTc2MDZjLzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDctZWY3OGE4YTc2MDZj
LzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpsDutGF
+oTGizeDXdxaJ2VA6b3VZ6u8nvGfn0iTbd8bnkykD+XH4Nkqd1Avyg0oPh2gVyAd
S9SwlKjxhjYoqWq3YW2xoCKhh7Srby+cCWbQfF8Kygu5L72dhAvtcKh8R1PwZxmC
pC/fgqGQw3GX3skA3Oj63dktfJhMyw6i/AxWkwL2KtSMm2j7tm3K0pY74cjPPtp3
4ivFjufEz99EOU8fbeHGbbcg/NXKfjW0sPMlojCbAjhRGAsqPb8VoVUb4ezBl/KB
v9663rXQF4RVngTuNg4HipNSA9oMs4j5PFXFjEa1QofDmEdSlHsDmooaJA8r1KJ6
TeUs331t0YLDhA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:14:14 2026 by rpki-client