Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File:                     x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier:          1KOQ35yQPNwJlPk6NmI6QrwfRumLWOhPITryJkWiceU=
Subject key identifier:   18:BF:0B:EF:C1:CA:4C:06:12:64:8E:37:1E:F9:43:03:AC:9C:9E:C2
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer:       /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial:       019D38D31B2FBBEECE240BDA398B3F66596F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number:          105B
Signing time:             Sun 29 Mar 2026 09:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:52 +0000
Files and hashes:         1: 8Oob-MaKU0NvwXJUiKMB7ekq4Cg.roa (hash: 63MHEzPjU99WPqV+lKCTZbVzEP7CPni86OEOEBrlKcE=)
                          2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: RWcsMSjNbYxPdlCBD/VLF2X8LNjUJCmROgSHpV+Kupo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:1b:2f:bb:ee:ce:24:0b:da:39:8b:3f:66:59:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
        Validity
            Not Before: Mar 29 09:00:52 2026 GMT
            Not After : Mar 30 09:00:52 2026 GMT
        Subject: CN=18bf0befc1ca4c0612648e371ef94303ac9c9ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:8c:7c:3b:64:8f:2b:af:74:b8:b1:e2:b0:
                    46:28:a5:3d:05:03:12:e6:4e:28:09:5a:19:21:9c:
                    4f:54:b0:47:1a:dd:b0:7b:28:c8:a5:1c:3b:39:fb:
                    52:ce:87:eb:38:10:af:a7:76:7b:34:fd:f3:72:ae:
                    27:8d:e3:84:39:cd:cc:5b:42:fa:b3:e3:08:a1:fd:
                    83:80:3b:30:e8:5f:e0:1a:f3:58:2e:52:6f:16:10:
                    5a:ba:6b:47:4b:b8:ae:b4:4a:a4:88:7b:64:ee:d2:
                    23:7d:92:7a:8b:28:68:8c:80:e0:80:1c:2c:63:7c:
                    f2:59:52:18:b7:1d:8d:e8:54:ac:f7:89:88:70:ec:
                    c5:ff:8e:8f:f1:8f:d4:a4:98:b0:22:6d:d0:36:c2:
                    a8:b3:33:21:a3:1e:df:6e:b1:32:35:d2:12:09:b3:
                    e7:92:11:21:22:4f:62:ec:63:07:98:ba:de:4c:e8:
                    b0:59:4c:f3:30:4f:74:c2:f9:09:e8:64:5a:49:90:
                    d4:1f:0b:02:ec:39:d2:cf:76:cc:52:b8:b6:c1:84:
                    57:2e:28:6a:28:49:17:5d:94:3e:3c:93:c4:26:12:
                    d1:bb:52:dd:b0:36:f5:94:a9:c9:58:ee:02:b1:06:
                    ff:22:8e:5f:1d:a8:d6:32:c6:fd:85:75:5a:80:21:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BF:0B:EF:C1:CA:4C:06:12:64:8E:37:1E:F9:43:03:AC:9C:9E:C2
            X509v3 Authority Key Identifier:
                keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:00:79:3f:ee:35:0e:2d:17:97:b9:b1:9c:af:ea:69:e2:
         a8:6e:1c:95:fc:b2:e3:6c:3a:78:d9:26:4d:35:e0:7f:19:17:
         e0:be:1c:0f:19:96:20:06:77:c6:30:44:39:e8:cd:e9:e7:b3:
         e5:e4:02:80:0b:e5:0c:f5:21:e3:55:ad:c3:53:d3:e6:1d:09:
         15:b7:a0:47:91:7f:22:f3:50:1d:78:0f:41:6c:80:41:db:19:
         3a:b0:a9:ab:e7:3e:bf:25:20:83:4c:db:5f:60:2d:84:b8:8e:
         e3:e4:6f:ef:f9:33:dc:9f:94:93:44:d9:a8:22:bf:75:a1:4a:
         c8:fc:24:39:9c:8b:a5:e7:ce:a3:96:d4:4b:cf:a2:0e:b2:da:
         3e:46:1e:af:1e:cd:1f:06:30:bd:43:3a:0e:98:38:0c:ed:ac:
         d5:bc:eb:48:50:f9:a2:3c:d1:af:9b:2a:57:7c:7e:c5:8b:e7:
         5c:25:f7:42:5b:7c:27:8c:03:54:52:b4:dc:eb:90:5d:6e:29:
         c8:bd:d3:79:76:4d:41:9b:66:d0:6b:99:f1:6b:5b:cb:84:7d:
         43:c0:e6:da:f8:bb:c6:0d:f5:ff:3a:e1:e5:32:e7:90:18:ea:
         d0:30:67:5d:47:3c:6f:05:7f:7b:0e:3f:e9:2f:a9:10:58:eb:
         77:50:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:09 2026 by rpki-client