Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File:                     MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier:          NVAEl/vm3i4G7ncNNAcwnWc5JTnHL/Xmy+wfJRg3doE=
Subject key identifier:   62:8A:63:CF:A7:BC:C3:E1:A1:61:8F:C6:97:E2:84:AF:66:21:25:37
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer:       /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial:       01A0E1753D3DFAE55657A1A11EFCEA524750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number:          0C1F
Signing time:             Sun 27 Sep 2026 06:02:31 +0000
Manifest this update:     Sun 27 Sep 2026 06:02:31 +0000
Manifest next update:     Mon 28 Sep 2026 06:02:31 +0000
Files and hashes:         1: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: u6qmAlsa476Itz9eWXFlsUYwFVdWKNi6QFJveTr+sKk=)
                          2: bY4WY1iKxzvuOL6bmkVqfpfooVA.roa (hash: Ph+QZYyi/7d0WLmkOSuDFC4tOnaIRjljQNdRjvbGpWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:75:3d:3d:fa:e5:56:57:a1:a1:1e:fc:ea:52:47:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
        Validity
            Not Before: Sep 27 06:02:31 2026 GMT
            Not After : Sep 28 06:02:31 2026 GMT
        Subject: CN=628a63cfa7bcc3e1a1618fc697e284af66212537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:57:02:29:24:e9:d7:df:15:59:35:95:a5:
                    52:2e:bd:9c:c3:8c:43:1e:c8:88:ab:47:93:06:63:
                    80:d4:d9:68:6d:07:84:7b:f9:3b:c8:4c:39:ab:61:
                    90:33:be:d3:4e:c2:71:cf:4a:a3:88:94:59:73:14:
                    f0:c9:e1:7b:74:63:89:07:b6:93:8b:fc:df:79:7e:
                    eb:14:84:f0:f5:16:82:62:eb:7f:4d:78:52:d4:2e:
                    9a:98:bf:5b:e2:12:07:64:28:44:97:39:a8:4c:6c:
                    b8:63:c4:59:1d:12:58:ff:89:65:fa:b6:9a:67:e7:
                    4b:67:40:ae:9d:9f:8a:4f:e0:f9:a0:6f:9e:87:a5:
                    20:69:8d:eb:8a:94:ec:df:eb:0f:f8:53:47:87:c7:
                    21:b9:89:eb:2c:f6:e6:5d:63:da:81:c5:db:47:cf:
                    0f:80:87:be:c2:84:83:68:82:7e:3a:de:34:97:d2:
                    43:70:11:49:38:5a:fe:4b:81:46:59:16:9b:11:88:
                    91:96:ae:d3:ba:08:93:52:dc:df:14:8e:bb:eb:22:
                    0c:e8:26:93:4a:15:39:73:9d:91:71:ad:91:58:96:
                    e9:e9:92:df:db:3e:bc:32:bd:5a:ca:8d:73:f7:bf:
                    b5:c9:3a:92:ac:8e:ba:51:f9:73:4f:18:c4:00:f8:
                    23:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8A:63:CF:A7:BC:C3:E1:A1:61:8F:C6:97:E2:84:AF:66:21:25:37
            X509v3 Authority Key Identifier:
                keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:24:2f:6d:f0:6c:ec:5b:61:df:aa:48:a6:53:76:dd:6e:6b:
         8a:19:08:08:e9:86:2c:23:e2:c4:a7:15:aa:3f:71:15:28:bf:
         6a:fc:fa:55:97:7a:45:af:e6:2d:e1:84:76:63:1d:0d:b5:19:
         ad:e7:c8:93:6b:36:c4:e5:5e:9e:fb:f8:5e:a9:ed:67:af:28:
         40:ae:84:11:40:e7:d4:69:8e:cd:9b:4d:16:bb:65:8b:5e:ba:
         7f:8b:7c:b9:bb:60:99:d7:b4:7c:da:af:f8:d0:80:9b:e1:13:
         76:22:6b:5a:c9:d5:c6:40:8c:30:06:07:b3:f4:45:48:6a:f3:
         81:a3:07:08:a3:7b:1a:c4:d8:6d:39:49:29:b9:ac:6a:16:ba:
         48:52:c2:c3:ce:d9:ec:57:26:d4:fc:a9:3d:ba:72:ad:18:4d:
         b4:3d:a0:f3:45:2f:1e:a8:a3:6d:e9:7c:3e:61:be:45:35:ed:
         b1:97:72:e8:e6:87:e1:cb:f7:ac:e6:79:f2:2b:df:ef:31:04:
         b5:e9:12:ee:16:f6:5b:21:3f:a5:5e:99:d1:06:25:a7:0a:74:
         57:0e:04:17:4e:27:5e:36:8b:1b:f4:7c:72:fc:92:f1:ff:17:
         cf:cc:09:cb:6c:c6:9b:f6:de:3f:d6:00:66:bb:1c:f8:4f:21:
         ea:8f:d3:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdT09+uVWV6GhHvzqUkdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQ1ZmMzMTQ3MTAyODI0ZjlkMmQ1NDc3NjZhODA5YWVh
ZjI0NWEwHhcNMjYwOTI3MDYwMjMxWhcNMjYwOTI4MDYwMjMxWjAzMTEwLwYDVQQD
Eyg2MjhhNjNjZmE3YmNjM2UxYTE2MThmYzY5N2UyODRhZjY2MjEyNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXhXAikk6dffFVk1laVSLr2cw4xD
HsiIq0eTBmOA1NlobQeEe/k7yEw5q2GQM77TTsJxz0qjiJRZcxTwyeF7dGOJB7aT
i/zfeX7rFITw9RaCYut/TXhS1C6amL9b4hIHZChElzmoTGy4Y8RZHRJY/4ll+raa
Z+dLZ0CunZ+KT+D5oG+eh6UgaY3ripTs3+sP+FNHh8chuYnrLPbmXWPagcXbR88P
gIe+woSDaIJ+Ot40l9JDcBFJOFr+S4FGWRabEYiRlq7TugiTUtzfFI676yIM6CaT
ShU5c52Rca2RWJbp6ZLf2z68Mr1ayo1z97+1yTqSrI66UflzTxjEAPgjuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKKY8+nvMPhoWGPxpfihK9mISU3MB8GA1UdIwQY
MBaAFDDEX8MUcQKCT50tVHdmqAmuryRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYt
M2I1NDBhNmJjM2RjLzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYtM2I1NDBhNmJjM2Rj
LzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0CQvbfBs
7Fth36pIplN23W5rihkICOmGLCPixKcVqj9xFSi/avz6VZd6Ra/mLeGEdmMdDbUZ
refIk2s2xOVenvv4XqntZ68oQK6EEUDn1GmOzZtNFrtli166f4t8ubtgmde0fNqv
+NCAm+ETdiJrWsnVxkCMMAYHs/RFSGrzgaMHCKN7GsTYbTlJKbmsaha6SFLCw87Z
7Fcm1PypPbpyrRhNtD2g80UvHqijbel8PmG+RTXtsZdy6OaH4cv3rOZ58ivf7zEE
tekS7hb2WyE/pV6Z0QYlpwp0Vw4EF04nXjaLG/R8cvyS8f8Xz8wJy2zGm/beP9YA
Zrsc+E8h6o/TRw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 18:57:22 2026 by rpki-client