Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File:                     MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier:          ZPzioCuKMU+e9V3kpj4Tk81vsAGLtcFPb/Ut+9Wl+F0=
Subject key identifier:   D6:48:BB:CB:A5:AA:6E:D4:C5:CC:C3:DF:F9:D2:19:AE:1A:69:18:60
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer:       /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial:       019D98F475C3380D207BA513D81B16F231EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 01:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:50 +0000
Files and hashes:         1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: V3rUMVg1kQuH+zr4+7vwSh+sV3qYK9lSt73Rz0q8dMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:75:c3:38:0d:20:7b:a5:13:d8:1b:16:f2:31:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
        Validity
            Not Before: Apr 17 01:00:50 2026 GMT
            Not After : Apr 18 01:00:50 2026 GMT
        Subject: CN=d648bbcba5aa6ed4c5ccc3dff9d219ae1a691860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:9e:20:83:a5:82:40:93:8a:9d:cc:6c:01:
                    e0:6d:8b:21:36:f7:c9:e3:f3:9d:13:da:9a:3d:4e:
                    4a:be:5e:c1:4d:11:37:89:e8:7b:c7:eb:21:5d:4e:
                    6a:38:c3:bd:7e:11:cb:ab:e2:b7:5e:fa:c5:6a:d4:
                    a7:05:6a:a0:d9:35:54:71:ac:8e:59:72:0d:f1:2f:
                    e5:93:27:65:94:8a:9f:cf:ac:51:b4:52:43:8d:b0:
                    51:0b:ed:a8:15:6c:ea:a4:14:7c:99:f1:44:56:68:
                    02:55:d7:9d:9a:7f:bf:15:43:3b:8c:12:34:51:ac:
                    f9:e8:1f:81:fb:7a:16:60:c4:ec:54:a4:71:55:5b:
                    db:6a:dd:8c:23:e9:f7:c5:ec:51:35:c8:57:ca:4e:
                    f8:4f:f9:6b:08:c1:c9:f3:d4:63:35:f4:da:ba:7f:
                    6d:f5:39:c7:e5:46:8a:3d:58:1e:65:61:62:fc:d0:
                    b4:40:c9:99:54:c3:cb:3d:ff:02:ab:37:3b:1c:e6:
                    9b:47:af:e5:41:a2:92:20:4e:2f:f4:7f:ca:54:6b:
                    8b:af:83:44:3e:2e:52:e7:5d:96:db:65:d2:ec:72:
                    76:aa:1b:6e:bc:9e:4f:ec:40:47:bb:83:1f:b6:fe:
                    2b:ef:fc:a2:04:1f:f1:43:9c:c9:0c:1d:3f:ac:42:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:48:BB:CB:A5:AA:6E:D4:C5:CC:C3:DF:F9:D2:19:AE:1A:69:18:60
            X509v3 Authority Key Identifier:
                keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9b:ea:aa:d0:db:42:b5:29:c9:5d:63:47:1f:e8:80:46:40:
         02:77:46:34:31:eb:06:23:33:9d:37:70:5f:01:0f:97:86:9b:
         a4:de:4d:7d:37:8d:29:38:20:85:72:d2:88:9d:ef:6c:69:c6:
         ec:d4:22:a6:c6:59:68:e8:76:f6:74:6d:90:ae:e4:54:9d:2a:
         ce:8b:46:7e:79:97:51:2e:0d:5a:17:c7:32:3c:04:64:8b:a4:
         10:57:ef:3d:a0:05:7a:31:55:17:40:e5:aa:96:db:09:9f:a0:
         04:51:e2:4c:46:f4:dc:78:f0:6d:9c:5f:5f:8a:19:31:0e:9a:
         cf:e3:57:96:dc:48:3e:0e:a6:4b:8d:4c:20:21:4f:90:28:a6:
         e1:91:ac:61:a1:7c:c9:64:a4:12:ff:25:7d:98:e1:ef:b4:0b:
         80:d4:72:46:26:3e:ad:13:ad:8c:52:27:56:8c:67:0c:ca:af:
         29:75:ee:8d:43:f7:66:5c:90:5a:22:ce:d1:ed:d6:07:49:70:
         51:11:dc:3c:28:f7:d8:76:90:68:b5:6a:66:eb:71:ba:38:a9:
         b3:a8:b0:06:b3:d0:de:6e:23:5f:41:34:40:53:6f:cc:0f:3e:
         e2:2c:e4:3f:84:67:5e:e0:ae:a1:c3:97:fa:4b:08:d4:52:23:
         fd:ab:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:08 2026 by rpki-client