Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File:                     HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier:          ukDqw2bqtvOdsth3JalukBOn1YS0mmlkv/9Dh/MtXzc=
Subject key identifier:   67:61:43:8B:72:19:5B:01:73:7E:A2:EC:FC:DB:4B:05:D6:FF:18:0E
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       01A1261DF90EF0C6C8400F741657BBE0E45B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number:          162B
Signing time:             Sat 10 Oct 2026 14:01:00 +0000
Manifest this update:     Sat 10 Oct 2026 14:01:00 +0000
Manifest next update:     Sun 11 Oct 2026 14:01:00 +0000
Files and hashes:         1: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: FSZsulxbp6xwVCTrKT+Kx7oA8oO3Ak4HT11nJEs0n70=)
                          2: WrV4ZemJwrw_kjB05-5Id3wYxlE.roa (hash: eepRF61Uwq1JqMLzpuul90ksZb6fVRDXJtYxt1swjFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:1d:f9:0e:f0:c6:c8:40:0f:74:16:57:bb:e0:e4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Oct 10 14:01:00 2026 GMT
            Not After : Oct 11 14:01:00 2026 GMT
        Subject: CN=6761438b72195b01737ea2ecfcdb4b05d6ff180e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:10:3e:bf:5a:ab:e0:1c:32:3e:ac:a3:fd:
                    54:d4:97:a2:62:c6:29:ff:94:4d:94:da:23:45:99:
                    8c:98:ae:98:a5:3e:1e:b7:f1:68:e0:66:63:d7:e4:
                    c3:13:b5:3c:a4:11:fe:56:f5:55:8d:8c:48:35:82:
                    ef:10:f6:80:4b:89:0e:7d:6e:71:20:8e:20:9d:39:
                    a0:b8:0f:91:18:66:a6:9b:86:e9:15:b7:5b:64:7b:
                    8e:7d:5d:fa:13:8a:a1:8d:4b:12:5d:ec:cc:6b:e0:
                    86:9d:9a:5c:eb:90:b9:c0:25:90:d4:71:46:ec:53:
                    85:3f:98:22:5f:80:39:16:51:35:2b:d2:e5:b4:65:
                    14:61:0f:73:93:50:8d:45:12:59:fb:0a:83:1a:05:
                    90:d3:fc:a3:87:b7:14:03:35:cf:06:5a:84:a0:97:
                    24:99:ef:89:30:3f:37:7b:55:97:22:d9:50:5a:cf:
                    8a:d0:72:93:d8:6e:7c:09:19:10:e5:4f:d1:e1:24:
                    ab:fe:f8:69:84:e0:ac:98:0c:fd:79:37:13:77:26:
                    3c:1d:ea:29:70:7f:4a:6d:82:31:51:e9:02:80:cf:
                    fa:22:c8:ef:d6:10:c6:79:45:b4:d4:e3:12:8c:6e:
                    f5:bc:87:2c:17:64:c7:42:f9:fc:7a:e4:7a:52:21:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:61:43:8B:72:19:5B:01:73:7E:A2:EC:FC:DB:4B:05:D6:FF:18:0E
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:2a:68:b0:44:49:1d:79:c3:ae:73:84:2b:f1:7c:59:7e:56:
         91:39:3a:71:2f:40:c6:72:83:ef:1a:2a:9a:66:71:ed:f3:76:
         c3:66:d9:c3:d7:dc:ed:0a:4f:68:84:87:e0:c3:86:0f:aa:91:
         05:18:81:ed:17:dd:3e:05:28:5c:93:48:78:ba:92:f7:dd:a8:
         bd:6b:53:99:2c:0d:85:11:e0:36:8f:58:82:bd:e6:c1:49:d0:
         9f:a1:2d:34:0f:67:c9:5e:21:e5:dc:5e:ef:b5:6b:8c:10:e0:
         38:98:73:74:f6:c2:31:b5:21:aa:ad:45:84:10:9f:2d:cb:4c:
         68:4b:24:52:e9:55:72:fc:3f:81:48:86:38:6f:1f:62:1c:76:
         97:6a:cd:d4:2a:a2:5d:a4:c5:fc:1a:ef:95:78:40:67:fb:86:
         b1:96:b5:c5:b8:b5:57:00:e2:10:03:ea:33:0a:b6:6d:56:1c:
         d3:ec:d2:6f:08:e0:75:f8:9c:c7:e4:bc:aa:a8:2e:e5:bc:fd:
         74:44:27:9a:ba:19:98:c0:f8:b1:ca:9d:32:95:81:0f:8a:af:
         18:4f:ca:b8:f7:54:18:38:46:9f:8e:b1:36:d1:3d:be:6c:81:
         b2:5a:cb:46:f9:87:ee:54:2e:62:df:20:e4:12:a0:ef:a9:da:
         f2:c9:a5:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmHfkO8MbIQA90Fle74ORbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZmIwODdmZmI3ZjYxY2UxMTNmNjkzNDVlNGQ1MGExMTM4
MDhmZWEwHhcNMjYxMDEwMTQwMTAwWhcNMjYxMDExMTQwMTAwWjAzMTEwLwYDVQQD
Eyg2NzYxNDM4YjcyMTk1YjAxNzM3ZWEyZWNmY2RiNGIwNWQ2ZmYxODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hEQPr9aq+AcMj6so/1U1JeiYsYp
/5RNlNojRZmMmK6YpT4et/Fo4GZj1+TDE7U8pBH+VvVVjYxINYLvEPaAS4kOfW5x
II4gnTmguA+RGGamm4bpFbdbZHuOfV36E4qhjUsSXezMa+CGnZpc65C5wCWQ1HFG
7FOFP5giX4A5FlE1K9LltGUUYQ9zk1CNRRJZ+wqDGgWQ0/yjh7cUAzXPBlqEoJck
me+JMD83e1WXItlQWs+K0HKT2G58CRkQ5U/R4SSr/vhphOCsmAz9eTcTdyY8Heop
cH9KbYIxUekCgM/6Isjv1hDGeUW01OMSjG71vIcsF2THQvn8euR6UiETPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdhQ4tyGVsBc36i7PzbSwXW/xgOMB8GA1UdIwQY
MBaAFBz7CH/7f2HOET9pNF5NUKETgI/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2Et
NjlhYTUzYzY5ZDU0LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2EtNjlhYTUzYzY5ZDU0
LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyposERJ
HXnDrnOEK/F8WX5WkTk6cS9AxnKD7xoqmmZx7fN2w2bZw9fc7QpPaISH4MOGD6qR
BRiB7RfdPgUoXJNIeLqS992ovWtTmSwNhRHgNo9Ygr3mwUnQn6EtNA9nyV4h5dxe
77VrjBDgOJhzdPbCMbUhqq1FhBCfLctMaEskUulVcvw/gUiGOG8fYhx2l2rN1Cqi
XaTF/BrvlXhAZ/uGsZa1xbi1VwDiEAPqMwq2bVYc0+zSbwjgdficx+S8qqgu5bz9
dEQnmroZmMD4scqdMpWBD4qvGE/KuPdUGDhGn46xNtE9vmyBslrLRvmH7lQuYt8g
5BKg76na8smlWA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 21:27:15 2026 by rpki-client