Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File:                     0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier:          hE9GclUyKEXhGi1fxNK7UX3kyJ6FNLN3uqLgMeP31lg=
Subject key identifier:   14:2C:02:C5:C2:C3:7C:52:73:61:CA:EE:42:32:D3:32:59:42:02:D0
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer:       /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial:       01A0CEC85A2774FC8A45CC99104A59D63530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number:          0C54
Signing time:             Wed 23 Sep 2026 15:00:31 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:31 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:31 +0000
Files and hashes:         1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: 1ruRRRJG2kg4zL9ZFqMsnR21GgtJh/fp5cyjTs+NlP4=)
                          2: DqXib1Ly2xFoTm2bjcxnicthk1w.roa (hash: g/TBWWlwOSVO9LY7Rp7QlLHadW83dAk0kFgZL+CVZlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:5a:27:74:fc:8a:45:cc:99:10:4a:59:d6:35:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
        Validity
            Not Before: Sep 23 15:00:31 2026 GMT
            Not After : Sep 24 15:00:31 2026 GMT
        Subject: CN=142c02c5c2c37c527361caee4232d332594202d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3d:13:33:b3:99:5a:7f:cc:e4:47:bc:1a:fe:
                    c4:ff:4b:f2:62:39:9d:ee:1b:98:77:61:04:9a:42:
                    95:df:e1:e2:6c:a8:39:f2:80:61:8c:10:f9:d1:39:
                    4a:2f:73:30:a4:56:c5:7b:f8:77:c7:4f:ec:77:29:
                    cd:30:0a:99:e3:52:a0:4e:65:f0:2d:7b:7a:f7:d2:
                    b9:8e:44:2b:e7:40:dc:31:c9:38:f8:47:45:ea:bc:
                    73:a0:9f:9f:b6:c4:47:ca:7e:ab:62:48:90:47:a8:
                    bd:e6:e6:24:70:ea:43:6b:cc:37:59:2d:21:4a:f3:
                    6f:5a:eb:fa:73:89:a2:c6:ce:9a:92:4c:19:f8:f1:
                    78:77:88:d9:51:5a:24:47:4c:77:69:e0:90:64:83:
                    8d:26:2e:52:4c:f0:1e:93:6b:ee:9e:9f:c0:ad:91:
                    35:12:9d:92:7a:70:99:32:5b:cd:df:11:60:60:e9:
                    c5:51:8f:18:17:0c:56:f4:55:63:96:9b:75:7c:f9:
                    26:99:68:94:a5:af:eb:1c:45:9a:00:4a:a6:42:98:
                    a5:86:be:07:68:e3:05:c4:32:f3:7d:6b:b3:bf:5f:
                    6d:7f:ff:2d:ca:36:b3:6a:36:38:19:99:c7:36:80:
                    d4:ef:bd:55:26:a7:c8:cd:5e:72:80:86:9b:12:fd:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2C:02:C5:C2:C3:7C:52:73:61:CA:EE:42:32:D3:32:59:42:02:D0
            X509v3 Authority Key Identifier:
                keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:18:71:6a:80:7a:f9:20:2d:bb:5d:5e:dd:dd:c3:cf:fe:ed:
         0d:71:6c:0d:d5:a8:19:dd:1a:31:9f:d7:2e:5f:39:95:92:38:
         13:20:9e:6b:ab:2a:0e:89:ce:96:dc:dd:db:d8:86:a8:6f:a5:
         27:31:db:ee:ea:b5:27:db:e2:1c:a5:05:02:a3:ff:91:e4:ed:
         80:b0:8a:32:09:70:bd:0f:03:c3:e8:ae:d1:0f:3f:00:be:3b:
         61:4e:95:61:63:a0:58:db:a4:66:cc:6f:ff:ba:fd:da:39:4d:
         29:54:a9:2f:0c:4d:e8:14:e0:6e:d5:33:a1:4f:68:d3:f5:e6:
         d6:30:05:25:7b:4c:50:92:24:d8:84:39:e9:f4:b7:46:be:40:
         b3:24:1d:f6:bf:03:23:71:7e:81:b3:e9:2c:7f:45:eb:5e:84:
         ee:45:db:0e:06:e1:a3:86:fc:8f:a0:b0:8a:c6:ac:20:d7:87:
         0c:f7:ee:27:49:6c:56:df:ac:ea:c4:cf:df:6e:4d:91:70:2a:
         69:0c:b4:3d:b9:f4:84:ec:7e:f3:bd:49:ec:35:d9:17:7e:5f:
         a8:94:ec:db:1d:8e:4c:0e:ee:e7:d1:89:a1:17:e2:9c:72:bd:
         f2:cb:f3:06:31:bb:76:3f:b9:b4:2e:21:06:04:5f:0e:47:91:
         4a:4d:88:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyFondPyKRcyZEEpZ1jUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj
MmE2NzcwHhcNMjYwOTIzMTUwMDMxWhcNMjYwOTI0MTUwMDMxWjAzMTEwLwYDVQQD
EygxNDJjMDJjNWMyYzM3YzUyNzM2MWNhZWU0MjMyZDMzMjU5NDIwMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj0TM7OZWn/M5Ee8Gv7E/0vyYjmd
7huYd2EEmkKV3+HibKg58oBhjBD50TlKL3MwpFbFe/h3x0/sdynNMAqZ41KgTmXw
LXt699K5jkQr50DcMck4+EdF6rxzoJ+ftsRHyn6rYkiQR6i95uYkcOpDa8w3WS0h
SvNvWuv6c4mixs6akkwZ+PF4d4jZUVokR0x3aeCQZIONJi5STPAek2vunp/ArZE1
Ep2SenCZMlvN3xFgYOnFUY8YFwxW9FVjlpt1fPkmmWiUpa/rHEWaAEqmQpilhr4H
aOMFxDLzfWuzv19tf/8tyjazajY4GZnHNoDU771VJqfIzV5ygIabEv0gXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQsAsXCw3xSc2HK7kIy0zJZQgLQMB8GA1UdIwQY
MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt
ZDY2OGM1M2Y2NjEyLzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy
LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxhxaoB6
+SAtu11e3d3Dz/7tDXFsDdWoGd0aMZ/XLl85lZI4EyCea6sqDonOltzd29iGqG+l
JzHb7uq1J9viHKUFAqP/keTtgLCKMglwvQ8Dw+iu0Q8/AL47YU6VYWOgWNukZsxv
/7r92jlNKVSpLwxN6BTgbtUzoU9o0/Xm1jAFJXtMUJIk2IQ56fS3Rr5AsyQd9r8D
I3F+gbPpLH9F616E7kXbDgbho4b8j6CwisasINeHDPfuJ0lsVt+s6sTP325NkXAq
aQy0Pbn0hOx+871J7DXZF35fqJTs2x2OTA7u59GJoRfinHK98svzBjG7dj+5tC4h
BgRfDkeRSk2IZA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:35:12 2026 by rpki-client