Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File:                     MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier:          jZIUMwYuws3v2z/pFamRMwtCYCCkPNT1Be/E8qG9aco=
Subject key identifier:   FF:B0:64:03:90:93:57:1C:18:FA:F0:B4:F5:69:9F:85:7A:3D:55:EB
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer:       /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial:       01A001A657A6D7DCCF4A141A93F0DC5D5318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number:          0E60
Signing time:             Fri 14 Aug 2026 19:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:13 +0000
Files and hashes:         1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: nzHPaGJisF6UL1l9DnEJBodjLlyEjx6Uf2F6Gr93mgc=)
                          2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:57:a6:d7:dc:cf:4a:14:1a:93:f0:dc:5d:53:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
        Validity
            Not Before: Aug 14 19:01:13 2026 GMT
            Not After : Aug 15 19:01:13 2026 GMT
        Subject: CN=ffb064039093571c18faf0b4f5699f857a3d55eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:97:27:8e:cb:57:e4:29:5f:99:03:df:c7:
                    f1:97:eb:ac:a7:96:ae:d4:e2:0e:cd:02:98:79:e0:
                    9d:f5:83:18:ab:ff:3a:0d:59:89:bb:c9:04:d9:25:
                    e1:fc:3e:55:d9:9c:c1:53:04:41:9a:af:7b:b1:05:
                    b3:f3:2e:90:30:35:40:77:26:98:57:7b:49:05:92:
                    fc:e0:33:20:67:a5:e6:4f:c3:6c:47:ff:a5:87:07:
                    ca:ff:72:2b:70:d4:f3:05:59:8c:cd:a8:e1:07:4b:
                    ab:7e:eb:d6:bb:e6:c2:7a:27:9b:78:2b:5a:b0:35:
                    1a:2a:11:bf:92:da:8c:46:ae:e6:07:72:6c:56:1e:
                    dd:50:b2:88:52:e2:11:65:6e:89:d9:ca:1a:75:1c:
                    a6:9d:05:a3:ac:1d:f9:01:2d:6f:89:92:7c:d5:b2:
                    bd:58:c1:83:6f:25:f6:06:80:3c:f5:7f:53:bb:55:
                    7b:fd:60:bf:b8:54:ec:04:b5:29:23:69:a3:8c:4b:
                    a3:db:a5:a3:62:1a:38:bc:c2:d2:ac:b7:56:b1:40:
                    31:45:d0:10:68:fb:e5:45:13:0d:e7:fa:82:ca:8d:
                    13:81:32:dc:91:0d:12:fa:e7:8e:42:3f:1a:c6:52:
                    c2:bc:98:e3:e5:31:78:14:4e:23:4b:2e:3a:25:40:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B0:64:03:90:93:57:1C:18:FA:F0:B4:F5:69:9F:85:7A:3D:55:EB
            X509v3 Authority Key Identifier:
                keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:19:73:4f:8d:c6:17:56:8b:85:1d:cc:79:50:2a:c0:00:38:
         81:62:15:91:96:e9:69:e2:07:82:34:a3:c1:4f:a9:d5:26:9a:
         49:3e:9e:90:3e:42:15:03:64:c9:f1:64:65:58:77:8e:03:9f:
         65:b4:27:29:73:51:ad:03:98:d9:45:0f:f5:9e:34:fc:64:ee:
         0b:ee:48:1a:ce:88:85:c8:90:db:b3:86:53:39:71:01:40:81:
         52:f6:55:8c:9f:9e:65:83:75:ec:be:15:ee:1d:d2:09:b2:3c:
         b3:60:ad:96:6a:5b:b4:dd:f0:7a:b0:1c:3c:0f:71:69:d1:5b:
         41:8c:46:50:06:18:97:e7:0d:dc:58:0c:54:5e:80:b6:7b:b9:
         38:9b:59:4e:92:a2:78:67:e0:52:bc:dc:36:98:ae:84:ac:20:
         2d:9a:66:c2:83:92:63:e8:3d:8b:c7:57:32:a5:45:4d:e5:7a:
         be:cf:41:2f:b6:be:71:15:06:26:ec:55:71:7c:ec:6a:4b:d5:
         61:8b:a7:08:67:d5:1c:b8:35:41:ed:ef:97:c1:8c:ec:14:54:
         72:f4:93:c8:66:5b:3b:8b:ca:ce:1b:a1:75:17:47:1b:a3:ab:
         b2:ad:0a:01:ed:1c:76:28:d1:f4:5a:e2:94:0b:ed:f1:0e:7d:
         e6:b9:ec:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABplem19zPShQak/DcXVMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2EwMzk1MDJkNDZhNmI5OTA5MTEwY2UyYWIxMzk2ODc3
YmQwOGUwHhcNMjYwODE0MTkwMTEzWhcNMjYwODE1MTkwMTEzWjAzMTEwLwYDVQQD
EyhmZmIwNjQwMzkwOTM1NzFjMThmYWYwYjRmNTY5OWY4NTdhM2Q1NWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx42XJ47LV+QpX5kD38fxl+usp5au
1OIOzQKYeeCd9YMYq/86DVmJu8kE2SXh/D5V2ZzBUwRBmq97sQWz8y6QMDVAdyaY
V3tJBZL84DMgZ6XmT8NsR/+lhwfK/3IrcNTzBVmMzajhB0urfuvWu+bCeiebeCta
sDUaKhG/ktqMRq7mB3JsVh7dULKIUuIRZW6J2coadRymnQWjrB35AS1viZJ81bK9
WMGDbyX2BoA89X9Tu1V7/WC/uFTsBLUpI2mjjEuj26WjYho4vMLSrLdWsUAxRdAQ
aPvlRRMN5/qCyo0TgTLckQ0S+ueOQj8axlLCvJjj5TF4FE4jSy46JUCdhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+wZAOQk1ccGPrwtPVpn4V6PVXrMB8GA1UdIwQY
MBaAFDB6A5UC1GprmQkRDOKrE5aHe9COMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAt
Y2UyYTQ5NmZlZTg2LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAtY2UyYTQ5NmZlZTg2
LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhlzT43G
F1aLhR3MeVAqwAA4gWIVkZbpaeIHgjSjwU+p1SaaST6ekD5CFQNkyfFkZVh3jgOf
ZbQnKXNRrQOY2UUP9Z40/GTuC+5IGs6IhciQ27OGUzlxAUCBUvZVjJ+eZYN17L4V
7h3SCbI8s2CtlmpbtN3werAcPA9xadFbQYxGUAYYl+cN3FgMVF6Atnu5OJtZTpKi
eGfgUrzcNpiuhKwgLZpmwoOSY+g9i8dXMqVFTeV6vs9BL7a+cRUGJuxVcXzsakvV
YYunCGfVHLg1Qe3vl8GM7BRUcvSTyGZbO4vKzhuhdRdHG6Orsq0KAe0cdijR9Fri
lAvt8Q595rnsQQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:23 2026 by rpki-client