Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File:                     MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier:          26u9QPffftRCPodw8qq8vE0Q+zVd5M+RPGRYNDw2XqY=
Subject key identifier:   6D:15:83:0B:0F:DD:97:AB:B4:6E:D5:11:62:D3:2F:D8:75:91:EB:2F
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer:       /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial:       01A08A1F273F58A398A7232A7F4060DD1DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number:          1A44
Signing time:             Thu 10 Sep 2026 07:01:32 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:32 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:32 +0000
Files and hashes:         1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: uwd+SlVGAI3Sizu34KKHtx0xHW/zenXoZrO10bRtLRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1f:27:3f:58:a3:98:a7:23:2a:7f:40:60:dd:1d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
        Validity
            Not Before: Sep 10 07:01:32 2026 GMT
            Not After : Sep 11 07:01:32 2026 GMT
        Subject: CN=6d15830b0fdd97abb46ed51162d32fd87591eb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c4:99:62:d5:39:a8:ec:34:dc:c0:c0:be:eb:
                    e0:14:01:23:bf:4d:9d:91:8c:3e:b0:e5:25:17:71:
                    36:d7:76:c6:fd:d8:72:51:b4:5c:62:e6:7b:20:04:
                    08:4c:9d:ba:0d:00:71:64:93:c5:5f:8a:d9:dc:6e:
                    d2:da:bf:b7:0c:a0:44:a8:51:a0:46:11:34:c1:5e:
                    e0:8c:5e:30:a8:41:2d:df:60:a7:c5:d6:8a:f3:e8:
                    83:70:24:c9:4d:b4:09:f9:c4:20:fd:94:b1:c5:e7:
                    e7:fa:6e:d1:05:5b:0d:4d:3b:72:bb:78:2f:a8:80:
                    73:c7:8a:c0:1f:54:dc:4a:73:92:0c:06:a1:ff:8f:
                    af:37:04:fb:e9:fb:12:de:8a:3c:cc:01:1e:07:e5:
                    41:b7:05:51:1c:d0:3f:2d:1b:88:62:c1:18:30:dc:
                    8d:a8:a8:bf:81:a3:4f:a2:34:01:01:e0:cc:39:a8:
                    a9:46:ed:ff:e3:56:02:d3:5a:7a:f1:31:0c:50:09:
                    a0:d4:8d:25:61:06:7b:32:a8:4c:de:60:68:8e:35:
                    f8:74:b5:b1:fd:f7:09:e8:cb:83:e8:12:63:fe:16:
                    0f:64:62:54:5a:bf:e3:05:09:85:5e:6e:da:55:63:
                    56:3d:43:1a:60:d3:07:e3:83:32:d1:07:db:95:ca:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:15:83:0B:0F:DD:97:AB:B4:6E:D5:11:62:D3:2F:D8:75:91:EB:2F
            X509v3 Authority Key Identifier:
                keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:97:2f:4d:23:75:ac:7f:f4:78:bf:d9:17:dd:4b:03:98:8a:
         ef:3b:49:53:6f:ac:40:a9:28:2e:f8:7c:ad:d9:03:33:be:bd:
         31:c3:ec:c1:26:5d:a2:dc:10:95:38:65:be:4b:94:82:fc:0b:
         d0:86:16:b6:56:b2:86:45:75:82:03:01:96:6b:9f:a3:5c:cb:
         25:34:c1:fb:00:d5:22:0c:c7:ab:5f:e6:82:52:74:47:8a:bc:
         5e:23:23:78:2a:cb:4d:2d:d0:35:ef:1f:64:6f:5e:55:53:1b:
         d3:0e:0c:13:d3:c0:db:f3:0f:9e:80:2f:a8:30:12:e2:61:b6:
         08:f2:18:02:38:ef:bd:87:e9:fc:a7:c4:d8:6d:90:48:1a:98:
         10:13:09:21:82:ec:ab:56:7e:8f:a4:ba:2d:53:6c:2b:9d:93:
         1c:f6:c9:d6:80:b9:11:c2:47:de:3b:f2:dd:af:0e:59:0d:41:
         a8:94:76:b2:8c:19:59:c5:67:29:b1:8d:cc:4c:95:34:d1:11:
         2e:f6:25:e4:18:e9:00:30:19:2f:3d:c9:f0:04:3a:a5:ab:f9:
         b4:3f:1c:a9:00:63:e1:70:8e:17:dd:95:af:51:4d:5d:30:19:
         a8:52:37:9a:e0:df:96:61:d4:44:95:9e:3e:85:09:5b:56:1a:
         26:ae:be:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKHyc/WKOYpyMqf0Bg3R37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2E0NDE1YmFkNDBiNjQzZTEwYmVjNGQyODJjZDMwNzJi
YTU2ZGEwHhcNMjYwOTEwMDcwMTMyWhcNMjYwOTExMDcwMTMyWjAzMTEwLwYDVQQD
Eyg2ZDE1ODMwYjBmZGQ5N2FiYjQ2ZWQ1MTE2MmQzMmZkODc1OTFlYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MSZYtU5qOw03MDAvuvgFAEjv02d
kYw+sOUlF3E213bG/dhyUbRcYuZ7IAQITJ26DQBxZJPFX4rZ3G7S2r+3DKBEqFGg
RhE0wV7gjF4wqEEt32CnxdaK8+iDcCTJTbQJ+cQg/ZSxxefn+m7RBVsNTTtyu3gv
qIBzx4rAH1TcSnOSDAah/4+vNwT76fsS3oo8zAEeB+VBtwVRHNA/LRuIYsEYMNyN
qKi/gaNPojQBAeDMOaipRu3/41YC01p68TEMUAmg1I0lYQZ7MqhM3mBojjX4dLWx
/fcJ6MuD6BJj/hYPZGJUWr/jBQmFXm7aVWNWPUMaYNMH44My0QfblcrZIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0VgwsP3ZertG7VEWLTL9h1kesvMB8GA1UdIwQY
MBaAFDB6RBW61AtkPhC+xNKCzTByulbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hZGU2NjktY2M1Yi00ZWRkLWI5NzEt
NmFlMjg0NmQ4YTUxLzEvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hZGU2NjktY2M1Yi00ZWRkLWI5NzEtNmFlMjg0NmQ4YTUx
LzEvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJcvTSN1
rH/0eL/ZF91LA5iK7ztJU2+sQKkoLvh8rdkDM769McPswSZdotwQlThlvkuUgvwL
0IYWtlayhkV1ggMBlmufo1zLJTTB+wDVIgzHq1/mglJ0R4q8XiMjeCrLTS3QNe8f
ZG9eVVMb0w4ME9PA2/MPnoAvqDAS4mG2CPIYAjjvvYfp/KfE2G2QSBqYEBMJIYLs
q1Z+j6S6LVNsK52THPbJ1oC5EcJH3jvy3a8OWQ1BqJR2sowZWcVnKbGNzEyVNNER
LvYl5BjpADAZLz3J8AQ6pav5tD8cqQBj4XCOF92Vr1FNXTAZqFI3muDflmHURJWe
PoUJW1YaJq6+Hw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 15:27:24 2026 by rpki-client