Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File:                     hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier:          klMJAGHAxUHmJJi8otngJmt6Fm9K/XBfpTtI1swUVis=
Subject key identifier:   DD:7A:66:05:DA:FE:04:2C:3E:93:27:53:6F:DA:A0:CC:25:07:46:32
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer:       /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial:       01A0CD7E75937F3D9B0AA111A5C8B729E9B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number:          06E5
Signing time:             Wed 23 Sep 2026 09:00:11 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:11 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:11 +0000
Files and hashes:         1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
                          2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: 0n307ArNbqcRHLsLM6r0c+DmXWPNuYlPRVe2gcboHME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:75:93:7f:3d:9b:0a:a1:11:a5:c8:b7:29:e9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
        Validity
            Not Before: Sep 23 09:00:11 2026 GMT
            Not After : Sep 24 09:00:11 2026 GMT
        Subject: CN=dd7a6605dafe042c3e9327536fdaa0cc25074632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:e9:6d:a7:67:8e:01:9c:9a:bb:63:7b:3b:
                    74:8c:60:ac:c3:e2:ab:76:d1:11:ff:8b:3a:7c:d3:
                    85:10:e5:28:78:e5:30:c1:ca:34:02:25:d4:16:35:
                    21:a3:9c:17:aa:fc:c7:38:68:be:97:98:91:d7:65:
                    86:dc:2e:11:b7:a7:dc:60:d5:24:ba:7f:78:84:1f:
                    da:c1:d5:c5:36:ad:73:62:41:c1:d1:8f:0c:99:c9:
                    73:42:94:e5:85:ad:55:5e:a7:86:5f:05:0c:f7:d1:
                    8a:7b:f9:93:0b:18:43:50:96:40:6f:22:34:7b:ed:
                    a4:53:56:49:83:17:ee:84:f9:16:fd:8c:20:3d:a7:
                    7d:2e:61:8b:71:54:76:dc:01:76:87:d1:54:c9:48:
                    25:e0:3e:4e:ae:e3:28:78:c4:e9:58:09:eb:bb:de:
                    32:1b:b0:23:26:fb:06:78:b4:a2:de:0f:e3:f5:3b:
                    ca:28:6d:09:14:75:b9:c9:85:6f:ea:ea:27:36:6c:
                    ec:75:77:20:98:5d:23:c7:4f:08:53:24:d7:85:95:
                    d1:15:5b:dc:28:e9:78:2c:4f:9d:7c:c3:48:bf:96:
                    9e:59:e4:53:96:6a:5c:c6:9a:bd:4e:a3:0c:a0:11:
                    00:ad:c6:6d:5a:93:46:7e:16:92:13:f1:ae:e7:55:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7A:66:05:DA:FE:04:2C:3E:93:27:53:6F:DA:A0:CC:25:07:46:32
            X509v3 Authority Key Identifier:
                keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:59:0f:b4:f4:15:03:c7:0f:99:1f:0a:70:e3:72:aa:77:a6:
         ff:39:8c:ce:52:e8:30:a6:91:59:d4:0c:93:74:85:08:cf:40:
         c7:0f:a0:f9:e0:2b:ac:43:f0:20:57:1c:04:bb:2a:ff:84:87:
         05:66:a9:eb:93:13:3c:a4:d6:99:cc:f5:5e:f0:cd:dd:d3:ee:
         ae:f3:9c:a1:bf:56:a2:7f:28:76:85:b1:88:fd:99:99:cc:a7:
         b9:90:aa:77:e1:19:fa:ef:f0:50:45:c4:91:d0:b0:ac:e2:a6:
         9e:7e:80:cb:61:5f:9a:5f:86:b1:55:fa:1a:87:6e:27:d9:91:
         33:51:24:74:b1:bd:53:18:61:2d:64:85:cf:d6:3d:ea:53:54:
         66:53:1d:9f:70:cb:45:65:a2:1d:68:ce:93:a6:c5:04:12:96:
         18:0a:4c:41:2b:69:58:08:21:3e:4b:8f:e7:17:27:bd:29:09:
         06:9c:c4:52:d9:e2:3c:0e:0a:49:c1:31:b7:9b:38:0a:5d:a0:
         22:90:b2:d8:cf:59:f1:cf:ab:d5:65:a0:1e:99:0a:2f:30:16:
         7e:b1:f6:29:44:38:fc:02:58:6f:1d:42:67:91:40:dc:76:71:
         ad:4c:11:78:88:32:8f:9b:5a:f7:77:d4:7c:a8:76:b5:e1:dc:
         b3:1c:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:22:09 2026 by rpki-client