Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
File:                     MOalwxNr0v3TbISgzHJb98sP6rU.mft (raw, json)
Hash identifier:          k29KfpU2xq677P72vciwAQ6rsyIHwsUzkJaqYLjgIYM=
Subject key identifier:   EE:49:09:EA:06:CA:70:C4:80:50:71:41:B0:A7:C8:81:6C:7A:19:8C
Authority key identifier: 30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5
Certificate issuer:       /CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
Certificate serial:       019D9A3E26223E0EF2E7A6D46A1246E2D574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
Manifest number:          13A2
Signing time:             Fri 17 Apr 2026 07:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:57 +0000
Files and hashes:         1: MOalwxNr0v3TbISgzHJb98sP6rU.crl (hash: Qt41DWGi65hZ1fWYrRS1fYzUTXPhQ5kiTKRCXiuejYo=)
                          2: moqgxeoXoWxB5SkymDkSLyfQjMA.roa (hash: J336Q0cNTAxh7VER7cVnxYDpBUc4K8/+q/BQ2CTm1Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:26:22:3e:0e:f2:e7:a6:d4:6a:12:46:e2:d5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
        Validity
            Not Before: Apr 17 07:00:57 2026 GMT
            Not After : Apr 18 07:00:57 2026 GMT
        Subject: CN=ee4909ea06ca70c480507141b0a7c8816c7a198c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:2d:e3:66:a5:76:c1:b6:44:23:40:fc:05:
                    f2:9f:a4:a1:ae:2c:8d:db:40:f8:ea:21:a0:dc:39:
                    0a:03:c6:55:cc:d5:ac:18:bf:23:b8:36:ca:81:bb:
                    aa:36:86:10:1a:9f:b3:f6:ef:29:26:1b:24:77:39:
                    79:69:2c:08:5b:e4:54:0b:af:30:90:c7:ec:aa:d8:
                    1a:41:7c:73:4c:08:67:c1:40:5f:63:a6:e8:e3:de:
                    0a:c0:52:94:30:4a:26:45:22:aa:73:dd:d8:a9:16:
                    49:8e:02:22:7f:49:f3:28:77:4a:93:97:30:3a:e6:
                    78:4a:8f:83:24:68:19:fc:4c:b7:06:4d:20:42:9b:
                    71:cf:02:c9:8f:db:cb:05:38:ab:74:d9:7f:d3:ec:
                    67:54:63:7c:db:a1:f1:dd:20:7d:18:5e:f3:d4:8d:
                    c5:54:39:fc:45:9a:99:66:b9:cd:0f:83:ba:21:ea:
                    5c:33:f1:70:94:a3:39:d9:c5:a6:18:f8:08:d6:15:
                    59:b3:60:18:fa:92:0b:fa:38:bd:27:f7:65:2a:7c:
                    f4:52:29:8c:c8:62:51:af:71:15:ce:3e:77:57:ff:
                    52:01:2a:af:69:c6:3a:1f:cb:21:53:4f:52:ef:1f:
                    05:49:34:96:dc:70:d9:d3:e4:3d:7c:c4:17:16:ba:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:49:09:EA:06:CA:70:C4:80:50:71:41:B0:A7:C8:81:6C:7A:19:8C
            X509v3 Authority Key Identifier:
                keyid:30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5f:b2:04:e5:3d:25:15:9f:12:51:ca:85:7c:00:4e:c2:fa:
         34:2f:d0:f0:03:52:e1:7b:53:b2:72:dd:53:a6:08:29:e3:8f:
         48:1b:31:4f:38:2d:35:cf:69:0f:8c:b8:6e:ed:74:5f:64:43:
         aa:95:c3:1a:65:43:f8:b2:09:88:89:38:36:37:52:e8:9b:83:
         97:b8:9b:99:ff:9f:73:1e:3e:bf:36:da:bc:73:0c:94:2d:91:
         f3:6c:0f:e1:ad:b8:c6:c4:57:ea:4e:77:49:53:c4:38:65:3a:
         00:60:93:a0:6b:29:e6:c9:d1:f1:f5:b8:06:7b:8b:65:c9:b0:
         43:8e:6b:f6:90:fe:5e:14:cf:aa:b3:fd:7b:9e:9e:bd:65:51:
         70:8e:5b:57:b1:6a:1e:f1:20:4d:0c:7e:76:63:d7:9e:54:ef:
         9f:fa:3c:1d:63:f5:f5:a9:fa:b4:45:ad:6d:07:94:df:97:95:
         87:99:43:58:ad:70:a6:24:24:c7:23:de:4b:a0:1c:73:65:5a:
         9e:ce:e3:6c:bd:19:5d:7c:67:f9:54:fd:36:7b:96:7c:82:ff:
         b8:2a:ee:45:a6:63:fe:62:0e:8d:7f:e8:23:13:0a:33:1a:e1:
         e8:c2:a0:1d:81:d1:d1:6f:72:51:8a:76:00:98:17:f8:c2:3d:
         62:37:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:48 2026 by rpki-client