Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File:                     MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier:          B6ckNMmSYj3xwxrB8lpmhrUHY23kLgZu2GQx/79LydE=
Subject key identifier:   78:C7:CE:5C:92:1C:0A:41:F1:2B:28:7C:2C:98:72:4D:44:E6:A9:E5
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer:       /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial:       019CAC7E264FA3143BD31EB6441684785850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number:          0D40
Signing time:             Mon 02 Mar 2026 03:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:14 +0000
Files and hashes:         1: 3aS_biMuk3t6OSrvJyokC_jXDfU.roa (hash: uIA1uRbc2hX8KsAKbb90U8OFKc7TaqfJ9JatfJ5wndY=)
                          2: 4K-iSTTQ62k9u_ts6FEnNZujPB8.roa (hash: JFw4hB1oA1nXw9shAVgFEoq8dXT9KA58CiXxsf23Cvk=)
                          3: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: 6pQWgeaXJFTweHslSs1j1pPWHxK3m648J0vmhaGzaxY=)
                          4: hLLZvlA7_aLzHqMN-k0zYYWqdoI.roa (hash: 11v4o65bjg9Zi3P8TmWqgVpKzKXaXy9HU3XbxQsjkfA=)
                          5: whsxlRD8ACtbwVUDR7WD9M1I_Zo.roa (hash: WyhnHPwfaB8TlTtQhX3k0EqL0gIjvm9v03iJPq6dfuQ=)
                          6: xuAdygYVpRiV81z46OX-kd86p2I.roa (hash: w1oNZfbPGzW3kF1Su2UyFw287xX5XbrHkRu08WfqL70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:26:4f:a3:14:3b:d3:1e:b6:44:16:84:78:58:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
        Validity
            Not Before: Mar  2 03:01:14 2026 GMT
            Not After : Mar  3 03:01:14 2026 GMT
        Subject: CN=78c7ce5c921c0a41f12b287c2c98724d44e6a9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:c2:7a:bc:bc:b6:fb:4f:65:43:f0:58:4e:
                    1d:82:a1:65:94:d8:53:dd:bd:0a:71:81:62:2b:2b:
                    94:45:36:31:90:8f:0c:eb:53:7d:f7:49:53:d5:8b:
                    ef:03:5a:3f:b7:b2:e0:6c:74:3a:d1:54:1c:6a:03:
                    33:90:f1:0b:eb:ad:b8:cb:47:12:ae:93:ad:51:ab:
                    9f:29:08:31:e2:4c:9b:76:a9:cc:18:e5:37:65:6d:
                    a7:af:dd:fa:95:09:8c:87:37:16:2d:07:58:e2:1e:
                    46:50:e4:08:c5:98:61:bc:d5:b0:32:85:fd:50:2a:
                    20:3c:11:76:e0:0d:1d:48:35:73:13:10:22:11:b6:
                    a8:6d:65:ec:09:1b:d6:b4:af:14:72:71:13:8d:3a:
                    f2:b9:b0:8d:9d:48:c8:2d:e9:47:49:ae:a5:73:f5:
                    3c:5c:f3:1d:31:05:e1:2e:95:b7:5c:cd:9a:2f:0c:
                    6b:70:c3:1a:eb:03:e1:7d:e3:79:36:a1:3f:57:e9:
                    30:88:aa:5a:a4:d5:a9:12:3e:fe:2a:24:6b:1a:31:
                    80:27:da:ef:9e:7c:91:b5:24:c5:2a:6d:66:a0:e5:
                    c3:b6:9c:ab:27:c0:e9:4b:ca:f5:a8:d2:70:cb:36:
                    40:47:b2:90:68:af:5d:bc:84:71:7f:cd:2c:aa:14:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:CE:5C:92:1C:0A:41:F1:2B:28:7C:2C:98:72:4D:44:E6:A9:E5
            X509v3 Authority Key Identifier:
                keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:2f:2f:bc:76:ea:f4:e0:67:b2:61:5a:f2:09:00:7d:1a:
         39:a4:71:93:1a:e2:a9:a0:21:46:42:6c:da:90:90:99:88:42:
         92:21:f5:e3:9f:20:c6:ad:51:3b:07:97:0b:1d:7c:31:3e:b7:
         01:57:bb:f3:02:a6:a9:00:e9:f8:28:c5:85:09:15:af:17:50:
         39:a0:33:39:d1:a2:8d:9e:67:5b:84:da:09:da:2f:93:24:46:
         6a:6c:1f:9b:dd:e2:3a:b9:8e:31:87:1a:53:29:5f:57:42:84:
         c8:30:2e:ed:8e:89:21:9b:ea:33:07:95:39:8b:69:06:3e:03:
         ae:50:43:fb:a9:2b:a8:69:bb:ed:42:e2:fc:8a:97:eb:b5:be:
         95:4d:c6:0d:6d:29:79:e6:b8:54:72:45:c9:e4:55:b5:1c:40:
         23:b0:cf:1f:9d:dd:97:2e:ae:2e:70:e1:ca:c1:d9:2e:11:1e:
         76:54:82:b2:d8:ab:10:bf:ca:f2:9b:1c:14:3a:c0:25:76:7b:
         a5:0d:e5:e9:3c:b9:a5:a7:d8:d2:f0:9f:c9:55:a8:5c:e2:66:
         db:e9:c2:4c:0b:cf:d0:68:85:e8:c2:d1:0c:02:1f:d9:27:99:
         b8:80:09:d6:de:9f:b1:f1:87:f6:dd:9e:6b:9e:f6:7f:40:74:
         9f:ca:45:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfiZPoxQ70x62RBaEeFhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZDU4ZTQwYzZkOTFmMzcyOWU1N2UzMzQ0ZDMwOGI1OTky
ZmU0NmUwHhcNMjYwMzAyMDMwMTE0WhcNMjYwMzAzMDMwMTE0WjAzMTEwLwYDVQQD
Eyg3OGM3Y2U1YzkyMWMwYTQxZjEyYjI4N2MyYzk4NzI0ZDQ0ZTZhOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA/Cery8tvtPZUPwWE4dgqFllNhT
3b0KcYFiKyuURTYxkI8M61N990lT1YvvA1o/t7LgbHQ60VQcagMzkPEL6624y0cS
rpOtUaufKQgx4kybdqnMGOU3ZW2nr936lQmMhzcWLQdY4h5GUOQIxZhhvNWwMoX9
UCogPBF24A0dSDVzExAiEbaobWXsCRvWtK8UcnETjTryubCNnUjILelHSa6lc/U8
XPMdMQXhLpW3XM2aLwxrcMMa6wPhfeN5NqE/V+kwiKpapNWpEj7+KiRrGjGAJ9rv
nnyRtSTFKm1moOXDtpyrJ8DpS8r1qNJwyzZAR7KQaK9dvIRxf80sqhRCYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjHzlySHApB8SsofCyYck1E5qnlMB8GA1UdIwQY
MBaAFDDVjkDG2R83KeV+M0TTCLWZL+RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEt
ZjgyYjcwZDhhMGE3LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEtZjgyYjcwZDhhMGE3
LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsMvL7x2
6vTgZ7JhWvIJAH0aOaRxkxriqaAhRkJs2pCQmYhCkiH1458gxq1ROweXCx18MT63
AVe78wKmqQDp+CjFhQkVrxdQOaAzOdGijZ5nW4TaCdovkyRGamwfm93iOrmOMYca
UylfV0KEyDAu7Y6JIZvqMweVOYtpBj4DrlBD+6krqGm77ULi/IqX67W+lU3GDW0p
eea4VHJFyeRVtRxAI7DPH53dly6uLnDhysHZLhEedlSCstirEL/K8pscFDrAJXZ7
pQ3l6Ty5pafY0vCfyVWoXOJm2+nCTAvP0GiF6MLRDAIf2SeZuIAJ1t6fsfGH9t2e
a572f0B0n8pFDA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:35 2026 by rpki-client