Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File:                     MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier:          3LlVpC36+VXvsehHqXSAMVqTkZHWbcLGL/BDAilZN3Q=
Subject key identifier:   23:28:69:D0:65:A1:D2:0C:17:BE:85:33:75:F1:BE:16:2F:3E:F8:61
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer:       /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial:       019D9A3EA603C827E48F0282E779AFF38FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number:          0761
Signing time:             Fri 17 Apr 2026 07:01:30 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:30 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:30 +0000
Files and hashes:         1: AhPIKJoDQdgLjGET1BK2dVVDQqc.roa (hash: Q3fb64kGjsH794Do1VZTcE4nKENu+RgVJiY4SIL8Ab0=)
                          2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: yyykeL2rOO8DZlSa9pB0LVM0iFYvSA4jxdoy55GRC3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:a6:03:c8:27:e4:8f:02:82:e7:79:af:f3:8f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
        Validity
            Not Before: Apr 17 07:01:30 2026 GMT
            Not After : Apr 18 07:01:30 2026 GMT
        Subject: CN=232869d065a1d20c17be853375f1be162f3ef861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b7:2f:07:e1:60:98:7e:d1:3a:0d:b0:29:9e:
                    43:cd:e8:ab:e9:46:05:77:ff:23:3f:5d:e4:7a:60:
                    2b:3a:2d:63:e5:b3:81:01:e5:16:e8:06:2c:4b:7d:
                    de:7f:16:ce:7d:68:bb:b4:41:15:aa:5e:8f:bc:01:
                    9f:6e:a0:00:f8:06:54:3b:7d:6d:30:25:7a:69:e4:
                    86:e6:79:e7:c6:8d:58:b1:3e:8d:d0:03:dd:3f:98:
                    9d:29:25:2d:45:76:f6:54:f9:9d:c2:60:48:15:be:
                    64:37:4f:88:75:d2:66:dd:42:9a:e8:d8:6b:ae:a8:
                    27:13:86:73:fe:c4:4f:3e:70:b0:13:9e:21:59:e6:
                    1d:c4:5f:f4:91:c9:d6:66:92:5d:b7:a4:38:d5:97:
                    a3:b5:5e:62:64:89:e7:5d:b4:18:7f:4a:97:80:ac:
                    b3:4f:99:ec:ff:24:43:b1:b4:18:08:d7:3b:fa:79:
                    d9:59:67:9f:8d:d5:cf:d7:65:4d:f1:db:95:69:ad:
                    15:37:da:77:3e:e8:35:e3:12:78:3d:53:f5:f8:a9:
                    98:d2:9c:77:b1:0c:6f:15:79:2c:2f:af:36:1e:d5:
                    c2:14:15:b9:39:b2:51:cb:fa:72:68:f8:e0:6f:99:
                    9b:04:8c:3e:4d:fd:7a:c9:3b:12:a3:4c:54:96:bf:
                    f4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:69:D0:65:A1:D2:0C:17:BE:85:33:75:F1:BE:16:2F:3E:F8:61
            X509v3 Authority Key Identifier:
                keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:49:4f:36:5e:d2:08:f4:28:e4:e8:20:65:43:f4:62:5f:
         d9:ac:0a:ab:5b:f4:b6:e7:e3:1e:46:35:0d:dc:4b:46:7d:f5:
         40:e8:04:f8:d8:09:26:3b:36:e4:40:11:f5:4f:77:71:6c:4c:
         9f:57:32:89:14:69:02:30:97:6c:1c:1a:a5:73:b9:4a:97:fa:
         09:99:7b:97:79:24:2d:b3:6f:4f:58:00:24:4d:b6:ab:5d:a0:
         eb:f4:37:81:3f:72:9e:ec:f4:2c:2e:af:e1:6f:db:18:b4:8d:
         36:63:fb:49:17:53:f6:89:db:94:06:05:00:da:83:68:bb:59:
         2e:ee:6d:77:7d:13:d6:77:7b:c9:42:ec:b4:a2:1d:63:1d:13:
         47:5d:d8:d9:06:95:aa:3e:2b:6f:fa:09:2e:c0:1c:27:31:19:
         10:f7:bd:2d:6a:4a:34:74:91:45:6f:db:bd:93:58:cb:9f:8b:
         2f:cf:a9:4d:dc:d9:b6:3b:a1:bf:2b:0f:b1:cd:83:ff:88:45:
         83:63:0d:7a:3d:07:6b:15:a4:5b:47:da:9b:3d:0e:8c:b5:24:
         75:d4:d0:ad:73:7f:5a:f3:ad:a8:e6:68:39:87:bd:4d:80:40:
         ce:9b:fc:f2:fc:1c:2b:80:c9:fa:8d:b6:a2:48:3f:73:b6:01:
         20:30:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:08:18 2026 by rpki-client