Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File:                     x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier:          keb/4GdaMt/UjmZRKUgHtFv5mnJB4LmEmioomUr467k=
Subject key identifier:   49:DB:01:C8:B2:DE:95:E5:61:B1:AF:37:6F:8E:2F:83:F4:75:AA:E6
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer:       /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial:       019EB733D0C94E7322F36060682A8E925261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number:          1121
Signing time:             Thu 11 Jun 2026 15:01:26 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:26 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:26 +0000
Files and hashes:         1: 8Oob-MaKU0NvwXJUiKMB7ekq4Cg.roa (hash: 63MHEzPjU99WPqV+lKCTZbVzEP7CPni86OEOEBrlKcE=)
                          2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: H651MfBr2vcJvI8UzJzcI867G9fZ/MhwS7Z2e2oYUwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:d0:c9:4e:73:22:f3:60:60:68:2a:8e:92:52:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
        Validity
            Not Before: Jun 11 15:01:26 2026 GMT
            Not After : Jun 12 15:01:26 2026 GMT
        Subject: CN=49db01c8b2de95e561b1af376f8e2f83f475aae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:67:6a:09:9a:56:14:a9:1e:92:f8:95:fa:
                    19:9b:ca:a1:68:62:02:6c:6f:ac:12:9e:b4:2e:95:
                    ca:75:5d:0d:b9:6a:36:43:0c:6e:5e:68:be:ac:8c:
                    35:9c:b1:3f:b2:8b:f6:d4:40:70:cb:d2:19:57:a3:
                    5b:70:c0:fd:2a:21:49:58:4f:0a:a3:e8:0b:e3:04:
                    49:2c:f9:af:df:75:cb:d7:7a:13:a2:35:bf:da:31:
                    86:e1:a3:77:da:b7:c3:50:80:a0:81:ea:e0:6b:e8:
                    2e:be:6d:81:78:4a:1e:e5:23:56:df:c4:48:fa:2d:
                    99:39:e2:ed:4c:5b:e3:a4:1a:f8:b9:5b:99:48:58:
                    91:45:3f:85:69:a0:2b:c7:6e:89:78:ea:fa:11:d1:
                    af:7f:3b:44:d7:fa:e7:77:7a:15:93:03:36:53:dd:
                    88:82:8f:0f:a5:a3:5e:8e:4d:99:bc:34:b1:3f:01:
                    06:04:67:e8:a9:1f:ab:61:36:08:a9:e9:09:29:8d:
                    44:93:36:52:50:3a:5b:0b:c0:24:9c:e9:a6:2a:20:
                    6a:1b:4e:49:e3:07:09:8a:0f:ca:62:aa:1d:7f:6f:
                    b5:3c:45:bc:10:cc:81:b7:75:25:6e:ad:41:4b:c3:
                    1b:51:68:06:e8:ff:34:66:11:99:31:10:05:a0:9f:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DB:01:C8:B2:DE:95:E5:61:B1:AF:37:6F:8E:2F:83:F4:75:AA:E6
            X509v3 Authority Key Identifier:
                keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:70:84:ce:32:cb:f9:cc:2b:d3:47:96:ce:44:34:5e:7c:
         97:e8:01:7d:99:0f:40:50:8f:c0:90:bc:7b:73:68:78:e3:91:
         6c:f5:fb:b5:3c:77:df:86:5f:b9:89:fb:a7:c4:fe:de:8e:ae:
         f8:45:00:22:7e:9f:57:41:47:3f:bd:8c:65:2e:f9:81:82:e0:
         0c:32:79:cb:f9:d4:e0:c2:84:8a:a9:31:b6:ca:fd:f0:80:0a:
         da:63:e1:7c:94:da:d4:6d:ba:06:78:c5:59:50:22:a0:a9:66:
         41:74:a9:ad:46:b4:a8:82:80:33:3f:9c:87:2f:eb:42:6f:7e:
         5a:ae:27:7b:40:df:6f:54:aa:a1:0d:75:7e:82:12:7c:33:80:
         5f:3a:f8:4a:07:24:47:b4:ec:53:24:da:18:c4:f0:6e:fa:7c:
         1a:fd:24:cf:8d:8e:f8:df:6d:67:71:c1:6a:5d:3e:b4:7a:eb:
         01:37:d6:ea:aa:16:d6:cd:bf:74:12:af:c7:be:fd:ad:cb:19:
         e5:4f:7f:85:4a:89:45:9d:46:00:de:82:b2:74:cd:af:b1:80:
         99:06:a3:c2:06:85:56:e2:e8:a1:c1:12:03:49:16:ac:d0:78:
         93:b6:06:b1:89:25:51:eb:dc:f3:90:5b:6f:fa:85:bb:25:ef:
         f7:22:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:56 2026 by rpki-client