Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
File:                     MOalwxNr0v3TbISgzHJb98sP6rU.mft (raw, json)
Hash identifier:          fjZ5MC3ilmyyK/grvgSOIyCNT/u6KzatfQESOJylZXk=
Subject key identifier:   B9:39:A7:15:08:EA:1B:58:F2:BC:03:5A:3B:E5:9D:7D:C5:DA:FD:24
Authority key identifier: 30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5
Certificate issuer:       /CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
Certificate serial:       019CAAC61028A874802BBD6A254FC386FF29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
Manifest number:          1326
Signing time:             Sun 01 Mar 2026 19:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:32 +0000
Files and hashes:         1: MOalwxNr0v3TbISgzHJb98sP6rU.crl (hash: Mb4b1lmXXY4ez0A8MtzVSbkO/NOagSrStpLV3f/dz6g=)
                          2: moqgxeoXoWxB5SkymDkSLyfQjMA.roa (hash: J336Q0cNTAxh7VER7cVnxYDpBUc4K8/+q/BQ2CTm1Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:10:28:a8:74:80:2b:bd:6a:25:4f:c3:86:ff:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
        Validity
            Not Before: Mar  1 19:00:32 2026 GMT
            Not After : Mar  2 19:00:32 2026 GMT
        Subject: CN=b939a71508ea1b58f2bc035a3be59d7dc5dafd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:b6:7a:42:de:b8:8d:25:ce:cd:e1:f4:dc:
                    47:22:65:2b:42:da:24:0f:79:fd:50:e3:89:4f:e0:
                    d6:9d:83:2e:32:2b:12:17:12:3e:58:f1:55:ba:07:
                    ae:76:7b:c7:49:79:4b:6b:e1:e1:d7:5d:a5:9c:af:
                    e1:4c:3d:59:b8:15:51:b9:62:5e:fc:db:92:58:81:
                    12:c2:ca:83:78:77:d2:6d:6d:a8:27:57:1e:2b:aa:
                    6a:63:7e:0d:41:3f:43:c0:99:41:8d:cb:16:e3:cb:
                    01:8b:56:5a:5b:8d:8b:dc:fe:33:3f:e9:4b:fd:49:
                    32:61:c9:e4:3b:e4:aa:57:85:a3:8a:40:6b:bd:35:
                    7d:69:4a:28:e4:da:6d:fe:2d:60:64:a3:f0:c9:de:
                    12:fe:ea:e6:62:9a:a5:f5:08:dc:b9:4e:30:e6:c8:
                    5e:ab:c2:0e:bd:52:b8:e5:ad:d0:9b:81:7f:b7:12:
                    54:75:42:0a:10:6b:af:d9:c8:09:11:11:f7:bd:b4:
                    ef:39:b5:d1:a5:f9:d8:f4:68:bd:62:4c:53:ae:25:
                    e2:52:df:ec:97:73:cb:d3:8a:e8:ec:8d:f7:be:f1:
                    18:f1:fd:6c:5c:fa:2b:16:d6:9a:2b:06:48:b4:87:
                    4d:d7:25:b2:e8:b2:8d:78:a2:9b:d6:88:56:c0:db:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:39:A7:15:08:EA:1B:58:F2:BC:03:5A:3B:E5:9D:7D:C5:DA:FD:24
            X509v3 Authority Key Identifier:
                keyid:30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:66:23:39:ca:e5:08:d4:41:8d:28:b6:b5:11:0b:e9:e8:62:
         12:4f:60:fd:c7:d2:c7:05:48:74:1d:77:61:ac:cf:a3:3a:71:
         9b:93:b0:a2:96:6c:ec:c6:06:f5:34:7f:2a:17:57:a6:7d:97:
         c6:7f:df:05:82:93:c1:21:65:17:b4:0e:9a:62:6d:de:75:22:
         6e:64:1f:a5:b4:18:2a:25:4c:53:30:99:1e:45:a1:7c:7f:45:
         b3:31:d9:69:c5:d8:9b:9a:97:c3:7e:d4:89:01:d3:b6:01:a7:
         dd:8b:2b:17:f0:27:fb:6c:f4:26:d4:3b:5a:cd:17:cf:a9:1a:
         ef:bd:fa:19:0d:5a:98:5f:9c:a0:0f:7a:ca:57:ae:87:3a:97:
         33:51:be:9d:62:58:de:5a:72:4a:40:6c:fd:97:e3:e1:f9:ae:
         09:cb:d7:e1:60:45:15:ca:3e:16:5f:ca:4b:a4:b5:60:ff:8a:
         90:3c:b0:cf:f4:e7:9d:50:16:d1:48:74:30:34:2b:94:32:7a:
         94:f4:a9:d8:51:0a:4c:6c:f3:1a:a3:8c:84:c0:4f:f0:92:18:
         37:40:e6:d9:d3:0c:5d:2a:fe:13:2b:2c:b0:3e:81:d6:32:b2:
         03:f2:07:08:39:a8:68:4c:c9:49:18:d4:93:1b:f8:ae:e1:17:
         52:46:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:25 2026 by rpki-client