Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File:                     MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier:          +SgmUDfNTxKh7ZvfnM/2XDElNAQJUGr3JPQ+G/icvmk=
Subject key identifier:   AD:68:43:AE:0D:5C:9D:41:D4:92:2C:16:FE:CE:DA:21:49:56:74:D5
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       019EBF5B32F86E6CCC110258FAB294891270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number:          1968
Signing time:             Sat 13 Jun 2026 05:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:25 +0000
Files and hashes:         1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=)
                          2: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=)
                          3: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=)
                          4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=)
                          5: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=)
                          6: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=)
                          7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=)
                          8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=)
                          9: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: AZ+92gsS6cNd/hUAQAM3DiMlYudaMQe3YjMgrQ1QPQk=)
                          10: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=)
                          11: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=)
                          12: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=)
                          13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:32:f8:6e:6c:cc:11:02:58:fa:b2:94:89:12:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: Jun 13 05:01:25 2026 GMT
            Not After : Jun 14 05:01:25 2026 GMT
        Subject: CN=ad6843ae0d5c9d41d4922c16feceda21495674d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:7c:15:51:54:ce:62:75:ea:7c:6f:b6:35:
                    bb:20:89:d3:9e:cf:e6:45:75:17:20:d4:5c:6e:99:
                    15:06:72:47:c0:63:83:fd:b5:62:bd:41:92:3d:77:
                    6a:b5:42:f3:56:95:6d:2e:1d:92:32:31:f0:17:96:
                    65:d3:e2:63:63:95:67:c0:bb:32:7f:a0:7b:b2:3e:
                    59:7a:90:9a:1f:bc:47:4e:22:16:f6:6e:90:1a:66:
                    a1:f8:50:ab:ca:00:2b:9a:68:a9:25:21:dc:85:a2:
                    33:a4:ad:ea:68:76:3d:17:49:79:7a:71:ff:5b:b6:
                    2c:fd:82:66:2f:50:bb:f8:bb:b5:7e:81:e9:68:a0:
                    2f:0b:1f:d3:6f:2e:76:32:78:b0:4d:7c:c5:30:2b:
                    8d:0c:60:e6:88:36:cb:0f:49:a1:df:a8:19:9b:b8:
                    96:2c:f9:29:f7:d9:6c:da:ea:e3:bf:ea:6f:ff:6b:
                    2c:4c:8e:03:c7:ca:4a:60:42:be:2b:a5:0e:f1:f9:
                    15:0a:90:94:4a:19:30:71:ef:a6:ab:c2:45:3a:2c:
                    cf:36:0b:95:f5:cf:9d:70:27:16:91:87:25:e3:b7:
                    2e:88:53:d9:a9:2e:34:ab:31:35:85:23:a2:cb:0e:
                    45:b3:2f:e8:89:d2:1f:1f:28:1e:f4:79:52:b4:d5:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:68:43:AE:0D:5C:9D:41:D4:92:2C:16:FE:CE:DA:21:49:56:74:D5
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f0:e7:44:23:bb:42:6d:1d:09:e8:0a:4e:86:19:28:d4:8b:
         3c:65:e4:bb:e5:7f:13:c6:ae:38:3f:5c:75:07:1e:76:62:73:
         7c:93:1c:d1:e7:30:5c:7e:35:fc:76:2d:cd:72:ab:1c:6f:71:
         0b:1d:a1:bf:30:57:d4:a3:41:04:62:eb:ef:f7:0f:bb:26:e2:
         a6:11:98:c9:b2:c9:e4:f0:f1:bc:0e:05:34:66:c0:8a:81:f8:
         7f:c4:2b:89:74:68:2e:f7:23:f5:4d:2a:15:1d:a6:33:97:ca:
         c6:4a:60:27:c1:ec:be:9d:20:45:8c:76:23:3e:9d:e6:32:37:
         17:6f:ca:ed:6b:dd:08:55:91:42:31:51:8c:e4:0a:79:a3:4b:
         a3:e4:8e:99:11:91:87:1a:b0:16:80:6b:e3:b2:b8:06:7e:3b:
         10:c8:d3:cc:f7:b1:ee:6c:78:35:5c:eb:fb:7e:f3:09:3e:1e:
         b9:48:69:02:b7:50:80:72:88:b2:ef:12:61:c1:7f:e4:91:08:
         d3:54:b9:e7:9d:3f:8c:3a:a5:b4:39:71:7d:3e:e8:ec:63:2c:
         21:f7:c8:23:73:40:75:a8:94:06:81:71:5a:e7:63:1a:5b:3a:
         21:7e:f8:aa:d2:b9:4d:4f:52:09:4c:d6:0b:29:a6:af:d7:01:
         f0:75:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:32:45 2026 by rpki-client