Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File:                     MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier:          MN/yijrxbxxVn7OIBeZDklTG6KDhKXKM+sj1s2gTqL8=
Subject key identifier:   07:CA:1F:0D:7E:9E:43:0C:70:99:2B:3C:91:D5:00:39:91:D3:61:23
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer:       /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial:       01A0024AB6A82D9D22BF4056133A92223921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number:          0EBD
Signing time:             Fri 14 Aug 2026 22:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:45 +0000
Files and hashes:         1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: eB4pkZ/96A//zAu/NIj8PKLVqbStXQzeVMxiaoXbkhE=)
                          2: S0jCwF-2vE4If7aoddZBBXxgCa4.roa (hash: sC7YQJ9Sv4ok1eZ8e1VpmYub7DnojsItviVQVfJV7k8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:b6:a8:2d:9d:22:bf:40:56:13:3a:92:22:39:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
        Validity
            Not Before: Aug 14 22:00:45 2026 GMT
            Not After : Aug 15 22:00:45 2026 GMT
        Subject: CN=07ca1f0d7e9e430c70992b3c91d5003991d36123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:4d:65:b8:19:bc:4d:a2:82:25:c0:34:51:
                    f7:04:98:d2:9e:f5:5a:d1:3d:6b:4f:90:cd:21:41:
                    23:02:df:be:84:d4:d4:c6:bc:d9:09:39:28:de:08:
                    77:dc:f7:60:a4:24:3f:95:b1:b8:5e:5d:d5:2b:7c:
                    ba:f9:91:94:77:af:50:40:94:a9:56:07:ff:d1:27:
                    09:85:91:f5:3d:70:56:21:e5:50:63:1c:01:54:c2:
                    21:95:b6:8a:1a:59:48:f0:a3:66:4f:c4:f4:0e:e6:
                    a9:14:9b:79:af:6d:4b:8c:31:ef:45:1d:00:ee:2f:
                    03:cb:45:7c:2b:90:31:4b:dc:90:59:0d:73:1d:3f:
                    8c:04:af:76:61:27:4f:5b:a8:f9:f7:1f:fb:0a:0f:
                    3b:a2:12:2c:a7:31:b5:71:39:df:09:50:7e:f8:0d:
                    db:b0:5e:86:aa:a9:cf:7f:3a:83:79:7c:a0:bc:74:
                    eb:97:5a:2b:98:ac:e7:8a:96:80:a8:c2:21:ec:2c:
                    03:25:8f:00:96:71:3f:14:24:b9:e9:5a:df:39:fb:
                    92:b2:3d:93:bd:96:16:75:98:4c:39:52:99:0e:35:
                    9d:98:07:1c:0a:5c:f9:1b:64:ca:90:3d:10:d2:73:
                    70:71:73:56:a3:38:3d:f2:52:f3:e1:49:d6:ed:d8:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CA:1F:0D:7E:9E:43:0C:70:99:2B:3C:91:D5:00:39:91:D3:61:23
            X509v3 Authority Key Identifier:
                keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:be:36:0c:60:fb:81:5e:6d:6f:10:5c:4d:64:23:d6:53:
         d3:c0:ae:1b:73:8b:4d:cb:39:7e:1b:cc:25:52:7d:70:d9:34:
         c2:da:fd:e7:e1:85:8d:54:b5:8a:bc:a6:61:76:2c:c2:05:6c:
         a7:d3:3d:d5:93:3d:d1:46:c2:f1:a2:b6:07:cc:25:9d:bb:bd:
         ed:6e:68:a8:b9:a2:98:87:3d:74:d3:02:29:25:ef:cc:c9:97:
         a7:35:1d:d8:42:e9:5a:56:fe:47:79:9f:fb:05:10:5d:2a:21:
         33:95:28:45:c6:50:04:d5:2e:6c:5c:75:e6:f6:98:a9:b6:a9:
         1d:4d:48:c2:a4:7f:b1:1b:db:49:d1:0b:d5:6e:80:88:c9:52:
         8f:84:84:81:18:17:90:bd:2c:b1:d8:cc:6d:a9:a0:a4:e5:cc:
         a0:76:3c:72:35:77:f4:bf:5b:4c:ba:7f:6f:26:cf:6e:e6:e2:
         c6:71:6e:23:11:2b:d7:07:67:8c:3a:70:47:da:1a:fd:25:c4:
         45:3b:c4:c0:23:8d:ff:85:fe:e0:0d:b0:46:c1:0c:92:a6:80:
         60:15:51:e6:ab:b8:d5:16:f6:c8:b6:a2:d7:62:7d:83:b5:17:
         44:c2:f6:c8:5b:07:9a:d4:6f:f9:9e:af:e2:34:7e:3f:87:2b:
         88:1e:43:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSraoLZ0iv0BWEzqSIjkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmI0NjhjYzMxZWYzYTNkMDgxYWM4ZjAyYjI3MWUzMTQ3
NTU5YmYwHhcNMjYwODE0MjIwMDQ1WhcNMjYwODE1MjIwMDQ1WjAzMTEwLwYDVQQD
EygwN2NhMWYwZDdlOWU0MzBjNzA5OTJiM2M5MWQ1MDAzOTkxZDM2MTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mhNZbgZvE2igiXANFH3BJjSnvVa
0T1rT5DNIUEjAt++hNTUxrzZCTko3gh33PdgpCQ/lbG4Xl3VK3y6+ZGUd69QQJSp
Vgf/0ScJhZH1PXBWIeVQYxwBVMIhlbaKGllI8KNmT8T0DuapFJt5r21LjDHvRR0A
7i8Dy0V8K5AxS9yQWQ1zHT+MBK92YSdPW6j59x/7Cg87ohIspzG1cTnfCVB++A3b
sF6GqqnPfzqDeXygvHTrl1ormKznipaAqMIh7CwDJY8AlnE/FCS56VrfOfuSsj2T
vZYWdZhMOVKZDjWdmAccClz5G2TKkD0Q0nNwcXNWozg98lLz4UnW7dh97wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfKHw1+nkMMcJkrPJHVADmR02EjMB8GA1UdIwQY
MBaAFDBrRozDHvOj0IGsjwKyceMUdVm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAt
MzM4Mjc5NDA0OWMyLzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAtMzM4Mjc5NDA0OWMy
LzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+q+Ngxg
+4FebW8QXE1kI9ZT08CuG3OLTcs5fhvMJVJ9cNk0wtr95+GFjVS1irymYXYswgVs
p9M91ZM90UbC8aK2B8wlnbu97W5oqLmimIc9dNMCKSXvzMmXpzUd2ELpWlb+R3mf
+wUQXSohM5UoRcZQBNUubFx15vaYqbapHU1IwqR/sRvbSdEL1W6AiMlSj4SEgRgX
kL0ssdjMbamgpOXMoHY8cjV39L9bTLp/bybPbubixnFuIxEr1wdnjDpwR9oa/SXE
RTvEwCON/4X+4A2wRsEMkqaAYBVR5qu41Rb2yLai12J9g7UXRML2yFsHmtRv+Z6v
4jR+P4criB5DYg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:46:22 2026 by rpki-client