Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File:                     MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier:          +3TJ8OHNbDPmIIz97+IP71b8mNDJJOysdzdrwUzYi94=
Subject key identifier:   9F:ED:CE:E8:61:15:F0:79:F6:53:F8:0C:36:1E:02:F8:F7:53:84:E4
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer:       /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial:       01A0DB720A980ACAB9A077B3874E227B6B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number:          0B33
Signing time:             Sat 26 Sep 2026 02:01:19 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:19 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:19 +0000
Files and hashes:         1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: DMDUWlzoYKNcx1cxnBvvAqrdRxvYnDVXJMcuoV9Vaao=)
                          2: YoFYoBiko7Apkf050UyhpWOHR7I.asa (hash: +5NRXHeGjZaQc0sJhs0FvfZ6EydJKzilLn2PX/d7aog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:0a:98:0a:ca:b9:a0:77:b3:87:4e:22:7b:6b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
        Validity
            Not Before: Sep 26 02:01:19 2026 GMT
            Not After : Sep 27 02:01:19 2026 GMT
        Subject: CN=9fedcee86115f079f653f80c361e02f8f75384e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:25:77:9b:7b:71:ba:da:76:53:c3:de:39:
                    21:1b:09:60:b5:2e:26:30:dc:40:54:ab:43:41:9f:
                    a1:e2:85:ca:53:79:bd:c2:ad:0f:e5:b7:26:64:08:
                    15:84:ec:4e:b2:16:ce:10:a3:ff:3e:1c:86:15:fb:
                    ca:1e:a7:b6:6f:34:ce:ad:a3:45:02:80:2a:62:24:
                    67:e8:e1:41:15:83:bd:16:26:79:ee:6e:fa:cb:ca:
                    5f:41:8f:9a:88:fc:c3:9c:09:b2:a3:41:4b:36:fb:
                    70:e8:b3:28:5c:04:dd:72:ad:82:0f:86:13:e2:2e:
                    61:ab:89:b9:12:31:27:ca:5c:f9:71:60:2b:a8:dc:
                    01:91:01:bb:d0:31:a4:9e:88:cd:3e:5f:f1:4c:56:
                    d0:81:de:a4:28:8a:b9:86:b6:9a:63:73:05:c1:f1:
                    f9:40:11:34:1b:90:eb:0b:ba:10:78:69:86:dd:07:
                    c4:f0:f6:78:1d:29:8f:3c:05:d2:9a:20:5c:56:89:
                    17:f4:ac:b0:21:f6:48:c3:0f:ba:dd:6d:24:31:de:
                    8e:5b:fd:9a:e7:4f:6c:78:16:68:f6:6a:dd:45:e0:
                    4d:2c:52:9b:49:f4:16:3c:7e:53:b1:ac:4b:83:cd:
                    d3:ab:b5:8a:d1:5b:59:0b:af:b3:8e:f1:42:a3:fc:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:ED:CE:E8:61:15:F0:79:F6:53:F8:0C:36:1E:02:F8:F7:53:84:E4
            X509v3 Authority Key Identifier:
                keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a7:d1:e2:d3:b9:c8:7a:76:2b:d8:06:0c:77:c8:1d:54:fc:
         03:a0:ee:c8:b4:85:0d:20:1a:7e:f1:39:8a:c8:ef:80:23:d4:
         6d:47:0d:d8:fd:73:65:bf:07:f0:d9:6e:5d:8c:5d:30:58:0f:
         2a:af:c6:9b:40:66:4d:10:a6:05:77:75:06:b8:5b:f9:40:47:
         ce:fc:2e:96:3d:82:2f:e1:83:f4:7f:cf:40:35:d2:0a:9a:9c:
         9e:f4:73:05:e3:6f:41:bc:1f:38:ae:1a:fa:61:55:64:c4:10:
         cb:e8:05:6b:14:ac:10:2d:7b:af:0d:5f:ff:2c:69:de:27:ac:
         de:96:5f:b9:fd:86:f1:c2:e9:fd:e7:88:ca:7e:7c:0f:97:c7:
         12:fa:46:55:84:41:5f:db:86:54:c9:38:d9:30:eb:55:f0:24:
         6e:27:c8:1f:13:74:cd:d0:aa:99:13:8f:4e:7e:79:ce:df:c3:
         d0:34:40:46:7c:c8:c4:2f:39:19:4f:69:12:94:f2:a8:9d:10:
         e7:aa:f0:86:c7:bb:37:40:1a:0e:7b:1b:ef:95:5d:6b:a8:f5:
         2e:06:ae:62:55:70:da:b7:50:fa:00:14:59:de:6f:00:4d:7e:
         fb:0e:f2:3c:5f:89:42:97:9d:0d:1b:f6:48:08:81:64:ca:37:
         0f:3c:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:28:18 2026 by rpki-client