Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
File:                     MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json)
Hash identifier:          k8VxkFR11feXh/JYzA51FADJYkzajIFZbFE9jt7NHbw=
Subject key identifier:   29:E2:94:87:70:46:FA:F1:62:03:65:7B:2E:EB:6F:39:9E:79:59:14
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Certificate issuer:       /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial:       01A0890C2B549A7EE4D31136744A4A0B6F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
Manifest number:          0717
Signing time:             Thu 10 Sep 2026 02:01:11 +0000
Manifest this update:     Thu 10 Sep 2026 02:01:11 +0000
Manifest next update:     Fri 11 Sep 2026 02:01:11 +0000
Files and hashes:         1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: uK/0HHIf6LJjdo0UKutPWbZKbOPKlK27HozjZTBOAfw=)
                          2: yoaSvhM2SxGwNoRmYbo8QxuOKrI.roa (hash: O7GQTBOF8zlKkXvBbmCOA0WzhhAE8/z/eCQVBfl52Rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 02:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0c:2b:54:9a:7e:e4:d3:11:36:74:4a:4a:0b:6f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
        Validity
            Not Before: Sep 10 02:01:11 2026 GMT
            Not After : Sep 11 02:01:11 2026 GMT
        Subject: CN=29e294877046faf16203657b2eeb6f399e795914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:42:43:e3:97:ed:15:d2:b2:66:07:c5:d4:
                    93:61:56:b5:82:6b:d5:fc:00:8d:cb:b0:8b:0f:c1:
                    99:ce:18:f6:78:3f:6c:8d:e9:56:a3:bb:4c:76:08:
                    57:c3:c2:81:79:bb:3e:a4:bf:33:68:0a:53:e2:74:
                    47:93:06:01:99:d9:63:c7:f6:a5:a5:46:54:85:67:
                    7b:5f:24:72:bf:06:9a:3d:5b:ca:8e:b0:aa:e3:e8:
                    eb:fa:ff:78:1a:8c:e5:f8:19:e7:de:df:5c:6e:6a:
                    c1:16:0e:86:1b:d0:3f:19:5e:ee:4f:bf:29:f2:33:
                    22:57:2f:81:48:33:e8:05:9a:cc:ac:47:a4:8e:86:
                    26:13:1d:2f:5c:08:df:b8:75:0b:91:18:75:3d:a1:
                    3f:a1:6f:51:e3:65:8d:7d:20:85:c4:87:0c:2d:cd:
                    6b:e8:92:07:b4:93:79:88:22:9c:cc:90:ee:56:0d:
                    5a:db:ae:2a:b7:06:bb:f8:7c:36:b5:a0:21:3a:59:
                    03:9f:87:6a:d3:9b:1e:45:d0:17:2d:4f:92:9b:5e:
                    a6:30:a6:2b:df:d4:37:59:8d:69:60:81:4f:12:d6:
                    88:c2:38:3c:f0:ce:a6:95:1d:4e:92:75:c5:ff:83:
                    cc:68:9b:04:81:3d:97:80:ad:40:3a:7c:b8:7e:0b:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E2:94:87:70:46:FA:F1:62:03:65:7B:2E:EB:6F:39:9E:79:59:14
            X509v3 Authority Key Identifier:
                keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:13:76:b4:fd:c6:1b:81:3f:c5:01:4a:13:ea:06:92:f3:e9:
         0b:9b:3d:42:28:07:61:d8:db:8d:54:19:94:62:83:36:58:36:
         ac:70:1d:ee:0f:56:cd:77:58:b8:b2:e6:19:dc:c2:80:11:47:
         6b:49:93:b8:9c:82:2e:db:3b:1b:9e:28:04:58:28:83:25:db:
         62:14:a1:ba:5c:2e:46:36:23:21:a4:f6:d2:79:ec:1e:22:1d:
         ac:32:bd:bf:ae:b5:f2:77:ee:26:ec:35:2d:4b:65:18:d8:31:
         78:61:43:01:33:27:cf:fc:f4:e9:e6:2d:90:dd:5b:98:79:39:
         38:c5:50:66:a4:86:66:39:7d:97:25:8f:32:28:71:e4:17:2f:
         9b:fb:ff:f0:6c:5a:dd:40:af:08:97:0e:61:d6:68:79:87:19:
         66:9e:34:b8:27:08:8f:84:be:b4:af:85:be:8d:b0:3a:60:4f:
         68:d8:26:66:bf:18:01:1a:4d:d1:c0:9a:af:9e:ec:a0:0a:20:
         19:ba:cf:d3:ad:65:74:7d:03:f5:1d:91:0f:69:20:64:16:e1:
         c7:dd:84:47:72:ce:72:15:f4:71:14:2b:ce:10:84:e8:9d:f8:
         5f:52:cb:d2:f6:84:45:c2:06:3d:03:28:c5:6b:26:94:85:af:
         f4:0d:1d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJDCtUmn7k0xE2dEpKC28LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNTE4YzdiNTRiNDQxMjcwODNmNjI2ZDNlMTUxOGY0NDU0
Y2UwNTUwHhcNMjYwOTEwMDIwMTExWhcNMjYwOTExMDIwMTExWjAzMTEwLwYDVQQD
EygyOWUyOTQ4NzcwNDZmYWYxNjIwMzY1N2IyZWViNmYzOTllNzk1OTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe9CQ+OX7RXSsmYHxdSTYVa1gmvV
/ACNy7CLD8GZzhj2eD9sjelWo7tMdghXw8KBebs+pL8zaApT4nRHkwYBmdljx/al
pUZUhWd7XyRyvwaaPVvKjrCq4+jr+v94Gozl+Bnn3t9cbmrBFg6GG9A/GV7uT78p
8jMiVy+BSDPoBZrMrEekjoYmEx0vXAjfuHULkRh1PaE/oW9R42WNfSCFxIcMLc1r
6JIHtJN5iCKczJDuVg1a264qtwa7+Hw2taAhOlkDn4dq05seRdAXLU+Sm16mMKYr
39Q3WY1pYIFPEtaIwjg88M6mlR1OknXF/4PMaJsEgT2XgK1AOny4fgvrZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnilIdwRvrxYgNley7rbzmeeVkUMB8GA1UdIwQY
MBaAFDFRjHtUtEEnCD9ibT4VGPRFTOBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVZHTWUxUzBRU2NJUDJKdFBoVVk5RVZNNEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81MWQ0YjUtYzI3ZC00YjdjLTkwNzAt
NzIxMTc1ZDY1ZWI4LzEvTVZHTWUxUzBRU2NJUDJKdFBoVVk5RVZNNEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81MWQ0YjUtYzI3ZC00YjdjLTkwNzAtNzIxMTc1ZDY1ZWI4
LzEvTVZHTWUxUzBRU2NJUDJKdFBoVVk5RVZNNEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRN2tP3G
G4E/xQFKE+oGkvPpC5s9QigHYdjbjVQZlGKDNlg2rHAd7g9WzXdYuLLmGdzCgBFH
a0mTuJyCLts7G54oBFgogyXbYhShulwuRjYjIaT20nnsHiIdrDK9v6618nfuJuw1
LUtlGNgxeGFDATMnz/z06eYtkN1bmHk5OMVQZqSGZjl9lyWPMihx5Bcvm/v/8Gxa
3UCvCJcOYdZoeYcZZp40uCcIj4S+tK+Fvo2wOmBPaNgmZr8YARpN0cCar57soAog
GbrP061ldH0D9R2RD2kgZBbhx92ER3LOchX0cRQrzhCE6J34X1LL0vaERcIGPQMo
xWsmlIWv9A0dIw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:18:17 2026 by rpki-client