Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File:                     4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier:          xAW+IH+MYPDp23yeAisxzqB1q9j7fpZzkxHECaj6k1o=
Subject key identifier:   E7:65:AB:BC:49:8D:26:6B:84:C5:D6:A8:B7:ED:50:11:40:8C:E1:D5
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer:       /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial:       019E1CEB8C1D24080857669B32A3C4050299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number:          13C9
Signing time:             Tue 12 May 2026 16:00:59 +0000
Manifest this update:     Tue 12 May 2026 16:00:59 +0000
Manifest next update:     Wed 13 May 2026 16:00:59 +0000
Files and hashes:         1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: 9wy1K4j8M1OdyMZbUCAHfChuTJLR+58HIC4SYaE4OI0=)
                          2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:8c:1d:24:08:08:57:66:9b:32:a3:c4:05:02:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
        Validity
            Not Before: May 12 16:00:59 2026 GMT
            Not After : May 13 16:00:59 2026 GMT
        Subject: CN=e765abbc498d266b84c5d6a8b7ed5011408ce1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:3e:30:68:32:e5:1a:d0:4c:e9:dd:e5:78:
                    3b:d2:4a:8d:34:70:c7:6a:b9:29:d7:54:b0:35:c6:
                    1b:1d:47:df:8a:68:f0:10:e3:56:d6:64:a6:12:52:
                    f4:0d:da:78:94:b7:d2:03:f6:d5:27:7f:65:be:fe:
                    b3:82:a7:3b:df:c6:32:6b:b8:6e:d1:8c:a7:6c:e6:
                    27:2f:13:46:3d:62:4b:e3:a4:96:8d:2c:6d:e8:a8:
                    28:e6:f6:da:e4:65:bf:24:9e:34:c1:6b:9d:7e:25:
                    94:19:23:4e:28:a2:6c:01:1f:21:4a:bb:78:37:af:
                    3e:64:1b:17:04:de:21:0a:2c:d1:8f:63:53:b4:de:
                    a9:90:aa:8b:18:35:78:42:d0:2d:98:9e:79:22:02:
                    40:40:f4:2a:fb:0b:a1:57:8e:1d:97:37:49:cb:6f:
                    f7:35:96:e8:42:00:95:85:65:e5:1a:1e:11:5b:5c:
                    62:e2:07:fb:3b:cf:88:c4:7b:bc:71:3a:0d:82:69:
                    60:c1:de:cf:84:60:76:c3:2e:f0:af:7a:72:20:e1:
                    63:13:94:d4:35:b5:19:f9:e2:c3:c3:80:f7:95:c1:
                    4e:72:60:ea:f0:11:77:45:8c:a8:3d:29:83:cb:4a:
                    7b:c0:d9:69:88:f7:7a:3d:ba:ce:d4:c2:07:94:e1:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:65:AB:BC:49:8D:26:6B:84:C5:D6:A8:B7:ED:50:11:40:8C:E1:D5
            X509v3 Authority Key Identifier:
                keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:48:a4:f2:73:6a:63:c4:a5:f5:c7:d8:6d:bc:3e:f1:90:a7:
         36:28:c5:c9:2f:3e:34:b6:7a:6b:c0:97:8f:3b:6e:b7:78:63:
         77:42:bd:3c:5f:ae:78:55:fd:8c:6e:28:49:59:dc:87:5d:79:
         40:9e:ed:cf:cb:12:0c:a6:5d:81:7c:fe:fa:1e:e1:c4:5e:b2:
         00:5e:f6:95:31:59:44:11:b8:e3:87:a4:9a:d8:d3:25:50:d4:
         a7:b1:61:4a:45:e7:84:0e:fa:1f:2d:48:68:b4:e4:d6:7e:cd:
         c2:44:86:09:de:9f:0a:4b:e6:c5:30:79:4a:d6:4f:c2:ba:35:
         9b:27:e8:77:f1:63:34:73:32:b6:ed:6e:80:13:db:05:6e:61:
         54:25:61:59:90:22:33:37:06:5b:79:3f:2c:90:d0:87:0b:6d:
         1b:f5:86:b1:8e:50:54:8f:23:17:ac:ab:c5:bd:55:2a:c0:0a:
         26:1b:13:82:be:34:3a:c1:03:46:f4:79:87:8e:98:2a:6c:0e:
         c9:f9:d8:f9:b3:ad:bc:66:35:60:20:e7:15:39:ad:b8:a9:df:
         03:d7:be:5c:2c:07:0a:eb:be:e3:2d:59:09:ce:ea:0a:a3:e0:
         66:86:06:a4:7c:5d:08:65:ea:84:ce:c2:44:29:68:a0:2e:0a:
         b8:ea:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:35 2026 by rpki-client