Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File:                     MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier:          U7sgJ95arcqXzQE8Jv/ZN+07kyzWHnod9DlZvPcO17Y=
Subject key identifier:   A2:B5:63:8B:05:79:27:66:DF:17:6D:94:C2:8D:58:7D:9E:32:A8:4E
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer:       /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial:       019D37C0DF5E2465E6334E6DD8869F1737AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number:          072E
Signing time:             Sun 29 Mar 2026 04:01:19 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:19 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:19 +0000
Files and hashes:         1: AhPIKJoDQdgLjGET1BK2dVVDQqc.roa (hash: Q3fb64kGjsH794Do1VZTcE4nKENu+RgVJiY4SIL8Ab0=)
                          2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: agFQnLRYRCt4nAyASlexSoOUDKU4JIF+2JtR4BTq3KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:df:5e:24:65:e6:33:4e:6d:d8:86:9f:17:37:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
        Validity
            Not Before: Mar 29 04:01:19 2026 GMT
            Not After : Mar 30 04:01:19 2026 GMT
        Subject: CN=a2b5638b05792766df176d94c28d587d9e32a84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:1a:9c:49:86:a0:cc:a0:54:bc:27:2a:b6:
                    a4:67:66:11:1e:1f:51:4c:c1:94:6b:47:e1:6d:1e:
                    02:08:19:92:2b:4e:d3:f7:4d:47:e7:89:a7:68:52:
                    11:80:53:33:ca:cc:96:ef:2b:aa:7d:41:1d:03:99:
                    57:93:85:10:b6:08:97:64:5f:70:c4:96:22:0c:db:
                    52:70:4b:78:2d:0e:bc:ed:7e:02:26:8c:24:9f:07:
                    82:02:e5:f8:4c:3c:8f:7d:bb:93:bc:cc:11:10:c7:
                    09:50:0a:ab:39:a3:75:25:a1:15:27:81:cf:06:59:
                    5a:13:93:b7:fc:b5:e6:ad:b8:d3:84:56:2a:2c:a6:
                    85:47:72:98:87:74:61:cf:20:0b:84:e6:bd:21:c9:
                    b6:a4:2e:29:c7:95:6f:a7:cd:2f:12:9e:48:7b:94:
                    8f:9e:66:bd:e7:ed:ef:6b:ae:5d:16:db:ba:6a:77:
                    be:21:05:7d:91:9c:c5:aa:45:bc:c7:8a:57:f1:22:
                    e8:74:bc:54:1b:47:57:e9:81:b7:9d:e2:2c:9d:32:
                    0d:e4:ef:3b:13:61:91:42:5e:e3:67:4e:00:48:a5:
                    9f:8c:de:27:0e:3c:1b:12:67:c7:b2:de:b3:df:ad:
                    10:66:15:05:08:13:1c:dc:29:42:37:aa:7a:d0:d5:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B5:63:8B:05:79:27:66:DF:17:6D:94:C2:8D:58:7D:9E:32:A8:4E
            X509v3 Authority Key Identifier:
                keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:1d:32:46:6b:43:ae:86:cb:0b:55:f1:2e:db:b2:b0:0d:
         63:df:d5:cb:98:b9:bf:c3:14:d1:7d:c6:74:85:9c:6c:b6:e2:
         cf:31:c5:77:e4:35:5d:fc:f9:07:62:ab:bf:e2:79:90:e2:05:
         d9:6c:bb:f0:25:a6:2d:83:83:60:6d:87:ef:07:53:b7:ef:5d:
         3f:7b:72:0f:42:bc:ec:14:0c:fe:f5:5a:99:f8:24:7b:be:e6:
         d2:7c:9b:ca:99:30:bc:f9:9e:d7:1e:85:8c:e1:a0:f0:69:7e:
         b5:77:12:7a:5f:8e:ce:cc:df:4a:8e:63:a8:d2:f6:b8:89:98:
         87:86:a8:e1:18:0e:27:e7:e2:03:cc:d0:30:d5:03:87:04:eb:
         28:4f:e3:7a:4d:bd:f5:2d:3b:83:66:a5:37:d9:80:66:e7:b4:
         88:63:36:2a:77:2f:10:ce:6f:07:fc:87:e1:c9:09:88:08:3c:
         0a:5d:fa:ce:48:a1:76:2f:1d:37:2a:78:67:cc:43:f0:67:f1:
         d8:df:35:93:ce:8f:63:01:0f:63:b3:50:49:d9:07:9e:85:3c:
         24:bf:2d:87:c8:6b:4c:8e:a7:b3:c2:ab:f6:15:c3:de:bd:b2:
         a8:e0:80:67:e6:72:42:ba:1a:cd:92:a4:92:48:a3:18:3d:ee:
         2f:29:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:48 2026 by rpki-client