Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File:                     MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier:          C/z5epZ5fknNtG/GHbf+/UomXLi9Fp9qCB7AEBNR118=
Subject key identifier:   B3:7D:B4:A7:4A:B4:27:6D:5A:C2:04:33:2A:8F:38:26:53:62:79:CC
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer:       /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial:       019D9A07183BFEF366AEE1AFDD158F6BE601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number:          0DBB
Signing time:             Fri 17 Apr 2026 06:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:49 +0000
Files and hashes:         1: 3aS_biMuk3t6OSrvJyokC_jXDfU.roa (hash: uIA1uRbc2hX8KsAKbb90U8OFKc7TaqfJ9JatfJ5wndY=)
                          2: 4K-iSTTQ62k9u_ts6FEnNZujPB8.roa (hash: JFw4hB1oA1nXw9shAVgFEoq8dXT9KA58CiXxsf23Cvk=)
                          3: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: c5cONVN76StTY8LbMp8rLt5IcDMsW/8NKp6nGtoloc0=)
                          4: hLLZvlA7_aLzHqMN-k0zYYWqdoI.roa (hash: 11v4o65bjg9Zi3P8TmWqgVpKzKXaXy9HU3XbxQsjkfA=)
                          5: whsxlRD8ACtbwVUDR7WD9M1I_Zo.roa (hash: WyhnHPwfaB8TlTtQhX3k0EqL0gIjvm9v03iJPq6dfuQ=)
                          6: xuAdygYVpRiV81z46OX-kd86p2I.roa (hash: w1oNZfbPGzW3kF1Su2UyFw287xX5XbrHkRu08WfqL70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:18:3b:fe:f3:66:ae:e1:af:dd:15:8f:6b:e6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
        Validity
            Not Before: Apr 17 06:00:49 2026 GMT
            Not After : Apr 18 06:00:49 2026 GMT
        Subject: CN=b37db4a74ab4276d5ac204332a8f3826536279cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:34:24:93:99:f7:46:d4:33:45:e6:7d:76:
                    7b:ed:4c:44:bf:cd:fb:2c:0c:d5:40:12:f3:58:1e:
                    8e:81:7c:fc:f0:da:a0:27:cb:78:96:1e:d3:79:10:
                    1b:96:05:9b:13:e0:ec:86:fe:21:dc:08:c1:ad:86:
                    1f:59:de:89:35:3b:80:4f:bb:04:e0:af:b0:2f:30:
                    fd:7a:6b:e5:21:8d:de:fb:7f:71:c0:3f:6e:a4:20:
                    e4:d1:dc:65:65:71:0d:2a:3c:f3:d9:c8:85:7b:27:
                    a6:76:c6:0d:4e:c0:35:b1:13:29:4a:59:3c:fc:11:
                    39:2a:49:d4:da:6c:28:e1:b4:a3:7e:0d:15:0b:69:
                    af:e1:9a:e5:ae:cc:83:d0:c2:25:a0:cf:5a:7c:e5:
                    41:1d:bc:3e:83:d6:64:ed:83:53:82:6d:4c:97:c1:
                    71:f4:32:0b:1a:35:53:bf:c8:44:76:42:f6:c3:84:
                    b5:3d:01:53:be:bd:a5:71:f9:2d:dc:7b:0f:0c:1e:
                    68:59:87:56:b5:e6:25:5c:ac:7b:a1:ba:af:76:03:
                    36:fc:ed:cd:12:79:5a:c4:11:ee:4f:ec:07:24:60:
                    df:fe:2c:42:53:09:1e:cf:a3:d8:ca:51:b6:86:3c:
                    fb:c3:2b:ab:be:9a:3b:11:4d:c7:38:0b:e6:d5:eb:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7D:B4:A7:4A:B4:27:6D:5A:C2:04:33:2A:8F:38:26:53:62:79:CC
            X509v3 Authority Key Identifier:
                keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ee:e7:b0:db:c7:73:10:b0:05:70:54:8e:82:98:ad:e8:ba:
         d8:3c:c3:49:d8:4c:08:c0:30:fe:cc:41:5a:4a:06:50:75:29:
         87:61:d1:b3:07:1b:f5:7b:e7:6d:fb:0c:26:97:9b:81:26:52:
         95:ca:05:6f:42:fe:2f:56:27:ae:96:19:af:9d:22:34:6b:38:
         26:e2:f4:41:b6:23:d8:7d:83:3b:e5:ac:35:a7:c7:0a:58:8f:
         4a:d5:3a:eb:ca:a9:3a:a0:d5:54:ad:de:2f:e8:f8:76:ef:d0:
         a9:c6:2d:f1:45:7d:43:06:94:aa:1e:a4:0e:d2:03:55:b8:24:
         52:c7:3b:00:2e:3d:a3:2f:f5:9f:e6:08:69:f3:04:36:08:77:
         8f:a9:e9:e7:08:a0:47:d4:b1:77:80:4c:81:e7:aa:d0:52:07:
         0d:d8:01:5b:3a:89:95:7e:39:2c:63:5d:ec:fe:a4:9e:f5:26:
         d8:fb:92:64:1b:68:0e:88:74:9b:7d:ee:d6:d1:aa:23:bb:19:
         24:6d:0f:9d:5e:45:06:c8:85:43:29:ae:34:c1:8f:36:c7:b8:
         ae:e6:e5:22:1c:08:cd:bb:c3:08:8a:08:a5:5b:5e:8c:39:6e:
         2a:c3:df:94:3b:1c:57:66:ea:1c:86:95:42:9a:3e:c4:08:44:
         da:cb:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:41 2026 by rpki-client