Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File:                     hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier:          PtiumnltgF47fo0gzBiFHD/aybuG568k4HHQDkZTVGk=
Subject key identifier:   64:85:6C:E5:BB:17:A1:8B:CB:91:96:7D:94:2A:EA:FA:94:0F:97:59
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer:       /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial:       01A0D124FA96338F4F610CEF6289377FF46F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number:          190A
Signing time:             Thu 24 Sep 2026 02:00:56 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:56 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:56 +0000
Files and hashes:         1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
                          2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
                          3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: gf8QtsGyubjm1x7JzVGES67L11pLBThqG96+Qmx/J+0=)
                          4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
                          5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:fa:96:33:8f:4f:61:0c:ef:62:89:37:7f:f4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
        Validity
            Not Before: Sep 24 02:00:56 2026 GMT
            Not After : Sep 25 02:00:56 2026 GMT
        Subject: CN=64856ce5bb17a18bcb91967d942aeafa940f9759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:62:91:29:9d:aa:c4:63:fb:3b:30:14:6f:
                    a4:92:25:5f:6e:23:05:ab:64:8d:0e:a6:9e:d1:a7:
                    00:7a:e9:35:31:30:11:2f:29:c4:5c:95:10:15:b9:
                    a7:9b:e6:b8:4c:9d:3b:66:b7:9c:5b:69:f5:73:8a:
                    24:0b:4e:58:aa:f3:e9:37:38:61:df:52:5c:66:07:
                    7d:57:c1:f1:cb:fa:cf:fa:26:04:1b:e6:fe:b0:10:
                    fa:2a:5a:6c:43:db:85:86:2d:de:3f:09:7e:97:4c:
                    63:dd:63:a8:35:d1:e8:ca:a2:53:89:c9:a0:13:2c:
                    dd:3d:2d:da:d7:de:c2:95:bc:d0:1f:04:1c:c5:19:
                    15:60:0a:2b:b1:58:02:49:71:ac:c2:0f:40:13:4b:
                    a8:db:10:73:28:9a:30:6c:a0:3f:37:ba:cc:ad:59:
                    93:9a:47:18:ab:fc:5a:c1:a9:77:3b:20:60:6b:61:
                    40:cb:23:1b:ad:32:b3:95:03:80:8d:e4:3b:31:82:
                    6f:2d:1f:e5:64:08:db:d1:07:bb:ba:8a:d1:d9:59:
                    65:63:ea:ea:71:27:da:ed:38:52:07:0b:e7:70:a2:
                    23:04:98:16:40:54:50:eb:c6:2f:69:d0:85:d6:a4:
                    1f:19:c1:b8:d3:d0:f9:d1:3c:77:93:ad:53:85:5b:
                    b8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:85:6C:E5:BB:17:A1:8B:CB:91:96:7D:94:2A:EA:FA:94:0F:97:59
            X509v3 Authority Key Identifier:
                keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f5:56:49:6e:87:44:51:9d:f9:fd:59:9c:da:06:80:8d:3d:
         e5:b8:2f:d0:fd:a0:32:6c:2f:ae:37:8d:28:1a:65:7a:0d:7c:
         bf:96:61:e9:be:31:94:a0:05:40:48:0b:9d:d7:dd:e2:39:03:
         5e:75:3b:a8:d9:df:83:a8:c3:5a:71:5d:7e:bc:1c:b4:53:fd:
         61:50:be:79:26:93:49:ff:e4:5c:82:31:bd:bb:ab:cc:8d:6e:
         23:95:e8:26:0b:e8:57:12:6d:20:08:f9:2e:70:44:8c:d4:70:
         59:3e:3b:4f:6b:cd:66:35:98:e7:7c:7d:d5:fc:dd:c1:5e:8c:
         d7:df:32:ca:25:51:7a:c2:0b:fd:35:40:a0:7a:29:3d:dd:3b:
         a4:74:82:36:df:4f:35:66:74:a5:63:1a:e5:dc:41:ed:35:6b:
         fd:3e:3e:d4:2d:54:8a:5f:9c:90:bd:96:52:07:ac:c1:3f:8c:
         fd:40:51:ab:34:67:0f:ca:55:8a:52:2c:e8:a5:c2:55:48:d5:
         33:0a:8f:96:cb:7e:ba:df:d9:9f:18:8d:95:af:1a:81:26:94:
         57:d3:b3:51:09:4c:e3:ae:ca:9d:5e:ac:6a:fc:b7:6b:5e:05:
         6c:7d:35:36:5d:d9:1d:86:c4:e4:9b:d0:6a:12:4b:57:52:b6:
         d4:e0:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:59:52 2026 by rpki-client