Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File:                     4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier:          9kWEy3ZM/n1lObkZuAH8tzrbaujfdURnwXH5F4l0+dI=
Subject key identifier:   1D:EE:B6:08:90:62:4E:32:89:A4:E7:06:F2:71:05:F0:8F:94:0B:6C
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer:       /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial:       019EC06DEC3DC72D518B99A2A479E5AF466F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number:          126B
Signing time:             Sat 13 Jun 2026 10:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:29 +0000
Files and hashes:         1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=)
                          2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: 2tTTL/PoePAVJUPrGqAoh8JpaE8H8HHBXqGRFF2u0T0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:ec:3d:c7:2d:51:8b:99:a2:a4:79:e5:af:46:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
        Validity
            Not Before: Jun 13 10:01:29 2026 GMT
            Not After : Jun 14 10:01:29 2026 GMT
        Subject: CN=1deeb60890624e3289a4e706f27105f08f940b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:60:94:ce:d4:7f:50:fc:1c:93:33:f4:e1:
                    78:57:8a:26:24:bd:d9:a6:b8:3a:2a:bf:b8:3d:b0:
                    c8:03:c0:4f:57:95:dd:c5:f1:26:83:57:03:d2:f5:
                    8e:7a:92:b1:9a:ad:22:a3:bc:cc:21:ba:9d:a3:6d:
                    bc:e8:41:7d:50:22:a8:30:1f:51:86:a3:a3:77:33:
                    7b:5f:a9:93:26:a7:c2:5d:78:7f:ec:03:7e:fc:b3:
                    c7:d7:cd:f1:d5:a9:eb:78:4c:53:5f:44:34:5e:09:
                    46:0e:5f:35:6c:f3:b2:5f:65:99:7b:dd:83:de:db:
                    86:06:b8:37:2b:51:a7:55:7b:27:97:8a:91:5d:a5:
                    83:9c:19:b3:9f:72:89:be:ac:90:7d:1d:8f:d2:3c:
                    73:02:c9:34:0c:c3:69:05:e0:84:c4:a7:2a:78:9f:
                    96:0f:e7:47:46:d3:db:16:f3:00:39:10:d6:1d:ea:
                    e7:fe:09:89:50:b6:9d:3e:81:7f:ef:3b:10:74:08:
                    66:35:eb:c6:fd:89:45:93:35:88:37:61:b2:70:53:
                    39:4f:1c:38:3b:ea:2d:ce:20:34:c9:29:6b:1e:dc:
                    a4:7a:95:dc:d0:3c:a5:6d:64:61:93:a9:5e:d5:aa:
                    ef:e2:7b:dc:84:03:1b:c4:73:63:95:93:75:59:71:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EE:B6:08:90:62:4E:32:89:A4:E7:06:F2:71:05:F0:8F:94:0B:6C
            X509v3 Authority Key Identifier:
                keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:87:03:81:32:4b:65:e9:03:c3:b5:e8:99:72:04:74:32:1c:
         a0:48:0f:a2:40:03:92:da:6a:c4:00:0e:80:49:77:f2:d7:54:
         8c:52:ed:4b:38:fe:c7:7d:68:05:33:87:f0:eb:ac:5b:74:89:
         4e:4a:43:65:58:1a:08:13:bd:ea:2e:ec:7f:b1:86:4f:6a:99:
         37:50:1a:5a:1b:8a:b2:43:61:70:48:df:87:a6:35:52:8b:8e:
         1e:c3:41:11:d3:63:f1:35:58:70:71:6a:27:38:0c:37:12:ff:
         a3:44:4d:4d:f0:0a:d5:40:24:51:1c:86:d7:1c:00:e1:96:2c:
         f8:96:f1:ec:3c:41:9e:ed:d4:37:89:e3:df:21:ac:b5:fc:0e:
         f6:15:9e:b7:d2:fc:24:cc:ea:80:f4:67:34:c1:55:e6:86:b6:
         b0:c8:a3:ab:36:22:d4:74:b1:6f:32:d7:84:19:85:ad:82:c2:
         81:ca:0a:e9:03:0d:8b:11:c7:98:a7:f1:af:d6:23:bc:53:fa:
         6b:93:eb:86:e7:e3:f8:b4:1c:39:1d:d2:56:cf:eb:27:d7:5b:
         43:d0:8a:e0:e3:59:89:ef:19:d4:5c:4b:ff:21:bd:c9:f8:d1:
         20:13:3d:0c:9c:7a:bc:e4:77:a0:54:e6:dc:1b:c7:03:f6:07:
         5f:c8:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:03:11 2026 by rpki-client