Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File:                     HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier:          7457eebDfm3rbyAxXJtwfhS5vzvOwRrlz/geJ5gddTQ=
Subject key identifier:   91:04:77:E4:8C:C7:58:BB:D3:7C:B7:EC:5F:C8:1A:EB:EF:D4:DA:B9
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer:       /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial:       019CAFECF2D89D56E90EBF44E0336A3B66A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number:          03FD
Signing time:             Mon 02 Mar 2026 19:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 19:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 19:01:07 +0000
Files and hashes:         1: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: EuNkCt2iAXq3iIes2UgArSEgf+aAx1hmqpPFrjeO24o=)
                          2: Q9htSrwG6pkTTK4J8GAyJuvwEME.roa (hash: X86U45F7zuolSOXKOHxqC0QODorNzo7dvfR/mN9i/fw=)
                          3: s5Tf9Er97Itqjoj6gqrk-vynCFo.roa (hash: a498PFlcS5thKhXutLYebI+i2DuF8/7C5m6zZZ7mAe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:f2:d8:9d:56:e9:0e:bf:44:e0:33:6a:3b:66:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
        Validity
            Not Before: Mar  2 19:01:07 2026 GMT
            Not After : Mar  3 19:01:07 2026 GMT
        Subject: CN=910477e48cc758bbd37cb7ec5fc81aebefd4dab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:57:20:a9:3a:fa:a6:6c:49:60:58:71:04:
                    22:54:14:76:52:31:03:71:30:c3:75:33:e3:0f:f1:
                    3b:b8:51:b7:90:cf:fa:5f:5b:d5:aa:67:04:d6:95:
                    27:14:21:a2:6a:e0:31:3a:08:88:04:50:c6:c4:b4:
                    6e:61:b3:ab:73:da:42:cf:4f:3d:98:69:ea:75:f7:
                    1d:db:57:45:11:46:a7:96:85:00:9d:2c:38:8f:c3:
                    26:d3:0c:be:8e:9a:c5:b7:0d:d8:14:ec:6d:2b:13:
                    f2:65:d5:27:90:7f:ae:b9:d6:37:7d:ce:cc:eb:e6:
                    8d:20:88:26:77:9e:fd:cc:d1:0b:3a:e6:35:dc:39:
                    66:45:9c:a0:dd:4b:5f:c7:ae:b0:27:51:eb:99:ce:
                    f4:90:81:17:87:93:e3:b1:1a:05:14:20:c1:60:3c:
                    a3:9f:42:5a:3a:06:77:4c:4d:92:12:6f:db:63:2d:
                    db:57:47:f6:c3:15:5a:7e:15:24:10:58:48:07:6e:
                    3b:8d:67:8a:35:2f:4f:26:ab:04:e9:2f:ac:a2:eb:
                    12:d8:e6:ea:86:1a:a0:32:e2:bf:54:9b:f9:59:c7:
                    2f:11:78:25:43:b7:0d:13:f4:55:f4:a7:9e:1b:8b:
                    af:11:a4:93:23:c2:34:97:5f:1e:90:f9:29:98:19:
                    5c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:04:77:E4:8C:C7:58:BB:D3:7C:B7:EC:5F:C8:1A:EB:EF:D4:DA:B9
            X509v3 Authority Key Identifier:
                keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:75:66:be:2d:d5:09:49:99:e6:6a:a3:9c:84:07:48:3b:a9:
         a1:fc:62:6c:3a:70:4d:b1:44:a8:ca:1b:17:d6:a6:50:24:08:
         05:dc:f3:fd:20:cd:39:f3:30:6a:5b:8d:9a:eb:3b:8e:f4:dd:
         cd:7d:11:79:59:d1:85:11:9f:58:df:3e:cb:ce:24:57:df:a5:
         4f:3f:30:27:18:74:95:4b:a2:f5:a5:74:64:b2:de:31:52:f6:
         45:b1:2e:7f:65:50:f4:7c:71:06:b8:8e:58:71:80:54:7a:01:
         13:f2:df:c1:68:9a:5a:2e:88:b7:ac:b0:df:31:e2:9b:83:3f:
         30:65:d2:aa:76:32:b4:18:89:2d:62:28:50:28:57:b1:e8:63:
         41:38:06:7c:2b:d6:4a:53:46:eb:0a:b0:0a:85:1a:9c:bb:ca:
         3d:27:5b:c6:fa:61:16:94:95:c2:6b:c7:42:89:9c:3b:63:6c:
         c0:01:fa:dd:2b:9b:45:cd:fa:ca:54:80:63:ad:34:29:70:df:
         22:f0:eb:57:e3:c9:37:0e:ef:4f:bd:fd:1b:57:bc:16:e1:57:
         39:7c:82:a2:20:6f:7c:8c:7c:8a:6a:ed:fa:cd:70:96:7c:f3:
         3a:15:5d:31:57:68:c2:0a:47:b2:96:e8:5e:6a:9d:75:d2:c8:
         f4:49:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:13 2026 by rpki-client