Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File:                     HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier:          tOsUec+egcKECDjzBtAZ7LqrZJycFBh9raEH+wNSWcE=
Subject key identifier:   73:E2:A2:41:68:2B:D9:F0:94:9D:D0:F3:43:E8:CF:47:12:DB:7B:07
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer:       /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial:       01A0C28D074959FB27710624F3F7ECDC32D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number:          1A64
Signing time:             Mon 21 Sep 2026 06:00:17 +0000
Manifest this update:     Mon 21 Sep 2026 06:00:17 +0000
Manifest next update:     Tue 22 Sep 2026 06:00:17 +0000
Files and hashes:         1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
                          2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
                          3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: 3S9Yw3Eh6klDoRp1+f30Vo4Zdz4kpuzyzqU3dxMyOt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:07:49:59:fb:27:71:06:24:f3:f7:ec:dc:32:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
        Validity
            Not Before: Sep 21 06:00:17 2026 GMT
            Not After : Sep 22 06:00:17 2026 GMT
        Subject: CN=73e2a241682bd9f0949dd0f343e8cf4712db7b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:47:cc:86:20:05:42:42:c2:5a:ab:11:fe:
                    82:a0:da:ef:55:17:0c:e2:11:67:9d:54:34:1d:5a:
                    59:cc:a6:96:85:97:ba:a9:4a:e8:1a:b3:dc:18:14:
                    e9:b7:90:33:49:66:c0:38:54:8a:db:2a:62:35:3c:
                    3c:b7:01:12:d7:72:85:8b:6f:40:ff:82:30:f6:99:
                    c8:99:91:81:0a:54:e5:0f:7c:3c:76:dc:ef:fb:13:
                    f7:2c:74:49:2e:6f:75:07:09:9a:3e:53:d0:33:c8:
                    c5:36:59:4c:ed:2c:76:1e:e3:dc:4b:31:1c:c4:32:
                    b2:c9:bb:c1:de:f9:96:62:88:96:ad:c7:2f:98:41:
                    bf:30:32:2d:0c:6f:ab:b9:7f:77:f5:0b:a1:8e:24:
                    2f:11:08:bf:21:ab:98:57:8e:1a:46:aa:c6:47:84:
                    c7:5a:76:86:9b:b4:70:dd:0b:ca:b7:96:9c:68:d5:
                    76:40:5e:e2:e9:7f:7f:ec:06:0b:12:6f:9b:b0:e1:
                    e4:39:1a:e2:c5:43:9f:60:4c:be:f6:1e:01:c4:76:
                    7a:63:6f:94:92:e3:91:86:be:72:18:85:a1:23:1c:
                    ee:62:d1:0e:f4:94:25:15:1d:95:70:78:ed:92:9b:
                    50:97:6d:61:cf:32:24:c9:f2:24:57:b6:b3:58:9a:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E2:A2:41:68:2B:D9:F0:94:9D:D0:F3:43:E8:CF:47:12:DB:7B:07
            X509v3 Authority Key Identifier:
                keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:08:0d:17:2b:96:c8:b0:90:c6:9c:6a:10:b7:a6:b1:89:64:
         36:aa:b5:cb:97:1d:8d:40:11:c3:94:8f:62:e5:07:dd:50:56:
         31:32:dc:a2:db:82:98:01:be:3d:6a:50:21:4b:5a:f7:42:58:
         9d:32:6f:fd:46:7f:a4:51:11:66:92:1b:5c:87:a6:9e:0e:e9:
         93:16:ac:13:c1:a4:4a:93:10:a7:1c:5a:f9:33:a3:57:da:0e:
         94:a9:5f:71:0e:00:11:99:d7:69:1f:75:63:4f:e9:af:b3:ff:
         c3:2c:42:17:7f:60:86:63:fb:cb:07:2c:aa:36:a4:ea:52:51:
         72:69:90:f8:7d:82:a8:ec:4f:cc:6a:f9:69:d4:50:99:fa:44:
         52:8a:70:53:24:cf:84:40:f3:17:a0:58:f9:36:9d:93:1d:47:
         a9:9b:ec:5e:1b:1a:4b:f5:f7:ad:31:cb:d9:2f:4c:78:96:af:
         45:e8:f6:93:0c:02:1c:49:4d:d4:5d:13:f3:7d:19:8f:22:74:
         33:a6:35:54:a7:1d:14:69:07:5a:b7:27:3e:e8:e2:b0:64:84:
         bd:e0:8d:6b:ee:47:46:83:b9:51:69:fc:6f:c9:05:61:9a:c8:
         af:31:7b:f3:e5:0d:b5:ef:3c:71:11:97:60:75:91:c7:a7:ca:
         5d:a2:52:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:42:54 2026 by rpki-client