Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File:                     iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier:          +JrUV81RD47yQvPGO7MONGHRg2nXFhQYztRzifvs5Kc=
Subject key identifier:   83:3F:14:BD:AC:AF:F9:29:90:6A:41:FF:14:28:DE:EC:82:6F:67:51
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer:       /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial:       019EB921DF225163AE568617237F1795C033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number:          1956
Signing time:             Fri 12 Jun 2026 00:01:05 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:05 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:05 +0000
Files and hashes:         1: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: d1EaYFa0Uk3Ebc5G/aej2buHh5YbwRNZkSGN/Z9H7SI=)
                          2: n90xmr_CM6O4WDRtYmfgJfxxrvA.roa (hash: lPtn9C/LBef80I4Gcyice5R+gf5Md1ot7qq45wVZu/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:df:22:51:63:ae:56:86:17:23:7f:17:95:c0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
        Validity
            Not Before: Jun 12 00:01:05 2026 GMT
            Not After : Jun 13 00:01:05 2026 GMT
        Subject: CN=833f14bdacaff929906a41ff1428deec826f6751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:cf:b4:45:bf:39:af:fd:20:84:41:c3:7b:
                    7b:dd:75:54:93:d3:06:85:75:17:f2:fd:88:69:33:
                    dd:6d:9d:36:76:af:6c:bc:44:01:67:ee:cb:ef:7d:
                    0a:5f:6c:32:3f:c2:fb:c7:06:e5:70:d4:b6:8c:2f:
                    b6:e5:7c:05:ef:e7:e2:0c:f8:c5:e4:7c:fc:b0:13:
                    73:ce:db:31:1c:98:71:5e:1b:c2:bf:3f:6b:50:24:
                    ac:81:46:91:95:e2:72:10:5d:1a:ec:16:8b:26:ea:
                    ac:8c:eb:74:3a:44:fe:aa:de:ed:75:d6:e9:92:b2:
                    b0:56:35:4b:29:f8:f1:2c:5e:ce:5f:5d:2f:a9:c4:
                    fb:d9:7d:5e:84:66:d3:d7:02:74:95:7c:af:3b:b0:
                    ef:02:a7:d8:a1:ea:eb:83:76:9a:40:1d:c0:59:d3:
                    41:60:9f:8d:c0:18:52:ed:34:64:98:d2:7e:79:f3:
                    f9:70:2d:3c:9a:e7:fe:39:17:cc:8c:32:2a:65:68:
                    18:18:e7:b2:b4:96:92:5f:7a:68:14:fd:3f:42:22:
                    12:dc:ae:cb:46:26:41:46:97:87:6d:c2:4d:b9:2c:
                    be:f7:b8:3e:2d:a5:6a:c0:c3:e5:8f:5c:d3:10:aa:
                    2c:13:22:08:41:00:7a:13:9a:3e:4e:0b:fd:73:45:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3F:14:BD:AC:AF:F9:29:90:6A:41:FF:14:28:DE:EC:82:6F:67:51
            X509v3 Authority Key Identifier:
                keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:1a:3b:38:e5:8c:cd:1b:28:b4:b1:d4:f0:62:fc:25:13:
         5f:f8:3f:48:fc:91:1b:50:85:f6:7c:4e:36:05:3e:a1:8e:a2:
         29:db:ce:e7:aa:1f:97:07:8f:ab:4f:7c:86:1d:d4:fe:45:bd:
         df:06:aa:00:36:71:53:90:29:94:06:ae:5f:6e:a1:2e:06:78:
         7e:a6:0e:4d:7b:39:ee:2d:0b:3e:b1:3d:8f:3c:f8:ca:76:4c:
         7d:b1:ea:28:c0:3d:b7:82:b6:20:72:29:b0:c6:a1:5b:71:37:
         15:72:fb:10:93:9f:7e:6a:31:9c:47:35:07:87:c8:2a:63:ef:
         d0:48:33:28:60:5f:f0:b5:22:5d:b8:70:b1:de:eb:84:ce:6d:
         63:8e:24:7e:c5:f1:c0:82:9e:ca:e9:09:92:a9:62:0c:34:67:
         b4:f3:57:b9:4f:7f:d9:88:63:54:05:18:af:69:cf:11:79:0f:
         fd:41:e9:a2:24:be:99:2c:d9:84:5f:b4:a7:cb:59:4f:05:95:
         09:90:3e:49:23:c0:84:58:34:fd:57:38:57:65:19:31:0b:85:
         92:60:bc:23:98:bf:c7:d2:8d:f0:49:7e:51:d1:0d:0f:28:fe:
         fd:85:16:7f:71:19:b9:66:41:eb:9e:03:76:09:5c:f3:53:b9:
         d9:bd:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:12:50 2026 by rpki-client