Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File:                     HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier:          eBV3V/01E9SGD/fJ+dIhYR6vt6F0ZrleZnBZP1RRFGo=
Subject key identifier:   ED:E4:8C:98:EB:54:95:4B:94:F7:FC:26:F4:D0:7C:FC:2A:6C:B8:53
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer:       /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial:       01A1084B3839746DC50D071D8F0C9D9622AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number:          046A
Signing time:             Sun 04 Oct 2026 19:01:49 +0000
Manifest this update:     Sun 04 Oct 2026 19:01:49 +0000
Manifest next update:     Mon 05 Oct 2026 19:01:49 +0000
Files and hashes:         1: 2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa (hash: M1edUcZNtYk6o/wToAk4z5J0jw/3ZvfQIx1YRru5078=)
                          2: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: FATk+t0Vqt1XPSEaJx8y1eVMh7KNt8CnH5JRkXj6fMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:4b:38:39:74:6d:c5:0d:07:1d:8f:0c:9d:96:22:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
        Validity
            Not Before: Oct  4 19:01:49 2026 GMT
            Not After : Oct  5 19:01:49 2026 GMT
        Subject: CN=ede48c98eb54954b94f7fc26f4d07cfc2a6cb853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:b1:2b:91:d0:a0:5e:33:25:c0:fb:b4:5d:
                    44:52:f9:b4:24:c2:91:28:e9:f0:fe:f4:22:2b:5a:
                    5b:42:3c:5d:cb:22:49:f5:a4:2e:28:5e:bb:73:1d:
                    2b:de:bc:d0:6d:d1:19:c5:12:bb:1c:4c:9b:83:22:
                    d9:19:44:8d:9a:a6:61:81:f7:29:cc:d8:05:7b:0f:
                    85:5d:49:2d:01:8e:8a:52:15:22:98:df:4e:44:7e:
                    c0:60:38:5c:45:8c:4d:b8:bf:2e:54:7b:c8:38:80:
                    8c:17:25:e7:41:3a:51:16:79:ef:d9:44:b9:12:35:
                    c2:00:42:ab:22:5e:9c:a2:c7:95:98:fc:fb:9f:50:
                    f9:e7:64:fc:13:ad:56:7d:44:4f:c8:8a:ed:64:3e:
                    fb:11:ca:90:ff:60:d0:78:01:2d:1d:3d:73:0a:b1:
                    a9:97:74:59:f4:1d:fb:fd:b2:08:45:5e:0d:d5:bd:
                    9e:6c:aa:9a:6a:0c:be:e4:6a:44:46:3b:6a:ce:51:
                    94:5c:79:89:7b:cf:4e:a0:f9:90:b6:56:ee:49:da:
                    77:d3:94:46:18:af:d7:c9:da:7e:5d:c0:c3:62:73:
                    dd:7b:da:fa:f8:16:7f:78:54:c3:e6:c8:60:7d:46:
                    40:24:94:bd:69:fb:af:23:d9:91:6b:7f:22:95:cb:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:8C:98:EB:54:95:4B:94:F7:FC:26:F4:D0:7C:FC:2A:6C:B8:53
            X509v3 Authority Key Identifier:
                keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:07:34:39:02:c1:08:1a:a4:25:48:c3:02:ce:77:d6:98:df:
         46:33:a7:ab:44:28:3f:0a:a5:1f:bb:eb:8b:71:d7:c4:f2:4c:
         57:08:f4:b8:cd:a1:cf:00:ed:c3:68:cc:71:00:23:4f:60:45:
         86:44:81:0a:57:69:1d:9b:55:2b:67:53:a2:94:16:cd:e0:12:
         46:85:60:9f:9e:00:6d:41:87:2b:fb:e8:3e:26:d7:81:68:c8:
         28:f0:9b:d1:52:e6:9f:8c:fa:1c:0b:c2:d5:7d:00:08:a1:05:
         6e:70:05:1f:ec:40:83:fb:8c:52:98:32:53:d2:db:dd:41:90:
         16:73:a3:23:8f:5e:40:a1:74:7f:29:80:52:24:ac:bc:5e:be:
         27:9f:33:d2:d8:d2:47:9d:ed:f3:de:cb:1d:7e:17:cf:4f:6c:
         ea:b0:aa:10:b2:ef:bb:9c:e4:a3:fd:c6:1f:c4:ce:8e:55:93:
         b1:61:4a:73:8f:df:37:0c:a8:b5:d4:08:35:78:ea:f2:a9:d3:
         f2:13:d1:b5:df:af:2d:9a:9d:22:73:0a:3e:76:0f:c5:82:82:
         65:3d:30:ae:2d:44:94:ce:e6:09:e6:fa:df:97:4b:c8:13:9d:
         cb:f5:e1:ec:96:eb:8e:5e:9a:37:6a:78:25:cc:78:74:1c:ce:
         16:b6:7c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 03:17:24 2026 by rpki-client