Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File:                     MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier:          0W6onu3KhlElJ2LWWFFRzrrzbV5PFcPrQQ+a2hED8Ew=
Subject key identifier:   83:74:FF:FE:02:EA:F1:EF:A2:74:A9:54:55:58:E8:CB:7E:CD:B9:02
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer:       /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial:       019CACB49D80DBCF18063CAEA54B2577DAC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number:          08C2
Signing time:             Mon 02 Mar 2026 04:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:43 +0000
Files and hashes:         1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: KuCuoS/sKWrmmsXKjN3Z/NUCxOn5XMxxCX1ZH028v50=)
                          2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:9d:80:db:cf:18:06:3c:ae:a5:4b:25:77:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
        Validity
            Not Before: Mar  2 04:00:43 2026 GMT
            Not After : Mar  3 04:00:43 2026 GMT
        Subject: CN=8374fffe02eaf1efa274a9545558e8cb7ecdb902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:79:06:3c:17:00:61:ea:22:b9:0f:67:b8:
                    b0:c5:3b:bf:68:1e:eb:2c:c0:8c:49:eb:67:db:2e:
                    ed:00:38:89:4c:65:fb:3f:c0:61:7f:79:06:a6:37:
                    1e:97:40:bc:16:8c:9b:1c:dd:78:59:a1:78:39:0b:
                    b2:6b:c8:e6:75:93:bb:8f:a4:55:55:0f:6b:e8:8b:
                    73:cc:5c:30:0c:4f:0d:4e:b4:7d:4f:71:78:be:15:
                    ae:20:69:fa:f5:a1:24:43:15:48:43:a1:93:9f:78:
                    22:da:41:96:1c:2b:e2:47:f3:ca:53:d1:c5:10:ac:
                    f5:19:da:32:bf:47:a2:3b:e2:2d:00:d2:62:e4:9a:
                    42:ff:33:91:8d:fe:a3:b0:2f:56:20:2a:e4:51:a0:
                    e1:13:3f:af:ff:fd:18:99:10:da:99:20:95:44:d2:
                    13:6d:bc:a0:2e:3f:6a:a5:b0:d1:43:da:8a:18:fa:
                    1b:89:8b:05:e5:86:6f:43:85:92:9f:b4:ab:8f:68:
                    90:4b:ab:30:f2:e2:e5:c6:a5:30:25:a8:54:ce:20:
                    e5:06:df:f5:50:2f:7d:63:8e:af:79:ff:5f:cf:e5:
                    48:b8:77:18:9d:fe:e8:ca:59:60:0c:72:c2:79:36:
                    6e:d8:7c:bb:6e:e1:b4:c8:ac:c6:53:31:eb:a6:d1:
                    8e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:74:FF:FE:02:EA:F1:EF:A2:74:A9:54:55:58:E8:CB:7E:CD:B9:02
            X509v3 Authority Key Identifier:
                keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:71:c2:c6:bc:ab:cd:e4:ab:1b:fa:ed:12:d7:b0:40:37:b6:
         83:17:b0:93:f1:be:73:72:f7:e2:91:67:3d:a7:88:41:9d:60:
         23:aa:1d:c5:cf:a4:e7:7b:43:3c:62:63:59:c0:90:ce:f0:73:
         89:27:2f:b0:5e:d8:5d:68:2c:65:28:e7:17:62:b3:99:ac:4e:
         57:d3:4e:89:16:0d:82:d4:1a:8a:a5:0e:6c:61:de:b8:e6:8b:
         47:f3:5b:f4:b9:29:1f:9e:26:c3:2c:2d:f8:93:59:3f:6e:de:
         a1:0f:63:7e:9c:97:8f:35:27:b7:ad:3d:c4:4d:d6:e3:95:a0:
         f5:b9:3b:70:60:90:ed:af:60:98:36:1f:31:39:4e:7c:d4:22:
         1b:d2:ba:01:9e:c9:c1:ee:7c:ab:fa:52:c0:b2:ab:f9:95:e2:
         86:cb:40:40:f1:43:11:87:16:d6:0c:2b:45:cc:53:73:a3:77:
         23:de:db:2c:d3:46:f6:4f:39:9f:2f:4f:c2:9c:af:2b:03:87:
         c7:17:60:b1:75:c9:e1:a4:2e:31:61:b3:11:bb:31:da:d6:60:
         05:07:49:ef:f5:89:92:41:6a:45:0b:bf:cf:1a:5d:5b:4f:bf:
         ba:eb:a8:e0:42:51:10:ab:ab:66:31:4f:50:ca:50:cd:6f:e7:
         f9:74:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:37 2026 by rpki-client