Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File:                     MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier:          dq0xg/bV8vMAoHxJnxuseGvaYRcD5qLJhh+X/MjlVWs=
Subject key identifier:   A0:68:1A:A7:1E:F7:79:F9:76:2B:81:49:F8:16:0E:81:07:3C:FD:7D
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer:       /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial:       019D386565EC70C5E0037BC40CA66D1016B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 07:01:02 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:02 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:02 +0000
Files and hashes:         1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: umfBSXP1uPNNgLTv1+hwxL4OpEDsR+ILgAFJAioVIAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:65:ec:70:c5:e0:03:7b:c4:0c:a6:6d:10:16:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
        Validity
            Not Before: Mar 29 07:01:02 2026 GMT
            Not After : Mar 30 07:01:02 2026 GMT
        Subject: CN=a0681aa71ef779f9762b8149f8160e81073cfd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:83:d1:25:7f:ce:62:04:9d:fd:ff:38:62:
                    6d:0e:41:af:82:f7:5e:4b:82:ea:9e:f4:d2:cc:3b:
                    73:38:a0:de:76:06:59:22:3d:b3:04:0c:99:a9:0d:
                    fb:c8:8d:17:ab:a3:87:05:16:70:22:cd:1d:fa:e5:
                    46:4c:90:92:c6:b1:cb:bd:51:e8:e9:92:b9:74:dc:
                    5e:3a:4f:89:1f:f0:97:f6:78:94:75:3f:bf:07:3b:
                    5a:e8:6b:02:b5:30:b2:a3:a2:4e:3f:11:3f:ce:38:
                    89:f2:4e:0f:c4:01:0a:1f:87:b3:7a:49:c5:b9:7c:
                    f8:be:df:a4:82:2c:25:6b:08:6e:7e:d4:b6:28:21:
                    f8:38:be:9a:b9:b8:c8:c0:74:65:e9:f2:df:a3:9e:
                    19:90:d3:3c:86:bb:7d:9c:76:08:d7:f9:a3:fd:8f:
                    d4:4c:2f:02:40:42:25:06:33:10:b6:c5:da:e7:82:
                    65:1f:42:91:15:d7:46:8c:b4:a6:b7:63:43:b1:47:
                    d2:f5:2b:b7:40:07:da:33:ab:b5:14:5e:d3:93:85:
                    09:e7:4a:35:eb:08:bf:aa:b9:e6:9c:3f:8b:8b:77:
                    8c:82:a2:a6:38:d0:6a:9f:ec:44:3e:b5:de:f1:c7:
                    9e:9b:96:ff:6b:b7:af:8b:50:66:75:eb:41:fb:31:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:68:1A:A7:1E:F7:79:F9:76:2B:81:49:F8:16:0E:81:07:3C:FD:7D
            X509v3 Authority Key Identifier:
                keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2d:3a:c8:ee:b5:a2:4b:64:80:89:b0:50:4c:55:be:3a:8c:
         dd:40:1f:c4:5c:15:33:3c:43:13:71:36:ea:1e:a2:27:e4:9f:
         25:56:b4:70:5e:65:61:19:d6:43:a8:c4:53:1c:4c:3d:59:20:
         e1:7b:5e:64:d9:de:66:24:ad:bd:0f:d8:83:2f:44:dd:89:79:
         a0:36:72:e7:e3:47:3c:30:c3:65:fa:a8:a4:c9:af:81:d8:e5:
         d7:8d:ea:28:14:03:7a:89:18:fc:7e:88:ef:10:40:e1:56:16:
         d7:3b:7d:ff:a1:7c:68:d1:d6:f9:ab:e8:d0:30:17:2e:dd:a4:
         e0:40:a0:fd:88:8e:12:a5:6b:49:6b:60:7e:82:a1:6e:2e:69:
         e6:8b:11:04:9e:13:ce:1f:ed:6a:b9:12:c3:84:be:10:3d:b3:
         07:30:6d:53:d8:c6:fb:46:56:1f:5f:bc:c2:9d:79:c5:61:65:
         ef:1a:20:4d:30:33:7a:12:93:27:b3:e5:ee:b0:e1:62:a9:49:
         af:78:6c:1b:fe:30:e7:5f:2c:67:19:e4:10:46:42:5d:79:e5:
         08:5a:bf:89:18:75:bf:c8:08:fe:8a:95:95:6b:6d:96:a0:fb:
         ab:e5:89:f0:a2:87:8f:5c:ad:11:38:0b:77:28:da:34:32:cf:
         fd:89:52:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZWXscMXgA3vEDKZtEBazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwY2JiNGVhODU3ZjdiMmEyNTkwMmVlMDdhYWUyZTcxMjJk
Y2Q1Y2MwHhcNMjYwMzI5MDcwMTAyWhcNMjYwMzMwMDcwMTAyWjAzMTEwLwYDVQQD
EyhhMDY4MWFhNzFlZjc3OWY5NzYyYjgxNDlmODE2MGU4MTA3M2NmZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVCD0SV/zmIEnf3/OGJtDkGvgvde
S4LqnvTSzDtzOKDedgZZIj2zBAyZqQ37yI0Xq6OHBRZwIs0d+uVGTJCSxrHLvVHo
6ZK5dNxeOk+JH/CX9niUdT+/Bzta6GsCtTCyo6JOPxE/zjiJ8k4PxAEKH4ezeknF
uXz4vt+kgiwlawhuftS2KCH4OL6aubjIwHRl6fLfo54ZkNM8hrt9nHYI1/mj/Y/U
TC8CQEIlBjMQtsXa54JlH0KRFddGjLSmt2NDsUfS9Su3QAfaM6u1FF7Tk4UJ50o1
6wi/qrnmnD+Li3eMgqKmONBqn+xEPrXe8ceem5b/a7evi1BmdetB+zHzxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBoGqce93n5diuBSfgWDoEHPP19MB8GA1UdIwQY
MBaAFDDLtOqFf3sqJZAu4HquLnEi3NXMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU11MDZvVl9leW9sa0M3Z2VxNHVjU0xjMWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMGFiNjctMzJjNC00NzJkLTkyNjgt
Y2ZjZDc2NjI4M2E3LzEvTU11MDZvVl9leW9sa0M3Z2VxNHVjU0xjMWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wMGFiNjctMzJjNC00NzJkLTkyNjgtY2ZjZDc2NjI4M2E3
LzEvTU11MDZvVl9leW9sa0M3Z2VxNHVjU0xjMWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJC06yO61
oktkgImwUExVvjqM3UAfxFwVMzxDE3E26h6iJ+SfJVa0cF5lYRnWQ6jEUxxMPVkg
4XteZNneZiStvQ/Ygy9E3Yl5oDZy5+NHPDDDZfqopMmvgdjl143qKBQDeokY/H6I
7xBA4VYW1zt9/6F8aNHW+avo0DAXLt2k4ECg/YiOEqVrSWtgfoKhbi5p5osRBJ4T
zh/tarkSw4S+ED2zBzBtU9jG+0ZWH1+8wp15xWFl7xogTTAzehKTJ7Pl7rDhYqlJ
r3hsG/4w518sZxnkEEZCXXnlCFq/iRh1v8gI/oqVlWttlqD7q+WJ8KKHj1ytETgL
dyjaNDLP/YlSlQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:46 2026 by rpki-client