Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File:                     hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier:          ArseJYLwFlKCsi5K7Zgqh9h3+ou+MpepqGIXUmZ+jpI=
Subject key identifier:   17:AE:86:EE:BF:61:EF:8F:B9:F9:23:28:C5:96:52:69:D0:FD:11:EA
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer:       /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial:       01A0BC54FDCA0CA9A65080C403F293F12580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number:          0361
Signing time:             Sun 20 Sep 2026 01:01:21 +0000
Manifest this update:     Sun 20 Sep 2026 01:01:21 +0000
Manifest next update:     Mon 21 Sep 2026 01:01:21 +0000
Files and hashes:         1: 6hF48NdJlvMla9eluo8Mlfe595Y.roa (hash: pg8KajGYEwEU0ZGmmxsgFZa8AayGaJM9jjh0xL1LeCA=)
                          2: 8Z9LlW9pX1ZFA3wQNfdVO9-jjgs.roa (hash: XL3JspixgmL+Y5+ELAq1VBUarv7KKAfzu3TKsU6vMjU=)
                          3: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=)
                          4: ZPkrtvVur46cS-5w8dwIkAjNZYE.roa (hash: vPaByPHtcOmoXzXWkiUeeFN03AP9nPQMC4Ibqh8NElg=)
                          5: ZvN7c-NtqYH-PaeLJUmdEPO5iC8.roa (hash: RkOPQkujkcLmBf4maBg9uGkdxV/kCwgeqMyADPSii/E=)
                          6: bGlKraIhhwlevroXgB4rLlo-YME.roa (hash: oIkXDeJlSani/t+wUjX7TTQDY2OjVB6ERk95GxJeYN8=)
                          7: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: zX85YEtJ/O0zDxr/D1F4ZL30TVo+BX0cJMRBwZD6KAM=)
                          8: mfKCIzYOA1MRX0WnVHNYXIYPDbA.roa (hash: BLUaF2c9SynmHjIFPlE7zXQ5dkGPExYAyDAAn9NF3gU=)
                          9: nu8XADsimCod0_uWl8egJ3aFHEw.roa (hash: H55dZSXKTNI4+9o7BFR1/GCpspjJcbHLdvt5EmFjk+U=)
                          10: qgusrLPdxbmOAmCCh-LDhKvWtUo.roa (hash: hmQSz0Gp8rt8ydBZY/twqJ9mc/ykbC8FHiCR9kZOXOg=)
                          11: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bc:54:fd:ca:0c:a9:a6:50:80:c4:03:f2:93:f1:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
        Validity
            Not Before: Sep 20 01:01:21 2026 GMT
            Not After : Sep 21 01:01:21 2026 GMT
        Subject: CN=17ae86eebf61ef8fb9f92328c5965269d0fd11ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:53:33:fc:bb:3e:e9:ed:c2:f7:e6:db:a2:
                    74:ee:6d:20:0e:63:ba:f8:f7:ef:7f:43:47:da:39:
                    fc:56:3c:76:4f:16:5d:f5:30:15:96:d5:1d:17:17:
                    8b:10:25:b1:59:1d:d8:c0:89:7d:0b:07:f4:73:f3:
                    07:e9:5e:29:09:76:f1:d5:a0:0e:f8:ab:d9:80:54:
                    c1:fc:df:15:66:49:50:38:79:ed:3b:c9:a4:7d:39:
                    58:ce:05:bc:50:01:8e:fa:61:16:6e:2a:2a:c2:57:
                    8e:08:89:1e:c6:44:de:bc:fd:60:ca:f7:7b:04:3b:
                    7a:9e:80:6b:ad:68:39:07:3a:f2:59:e7:34:3b:58:
                    2f:e7:33:42:a6:7b:59:e2:87:b1:cc:63:c9:d0:d7:
                    f3:33:e5:0f:9d:cf:53:ff:78:09:8f:99:74:36:20:
                    d3:d7:d8:92:69:21:84:c1:fe:1e:0f:b4:c0:a7:6b:
                    58:16:9e:f4:e8:48:07:dc:c7:0a:98:6a:48:7e:42:
                    83:72:e8:53:f3:5e:05:f8:80:95:d5:3a:08:11:ce:
                    1c:99:f4:2a:a0:b1:bc:99:5b:7a:fe:6f:56:51:08:
                    74:46:a2:fc:ec:37:98:ad:66:20:bd:0b:ec:4b:cb:
                    f4:2e:70:94:ea:b5:e3:b7:f9:fe:65:30:c6:b3:c9:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AE:86:EE:BF:61:EF:8F:B9:F9:23:28:C5:96:52:69:D0:FD:11:EA
            X509v3 Authority Key Identifier:
                keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6a:98:9a:84:7d:81:d3:42:66:e3:64:73:8e:03:e9:82:92:
         15:05:60:d8:95:45:b8:37:10:72:51:e4:cb:0e:41:9c:33:b8:
         ab:58:b1:1e:c4:a6:99:3e:aa:ef:45:05:ac:4a:ec:7b:d7:b6:
         5c:1c:03:aa:9c:72:4d:e4:d5:bc:3d:a3:20:7a:8b:f7:d0:9b:
         fa:f1:e1:59:43:ea:67:2b:dc:8b:29:75:cc:b9:5b:e5:f7:c7:
         29:85:a1:82:3a:bc:bb:a8:70:9e:e6:5e:65:87:af:05:96:d9:
         c2:40:e8:3c:e2:23:49:dc:8b:89:5a:91:d9:fe:04:19:d5:47:
         42:5f:1f:e4:8f:2b:f1:7f:b0:11:5c:a0:0d:ba:08:99:5d:31:
         1a:51:aa:70:ac:26:e1:68:5b:aa:7c:45:f8:2c:9b:cb:e2:d2:
         af:f3:38:31:8d:98:76:ab:52:7a:15:7a:81:06:89:14:8b:0c:
         0b:0d:01:6b:59:31:05:d0:b3:f2:2b:2f:a5:b1:b6:5a:53:77:
         80:25:d5:6a:b7:8b:7d:6e:8c:4f:85:5c:bc:84:ed:4d:3d:23:
         ab:0a:e1:f2:8a:5c:52:fa:98:94:0a:f1:39:f6:47:53:37:ff:
         45:09:7d:df:0d:db:7f:31:fb:4b:4c:b6:5a:92:16:a6:b5:9f:
         65:28:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:52:58 2026 by rpki-client