Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File:                     MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier:          auuxfIbb8GqcyaBQPa6fSlbzPfjOOB78MxitVS3xaaU=
Subject key identifier:   45:A2:44:3C:2C:00:B5:FC:AC:EC:7F:A2:85:C4:D3:ED:73:27:05:24
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer:       /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial:       019C973FE137EBC53A1520F1C78066CB4444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number:          0D35
Signing time:             Thu 26 Feb 2026 00:01:11 +0000
Manifest this update:     Thu 26 Feb 2026 00:01:11 +0000
Manifest next update:     Fri 27 Feb 2026 00:01:11 +0000
Files and hashes:         1: 3aS_biMuk3t6OSrvJyokC_jXDfU.roa (hash: uIA1uRbc2hX8KsAKbb90U8OFKc7TaqfJ9JatfJ5wndY=)
                          2: 4K-iSTTQ62k9u_ts6FEnNZujPB8.roa (hash: JFw4hB1oA1nXw9shAVgFEoq8dXT9KA58CiXxsf23Cvk=)
                          3: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: 5rWnfb8sDRQeIgGn4XJ6DoTyDtxnhvSPcB8J0cKUHdc=)
                          4: hLLZvlA7_aLzHqMN-k0zYYWqdoI.roa (hash: 11v4o65bjg9Zi3P8TmWqgVpKzKXaXy9HU3XbxQsjkfA=)
                          5: whsxlRD8ACtbwVUDR7WD9M1I_Zo.roa (hash: WyhnHPwfaB8TlTtQhX3k0EqL0gIjvm9v03iJPq6dfuQ=)
                          6: xuAdygYVpRiV81z46OX-kd86p2I.roa (hash: w1oNZfbPGzW3kF1Su2UyFw287xX5XbrHkRu08WfqL70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Feb 2026 20:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:97:3f:e1:37:eb:c5:3a:15:20:f1:c7:80:66:cb:44:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
        Validity
            Not Before: Feb 26 00:01:11 2026 GMT
            Not After : Feb 27 00:01:11 2026 GMT
        Subject: CN=45a2443c2c00b5fcacec7fa285c4d3ed73270524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:5f:cb:02:7d:f6:62:bc:4b:23:06:d2:b2:
                    36:be:f1:f2:08:75:b6:fe:9a:85:23:e0:8e:3a:e5:
                    65:6b:74:b8:7c:b5:88:2a:7f:a0:f7:17:45:fd:e2:
                    1d:5d:82:51:27:b9:35:7a:bd:0e:a4:6e:a9:fc:16:
                    7e:a7:41:8b:fb:d6:14:e8:94:c6:d7:6a:ef:31:12:
                    95:4e:cc:17:77:29:18:7c:f2:b4:ee:ca:a0:60:39:
                    bb:d1:31:19:0a:07:be:58:c2:0f:b4:cb:34:39:bf:
                    1d:24:fc:38:54:52:cd:cd:39:26:8a:1b:cf:22:9d:
                    81:2d:a8:c4:8a:69:73:e5:fb:f3:19:1b:21:1d:d3:
                    fd:b5:ab:78:80:ea:a9:d8:3d:2b:9d:09:b0:8d:31:
                    11:f5:f9:c3:96:68:4a:fe:eb:30:e8:7b:b9:c9:e3:
                    7b:96:3e:d7:b0:3b:46:3d:20:77:41:67:fc:1e:76:
                    8d:be:64:e5:1e:17:ae:e9:cd:ef:ae:f4:b3:cf:ab:
                    3e:0a:ba:73:a3:4e:ce:d4:70:43:4f:fa:4f:95:b5:
                    f2:e0:c2:68:a0:2d:d1:c4:94:b7:fd:dc:e4:6a:c5:
                    02:a3:2c:21:15:5a:e8:f7:6c:2e:d2:81:76:de:5c:
                    51:7e:ad:56:43:0d:16:69:7b:92:8c:ae:27:33:5e:
                    1f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A2:44:3C:2C:00:B5:FC:AC:EC:7F:A2:85:C4:D3:ED:73:27:05:24
            X509v3 Authority Key Identifier:
                keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:94:58:21:a6:92:93:e1:b5:9f:0a:2b:68:b6:ae:1a:a2:5f:
         97:f4:aa:6a:a8:73:a0:6e:62:ff:eb:f8:14:9c:ed:0b:cd:4b:
         66:7a:02:02:bf:a0:40:0f:e3:38:bb:37:f8:3e:8a:0c:47:9e:
         08:a2:a3:e4:47:23:21:ff:14:4c:4d:31:f3:6a:6f:b5:c4:18:
         d2:71:99:ca:63:c0:96:64:72:d6:32:0e:b1:8a:9d:9f:9b:38:
         ef:15:b8:0f:a5:84:e6:ca:82:e5:8d:69:72:4c:fa:60:6b:7d:
         7b:a0:ea:34:9a:2d:2f:1e:a6:35:51:40:83:0f:7f:f4:fc:80:
         dc:46:8d:56:70:45:b2:74:30:a1:fa:d3:63:7e:e7:8a:da:d0:
         57:6d:a3:f4:56:22:13:3d:14:4a:47:bb:4d:57:30:9a:61:48:
         59:ef:19:c5:84:5f:51:0a:61:22:de:4b:8f:80:ce:b0:21:8d:
         cb:ca:a4:cb:09:50:87:ed:6d:71:99:95:1e:d9:7e:3b:bb:40:
         c7:1a:0a:48:c7:3d:08:22:f6:78:2f:c0:8e:85:f2:ad:e1:83:
         0c:6b:a6:c1:88:9f:9b:5c:57:e5:85:af:89:82:8e:c1:03:92:
         3f:28:23:75:39:e9:e6:2d:99:44:bd:45:7c:bb:31:c4:b4:8c:
         52:45:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 05:03:27 2026 by rpki-client