Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File:                     MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier:          9CsR4ZuoMWfWY00X3aptKoYKRvcE4ib7dqJnvK0u7/0=
Subject key identifier:   3D:34:FF:DF:AA:C4:2C:BE:A1:89:9A:77:39:F7:C1:BE:20:0F:E3:FC
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer:       /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial:       019E21360044719E58A14BEE071282644260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number:          0E01
Signing time:             Wed 13 May 2026 12:00:47 +0000
Manifest this update:     Wed 13 May 2026 12:00:47 +0000
Manifest next update:     Thu 14 May 2026 12:00:47 +0000
Files and hashes:         1: 3aS_biMuk3t6OSrvJyokC_jXDfU.roa (hash: uIA1uRbc2hX8KsAKbb90U8OFKc7TaqfJ9JatfJ5wndY=)
                          2: 4K-iSTTQ62k9u_ts6FEnNZujPB8.roa (hash: JFw4hB1oA1nXw9shAVgFEoq8dXT9KA58CiXxsf23Cvk=)
                          3: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: 2eKa6uX3DjT176ihUwyC1brRGwcghe/rGxD5b4iEfkE=)
                          4: hLLZvlA7_aLzHqMN-k0zYYWqdoI.roa (hash: 11v4o65bjg9Zi3P8TmWqgVpKzKXaXy9HU3XbxQsjkfA=)
                          5: whsxlRD8ACtbwVUDR7WD9M1I_Zo.roa (hash: WyhnHPwfaB8TlTtQhX3k0EqL0gIjvm9v03iJPq6dfuQ=)
                          6: xuAdygYVpRiV81z46OX-kd86p2I.roa (hash: w1oNZfbPGzW3kF1Su2UyFw287xX5XbrHkRu08WfqL70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:36:00:44:71:9e:58:a1:4b:ee:07:12:82:64:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
        Validity
            Not Before: May 13 12:00:47 2026 GMT
            Not After : May 14 12:00:47 2026 GMT
        Subject: CN=3d34ffdfaac42cbea1899a7739f7c1be200fe3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:7a:73:1f:dd:37:cc:81:bd:4b:2f:4e:1e:
                    ec:96:cc:f2:9c:1a:87:df:06:14:4d:b1:56:5a:20:
                    19:b6:37:7c:f8:32:c9:d8:13:17:d3:2e:9b:63:bb:
                    cb:39:b2:64:0a:c8:cf:ad:f3:86:23:54:24:1b:7c:
                    e3:81:7f:4d:f1:c6:13:65:97:52:d2:c2:0d:9e:0e:
                    f8:3e:ec:0a:c0:65:46:90:f3:ac:19:f8:71:32:c4:
                    21:5f:50:ec:a4:d4:08:1f:ee:87:6c:2d:f4:0b:12:
                    66:c1:67:6d:53:00:f8:f8:66:b9:48:44:8e:68:15:
                    1d:ab:8d:dc:c3:78:80:20:94:f6:94:35:5a:98:52:
                    21:3d:bc:f7:4c:36:a4:cb:62:a2:46:54:bb:e0:27:
                    07:56:7c:b3:a9:99:78:50:7f:d1:bf:bb:09:bb:bc:
                    0a:67:6d:12:d1:9d:e7:94:b8:d1:4e:9a:59:e3:64:
                    aa:81:c8:57:fe:eb:c3:14:8e:e0:ea:e1:4f:3d:45:
                    2e:27:42:d7:e4:d0:b4:4c:fa:ea:3b:3d:ef:fd:41:
                    83:ba:b6:44:49:de:20:ea:47:59:0a:b4:0f:49:bf:
                    c0:60:dc:2d:54:19:8a:56:7e:5f:a5:60:95:d1:b6:
                    28:f7:19:55:b5:3c:75:31:eb:9d:2e:49:d0:7e:4a:
                    67:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:34:FF:DF:AA:C4:2C:BE:A1:89:9A:77:39:F7:C1:BE:20:0F:E3:FC
            X509v3 Authority Key Identifier:
                keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ba:09:bf:e9:f6:05:4a:d7:10:5d:11:71:cb:02:ec:f8:17:
         45:b1:59:1d:77:3a:b1:a1:23:ae:7a:35:4f:b0:c3:8a:3a:11:
         ea:29:46:0f:95:da:4a:81:f6:0f:bb:d7:2b:1a:03:76:84:18:
         97:83:33:33:f8:30:32:0d:75:b2:8e:ca:31:09:a4:02:9b:b6:
         cf:ec:9c:0e:16:a6:07:19:71:8a:2d:1e:c2:ce:44:1f:2a:ee:
         20:54:8a:cb:7e:16:d5:3c:94:fa:a8:ba:c2:6a:4e:1b:b5:b0:
         3c:65:61:3e:df:b2:07:3a:9d:e9:1d:74:2f:ee:31:5c:c3:ed:
         fb:ec:5f:a4:ed:2f:e4:64:c5:f0:7d:21:62:a8:0b:2b:83:a5:
         9d:4f:a6:88:50:72:27:17:01:7e:c4:8c:56:3c:a1:f7:54:ac:
         45:f3:f6:ea:27:1f:82:d8:83:97:10:ec:dd:4d:5d:d7:27:2b:
         61:85:86:26:e6:bc:b5:28:d5:bc:4e:ab:70:cb:78:83:af:8d:
         50:bb:a3:26:b5:f3:e8:46:19:5c:bb:6b:6b:f7:2d:25:27:53:
         94:14:78:4e:34:1a:77:46:85:79:2c:f3:19:19:42:e1:02:30:
         cd:1c:2c:38:ff:b7:89:ac:e7:31:df:ab:4c:1c:62:96:b2:13:
         40:41:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:20 2026 by rpki-client