Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File:                     MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier:          p5oZweYsCPGc8dXJ/jfUO2lLrRVG9hTlW8CZ7P32+fM=
Subject key identifier:   2F:C3:A0:88:E2:64:8A:C2:CD:8D:61:5E:E8:59:9D:14:2E:FF:41:AB
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer:       /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial:       01A0C7B3C07C20F1C1C1C0603CC747A02434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number:          0713
Signing time:             Tue 22 Sep 2026 06:00:41 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:41 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:41 +0000
Files and hashes:         1: MvbeMKm492SENE0M07bAJz6t028.crl (hash: MzHOh2d3zVecO8YrvNt8/ceqI/x+aKl0omUvWVp9Kmk=)
                          2: fTxk1v0fF8AuZDNoAxUqc_RyNH4.roa (hash: Lw+QNTmoYW+7xrFoYnex4ne1svS2EO7auyLRmtTAxxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:c0:7c:20:f1:c1:c1:c0:60:3c:c7:47:a0:24:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
        Validity
            Not Before: Sep 22 06:00:41 2026 GMT
            Not After : Sep 23 06:00:41 2026 GMT
        Subject: CN=2fc3a088e2648ac2cd8d615ee8599d142eff41ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:9e:f6:d5:b2:fa:93:78:71:57:22:b3:4b:
                    4b:03:da:b8:7d:0e:43:c3:a9:cd:81:97:c5:0d:51:
                    f7:35:1a:b9:c6:3c:f7:cf:25:6b:d4:09:4d:42:c5:
                    28:cf:36:9a:4b:41:a5:9f:c4:b2:20:68:e8:b1:a9:
                    03:1b:04:47:3e:6c:f3:62:cc:8d:84:87:2c:cb:21:
                    1e:9d:4e:6a:42:dc:69:6e:19:fa:92:43:00:08:fc:
                    d4:fd:56:45:1c:a1:b5:52:10:9f:8a:08:23:38:a1:
                    7f:9e:6c:e5:29:1a:3b:8e:18:9f:04:d8:85:28:ed:
                    27:c5:55:e3:b5:e3:4d:9a:9c:9c:15:12:bf:d8:8b:
                    09:7f:b8:79:cb:f2:dc:61:f1:7e:79:11:62:0c:25:
                    8b:9e:45:ba:ed:23:89:2b:91:79:da:ee:34:40:29:
                    2a:ee:a3:44:48:50:b4:a9:b6:76:b2:e1:2c:37:e5:
                    e5:1c:ef:aa:93:f9:f8:62:20:02:36:3b:58:42:33:
                    84:fe:3b:22:04:8d:f9:7f:d2:d9:2e:6f:dd:7c:78:
                    21:4f:d3:8a:75:e2:d9:95:c4:2a:11:f8:63:c7:bd:
                    44:70:62:d9:b2:4f:91:0d:96:c2:98:fd:23:4f:60:
                    3f:21:8c:27:d7:3a:ee:38:9e:5d:33:fd:ad:b0:07:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C3:A0:88:E2:64:8A:C2:CD:8D:61:5E:E8:59:9D:14:2E:FF:41:AB
            X509v3 Authority Key Identifier:
                keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:31:37:f6:b9:a8:a9:fd:04:6d:ec:fc:c9:df:07:04:e9:
         fb:25:a8:5b:2c:2f:7d:70:4c:3c:31:d8:07:1a:02:8d:d5:a9:
         b2:2a:aa:bb:d6:a7:7c:4f:ea:67:f5:64:ad:47:2a:9b:4a:24:
         1a:50:3f:8f:60:11:a9:7e:ff:d9:f8:26:e4:bc:53:69:7f:50:
         32:9d:18:e0:63:cf:c2:ec:f9:9d:9b:32:58:86:d6:72:0b:8c:
         27:ee:92:47:92:b1:d8:e4:e9:3f:e5:0c:fa:06:ad:9d:ad:ce:
         25:70:65:64:44:97:fb:65:31:c4:9d:e3:8e:dc:9a:c4:cb:df:
         d8:4d:76:24:2d:55:c6:9f:08:5c:a1:78:d2:41:d8:f4:9c:a5:
         42:f5:0e:56:ca:30:71:af:bc:bb:28:b2:49:5f:79:0e:a8:ca:
         f1:70:b7:d0:4b:04:d0:68:9e:4e:cb:e4:da:e7:26:26:a8:3f:
         2a:6a:1a:b2:9f:26:43:01:48:49:72:85:d4:dd:49:d5:c1:ea:
         2f:c4:ed:5a:cf:45:d7:e5:4f:d4:f1:c5:5c:fb:5e:15:4c:9f:
         eb:b1:b9:cc:e7:34:51:f1:66:75:02:63:65:2c:f5:54:42:c9:
         95:81:51:48:14:ab:d4:c2:95:bf:c4:e3:ce:fe:66:1c:10:58:
         ab:15:82:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs8B8IPHBwcBgPMdHoCQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjZkZTMwYTliOGY3NjQ4NDM0NGQwY2QzYjZjMDI3M2Vh
ZGQzNmYwHhcNMjYwOTIyMDYwMDQxWhcNMjYwOTIzMDYwMDQxWjAzMTEwLwYDVQQD
EygyZmMzYTA4OGUyNjQ4YWMyY2Q4ZDYxNWVlODU5OWQxNDJlZmY0MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIie9tWy+pN4cVcis0tLA9q4fQ5D
w6nNgZfFDVH3NRq5xjz3zyVr1AlNQsUozzaaS0Gln8SyIGjosakDGwRHPmzzYsyN
hIcsyyEenU5qQtxpbhn6kkMACPzU/VZFHKG1UhCfiggjOKF/nmzlKRo7jhifBNiF
KO0nxVXjteNNmpycFRK/2IsJf7h5y/LcYfF+eRFiDCWLnkW67SOJK5F52u40QCkq
7qNESFC0qbZ2suEsN+XlHO+qk/n4YiACNjtYQjOE/jsiBI35f9LZLm/dfHghT9OK
deLZlcQqEfhjx71EcGLZsk+RDZbCmP0jT2A/IYwn1zruOJ5dM/2tsAcbcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/DoIjiZIrCzY1hXuhZnRQu/0GrMB8GA1UdIwQY
MBaAFDL23jCpuPdkhDRNDNO2wCc+rdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUt
YzA0MDQ0MzdlODViLzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUtYzA0MDQ0MzdlODVi
LzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLQxN/a5
qKn9BG3s/MnfBwTp+yWoWywvfXBMPDHYBxoCjdWpsiqqu9anfE/qZ/VkrUcqm0ok
GlA/j2ARqX7/2fgm5LxTaX9QMp0Y4GPPwuz5nZsyWIbWcguMJ+6SR5Kx2OTpP+UM
+gatna3OJXBlZESX+2UxxJ3jjtyaxMvf2E12JC1Vxp8IXKF40kHY9JylQvUOVsow
ca+8uyiySV95DqjK8XC30EsE0GieTsvk2ucmJqg/Kmoasp8mQwFISXKF1N1J1cHq
L8TtWs9F1+VP1PHFXPteFUyf67G5zOc0UfFmdQJjZSz1VELJlYFRSBSr1MKVv8Tj
zv5mHBBYqxWC2A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:48 2026 by rpki-client