Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
File:                     01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json)
Hash identifier:          GKVYDRaOyoDx7TLjppK5zViJoZCnGp3IM6sfTxL2er8=
Subject key identifier:   74:1E:FA:E1:3F:63:D7:37:47:4A:C4:81:46:AC:8E:E0:0D:4B:BB:4D
Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
Certificate issuer:       /CN=d3530c144f592cfa891babf195a817900cd6d916
Certificate serial:       019E1D9011626CBAEAB5E3A1C7FBB5300C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
Manifest number:          03BB
Signing time:             Tue 12 May 2026 19:00:41 +0000
Manifest this update:     Tue 12 May 2026 19:00:41 +0000
Manifest next update:     Wed 13 May 2026 19:00:41 +0000
Files and hashes:         1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: JZIOhWUV8NUJBZpssQrYZvV6D3hhnR/q7+nMPpCcovc=)
                          2: B6oPSrYFOETzVfi_jkgsVldlvlw.roa (hash: FWuUjlvViSPVZ3tuWXOR6u2UkqfS1LDdyg1epfi2EcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:11:62:6c:ba:ea:b5:e3:a1:c7:fb:b5:30:0c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916
        Validity
            Not Before: May 12 19:00:41 2026 GMT
            Not After : May 13 19:00:41 2026 GMT
        Subject: CN=741efae13f63d737474ac48146ac8ee00d4bbb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:23:7a:d5:28:b0:35:b5:94:93:93:e0:d8:
                    16:1b:0a:00:d8:46:fe:e0:49:32:99:36:48:8a:85:
                    ad:69:67:bd:09:0f:6e:48:b8:1a:93:51:3c:1c:36:
                    3a:69:d5:94:d2:51:7f:5f:39:85:5f:4a:90:36:a4:
                    6b:e9:39:13:34:3e:13:11:56:a4:87:66:ad:7e:5d:
                    15:37:85:38:b7:bc:2a:94:64:b2:0b:fc:7e:54:91:
                    49:fc:57:b7:39:5b:ad:3a:1f:38:49:a2:cf:1e:98:
                    e2:83:e1:39:1f:19:86:2e:74:0d:d0:af:bc:41:a5:
                    7b:a7:fe:72:91:65:d8:10:73:43:2c:8d:a7:74:5c:
                    ef:54:44:a7:0d:2e:19:cf:e9:d8:28:11:fc:0d:8d:
                    71:67:f4:28:cd:87:bb:49:d4:48:03:bd:61:d6:25:
                    bb:61:38:75:80:47:0e:75:26:af:fb:36:3e:c4:70:
                    9b:36:5a:f1:38:25:af:b0:fa:fa:a0:fc:e5:5d:8e:
                    cb:68:9c:c2:fa:5c:27:cc:18:e8:65:0d:bc:db:57:
                    1b:52:89:f1:a4:c1:8b:cb:4a:5b:c2:9e:d5:a2:4e:
                    8d:40:38:db:1e:1a:be:06:31:52:5f:28:9b:3f:65:
                    ba:a4:b9:68:f2:c2:ef:bb:aa:a7:34:80:5f:dd:79:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:FA:E1:3F:63:D7:37:47:4A:C4:81:46:AC:8E:E0:0D:4B:BB:4D
            X509v3 Authority Key Identifier:
                keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:73:f5:23:0a:54:38:b9:e4:30:70:a7:f6:76:c5:dd:16:0a:
         19:7b:cc:6f:8f:b5:6c:dc:3b:8f:e0:65:a2:87:2c:9c:07:ea:
         10:31:f7:2b:54:df:68:5d:6a:05:1e:e9:9d:80:df:98:a5:6e:
         ce:89:35:8d:40:ae:36:e1:ca:2f:96:11:33:aa:31:69:cc:bf:
         f6:7c:ce:7e:ca:ed:65:9b:36:f9:45:99:15:7c:35:00:3b:37:
         d8:56:87:2a:4c:87:8f:43:80:84:a6:5f:97:5f:2b:b3:ac:54:
         42:6d:3c:64:42:e5:68:23:56:57:35:08:38:2f:00:d6:64:b3:
         fc:88:41:b1:75:56:12:64:78:59:5c:b3:c9:dc:8e:52:1c:4d:
         68:53:7d:eb:ea:2e:62:6f:a9:19:ea:c1:af:e0:a9:2e:1a:a2:
         ea:22:6e:e2:88:37:1e:55:ef:0a:38:30:cd:01:0f:65:93:17:
         d4:7e:cd:96:ca:de:80:59:c1:cd:02:bc:86:c5:98:5c:8d:be:
         5f:a4:6c:25:60:df:98:e1:cf:23:2c:db:19:3d:a4:9d:30:ec:
         f7:b4:f7:9b:36:a3:78:d9:d7:00:07:35:f5:bb:ec:4b:58:84:
         af:15:eb:b5:2d:1a:25:24:52:1b:1b:85:33:35:ca:22:3d:20:
         1f:20:77:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkBFibLrqteOhx/u1MAxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTMwYzE0NGY1OTJjZmE4OTFiYWJmMTk1YTgxNzkwMGNk
NmQ5MTYwHhcNMjYwNTEyMTkwMDQxWhcNMjYwNTEzMTkwMDQxWjAzMTEwLwYDVQQD
Eyg3NDFlZmFlMTNmNjNkNzM3NDc0YWM0ODE0NmFjOGVlMDBkNGJiYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtAjetUosDW1lJOT4NgWGwoA2Eb+
4EkymTZIioWtaWe9CQ9uSLgak1E8HDY6adWU0lF/XzmFX0qQNqRr6TkTND4TEVak
h2atfl0VN4U4t7wqlGSyC/x+VJFJ/Fe3OVutOh84SaLPHpjig+E5HxmGLnQN0K+8
QaV7p/5ykWXYEHNDLI2ndFzvVESnDS4Zz+nYKBH8DY1xZ/QozYe7SdRIA71h1iW7
YTh1gEcOdSav+zY+xHCbNlrxOCWvsPr6oPzlXY7LaJzC+lwnzBjoZQ2821cbUonx
pMGLy0pbwp7Vok6NQDjbHhq+BjFSXyibP2W6pLlo8sLvu6qnNIBf3XluzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQe+uE/Y9c3R0rEgUasjuANS7tNMB8GA1UdIwQY
MBaAFNNTDBRPWSz6iRur8ZWoF5AM1tkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYt
NmJhNzk5NTdlODYyLzEvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYtNmJhNzk5NTdlODYy
LzEvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXP1IwpU
OLnkMHCn9nbF3RYKGXvMb4+1bNw7j+BloocsnAfqEDH3K1TfaF1qBR7pnYDfmKVu
zok1jUCuNuHKL5YRM6oxacy/9nzOfsrtZZs2+UWZFXw1ADs32FaHKkyHj0OAhKZf
l18rs6xUQm08ZELlaCNWVzUIOC8A1mSz/IhBsXVWEmR4WVyzydyOUhxNaFN96+ou
Ym+pGerBr+CpLhqi6iJu4og3HlXvCjgwzQEPZZMX1H7NlsregFnBzQK8hsWYXI2+
X6RsJWDfmOHPIyzbGT2knTDs97T3mzajeNnXAAc19bvsS1iErxXrtS0aJSRSGxuF
MzXKIj0gHyB3+g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:57:08 2026 by rpki-client