Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
File:                     ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json)
Hash identifier:          S3rjgrHiyFu1b04TFgpWamGUxCmklt1rSUA+i0mZWjA=
Subject key identifier:   D2:27:F1:FD:3D:25:28:57:C9:8D:8E:5A:5F:9E:57:FD:12:52:2A:E7
Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5
Certificate issuer:       /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
Certificate serial:       01A0C2C478386AE0044B9B66485804373636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
Manifest number:          1772
Signing time:             Mon 21 Sep 2026 07:00:50 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:50 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:50 +0000
Files and hashes:         1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: 6p3l+Ay2/qlang8u3wBoa/Www7JkcnD2GzV3VWZMTkU=)
                          2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:78:38:6a:e0:04:4b:9b:66:48:58:04:37:36:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5
        Validity
            Not Before: Sep 21 07:00:50 2026 GMT
            Not After : Sep 22 07:00:50 2026 GMT
        Subject: CN=d227f1fd3d252857c98d8e5a5f9e57fd12522ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:46:12:15:67:8a:14:d9:46:96:3c:e3:1e:
                    2f:e8:71:96:51:ae:88:81:96:bb:4f:32:f4:a5:0d:
                    b3:75:55:9e:ab:54:2a:56:66:0d:c8:81:e1:83:44:
                    71:12:fd:2d:40:19:63:5b:f6:2d:85:d6:39:1d:fd:
                    7c:cb:b0:1b:2a:42:25:3e:d4:84:52:4e:29:4b:5a:
                    80:3d:f1:99:8d:23:2f:d7:f2:68:b8:e1:9c:0f:9e:
                    92:d3:2f:1c:fd:59:6e:7a:ab:95:c2:12:81:ba:f9:
                    4c:06:1f:8c:b9:90:d6:8e:79:22:82:aa:a4:29:d8:
                    c7:99:09:4b:c9:79:5b:a8:74:b6:5b:cf:5b:0c:16:
                    f7:10:73:61:73:a0:49:5a:95:60:f3:c7:bb:7c:3b:
                    49:ca:65:25:bc:d9:58:60:c5:0a:b7:52:38:8e:cd:
                    cc:48:24:b6:1e:93:56:00:14:f5:ae:9a:e8:1b:2b:
                    7c:62:4b:d0:9f:95:1c:f2:26:35:b1:9a:db:22:06:
                    bb:6a:27:7a:47:82:2f:ad:6d:31:26:4c:32:67:e0:
                    91:ce:0a:66:05:d9:0d:db:b0:77:c0:fb:5c:18:df:
                    e8:8e:71:02:04:52:1e:c8:70:1f:73:9c:63:c4:f3:
                    cf:d9:6c:aa:c8:5a:39:7c:d5:b3:2c:0d:3f:c0:eb:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:27:F1:FD:3D:25:28:57:C9:8D:8E:5A:5F:9E:57:FD:12:52:2A:E7
            X509v3 Authority Key Identifier:
                keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8e:91:8e:f3:97:c1:12:73:58:5d:fc:84:65:40:a3:b0:ba:
         ff:9c:7d:58:90:ca:38:e8:49:7f:ac:55:11:5f:90:93:fe:d0:
         fc:bb:af:42:9f:97:b1:16:23:a9:82:9e:82:d8:68:7e:a9:88:
         37:58:70:77:ce:6b:df:47:76:73:10:0e:6e:39:0d:fe:c1:51:
         75:69:bb:9d:67:37:4d:97:16:f7:a4:1f:3e:e2:c8:5c:f5:7c:
         17:f1:98:ea:c8:33:b6:a1:6d:6e:ba:93:89:ee:fb:db:18:e5:
         82:8e:18:9d:4f:fb:cb:0f:3b:74:2b:32:59:ac:4a:0d:d1:a4:
         ba:73:a8:21:fb:91:f0:f4:d3:30:41:1e:d3:92:82:42:15:5f:
         26:cf:aa:f4:ef:15:56:e4:5e:1b:6d:6c:7c:31:d1:bb:8c:56:
         da:37:4d:7f:75:68:9a:1d:26:b7:61:cb:3a:19:84:61:24:9d:
         11:56:9d:b4:8c:c6:fa:c1:87:89:30:fa:d2:31:37:a7:e1:52:
         58:ee:44:1c:f3:a1:51:db:ae:b2:a4:29:fd:04:88:66:74:23:
         85:16:88:33:16:4d:fe:9a:72:9f:68:94:65:6f:1c:93:2b:f1:
         24:7f:56:b7:a5:6b:2c:2c:c4:ea:37:9e:61:3f:0e:6e:2d:bb:
         5d:a1:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:03:53 2026 by rpki-client