Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File:                     MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier:          /MY5BrulgIbytdkG0+YXolgQiNpc67+cbkYKVfLjFAw=
Subject key identifier:   50:2E:A6:50:7D:84:C6:75:D8:2B:17:B4:1B:CA:60:9B:58:7E:81:82
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer:       /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial:       019EC0DB54BE6B6E5979346DD21C62AA92B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number:          0B05
Signing time:             Sat 13 Jun 2026 12:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:59 +0000
Files and hashes:         1: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: k2BDAm9tgDrUUOpEu2/jjdgJg7FLwVCQXeR6KAPGjNc=)
                          2: bY4WY1iKxzvuOL6bmkVqfpfooVA.roa (hash: Ph+QZYyi/7d0WLmkOSuDFC4tOnaIRjljQNdRjvbGpWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:54:be:6b:6e:59:79:34:6d:d2:1c:62:aa:92:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
        Validity
            Not Before: Jun 13 12:00:59 2026 GMT
            Not After : Jun 14 12:00:59 2026 GMT
        Subject: CN=502ea6507d84c675d82b17b41bca609b587e8182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:b3:e3:70:c3:46:ff:a2:61:35:94:e0:89:
                    fe:bc:23:71:2d:1a:3a:d3:cf:bc:00:34:c5:2f:41:
                    96:95:c0:cc:ee:87:02:87:14:e3:81:ca:3c:a2:c9:
                    ca:cc:b6:db:f0:ec:26:68:9e:f8:51:bf:06:d3:76:
                    9a:87:89:81:b2:64:f6:44:5b:d9:05:ed:d1:cd:a3:
                    09:5e:01:d7:3d:49:c5:0e:8e:8a:9e:df:66:e1:3e:
                    c3:ff:de:67:82:25:5e:0e:99:6d:b1:c4:37:0f:57:
                    df:ae:48:c7:15:c0:de:66:bd:e0:c2:89:b3:f6:0e:
                    2d:5c:00:0c:6f:9d:7a:60:11:42:12:d6:9d:b4:6c:
                    15:4e:f6:14:aa:52:31:e4:bf:82:36:ba:17:50:a3:
                    1d:8d:14:fc:4b:e4:42:dc:c1:29:53:64:3b:64:a1:
                    77:66:20:09:85:25:97:63:b0:af:bb:4c:76:c2:7a:
                    4b:f9:b2:1a:41:fc:4e:b9:b4:b5:c0:93:1d:20:82:
                    34:4a:9c:25:d3:77:92:59:b9:20:36:05:c4:e0:06:
                    7a:d8:56:24:39:f9:42:3c:b1:21:d8:5d:1f:5f:21:
                    f2:14:d1:b8:25:e6:27:47:73:d8:66:41:4c:1a:39:
                    9a:56:92:34:7f:80:9d:22:40:47:e2:08:65:cb:f8:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2E:A6:50:7D:84:C6:75:D8:2B:17:B4:1B:CA:60:9B:58:7E:81:82
            X509v3 Authority Key Identifier:
                keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:63:a9:33:4c:2d:d3:5c:2f:eb:cb:58:85:d2:30:5c:fc:68:
         cc:a7:bf:9e:e5:4b:34:af:07:c6:dc:34:c3:1b:16:a3:13:c4:
         17:d6:42:b1:2a:65:ef:8e:cf:16:c5:e2:81:cb:34:e2:f4:fa:
         4a:a0:40:52:94:f1:93:6a:d5:0d:65:8a:6a:6e:55:41:18:08:
         c2:50:b0:12:3f:e7:cc:14:85:c9:8a:8d:d1:36:0a:57:6f:e9:
         38:01:dd:58:fe:e2:da:54:d7:7b:c6:a6:0b:a8:41:b1:2d:1d:
         93:22:c9:98:16:3f:92:ae:7e:4e:6d:b1:2f:60:62:a7:17:6f:
         d6:85:31:9b:00:7a:b2:d3:58:ed:f6:54:85:dc:b6:a3:0e:8a:
         30:f0:d3:33:ec:8e:03:2c:63:58:2e:06:92:41:74:33:f4:27:
         58:42:f5:c7:b2:78:ee:a1:f6:61:37:b9:1d:3e:43:35:a5:d4:
         43:99:76:0a:66:61:2c:52:d5:9a:41:81:d0:5d:80:c5:7e:1f:
         ac:00:f4:82:19:c5:c4:2e:ad:2e:26:39:f1:90:18:d8:4b:bc:
         86:07:7f:9a:f4:b0:c2:ec:4f:d5:94:ab:ce:07:48:3a:95:ab:
         c3:bc:32:29:f2:c2:ed:3e:1e:82:3f:99:82:37:40:29:4e:e0:
         f2:d6:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:26 2026 by rpki-client