Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File:                     4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier:          6ksns8HWMN7UScuLuIMy0TBoaVYVPGwjOYGWZrj5hHc=
Subject key identifier:   A3:D6:42:A1:1F:65:AB:FB:04:3B:82:CA:D0:27:30:AE:D9:54:98:7C
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer:       /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial:       019E205A5D5812315C366871DCF427A51DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number:          1723
Signing time:             Wed 13 May 2026 08:00:53 +0000
Manifest this update:     Wed 13 May 2026 08:00:53 +0000
Manifest next update:     Thu 14 May 2026 08:00:53 +0000
Files and hashes:         1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
                          2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: mlnwjTB0vdqEXPCdCedjWY/Qxccf6ZPA4N8YNYDQJq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:5d:58:12:31:5c:36:68:71:dc:f4:27:a5:1d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
        Validity
            Not Before: May 13 08:00:53 2026 GMT
            Not After : May 14 08:00:53 2026 GMT
        Subject: CN=a3d642a11f65abfb043b82cad02730aed954987c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cd:dd:74:92:44:ff:d8:76:ad:45:ae:c3:cf:
                    22:fa:93:41:c7:78:c6:7f:62:9d:54:35:42:6e:34:
                    2f:5e:da:af:d6:2f:6e:de:30:03:2b:99:5a:8b:8e:
                    7a:79:f4:89:54:14:8d:17:07:b9:89:e8:81:16:f5:
                    61:80:a4:34:d6:fd:91:5d:e6:4a:88:f0:dc:80:82:
                    22:0d:c3:47:32:df:4f:fe:07:6f:85:5b:73:83:08:
                    17:90:c2:09:2f:5c:c6:69:dd:ad:39:8a:4a:cc:14:
                    5d:44:2d:45:48:fb:9f:62:bc:33:86:60:7e:c9:15:
                    46:69:41:6e:60:0a:1e:3e:95:6d:d2:13:78:fc:66:
                    6b:0c:1b:ac:73:4e:ad:c1:0a:01:90:c4:cd:c7:af:
                    dd:e0:40:6a:46:e5:b6:4f:57:40:22:e0:88:bc:ac:
                    85:24:60:52:6e:36:d0:9a:81:ef:5e:37:0e:96:c5:
                    1f:78:45:0a:1b:b9:89:f8:ff:66:5f:01:99:e1:af:
                    4c:be:ab:4f:d2:83:ec:8b:03:3f:42:c5:7f:6f:2e:
                    04:46:e7:39:40:65:53:d3:af:ff:07:dd:e3:6c:9d:
                    48:d8:21:f4:4c:f1:c0:33:00:af:86:3c:40:f5:db:
                    95:9c:6b:3d:33:5f:4d:1b:b3:1e:fb:89:6d:86:98:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D6:42:A1:1F:65:AB:FB:04:3B:82:CA:D0:27:30:AE:D9:54:98:7C
            X509v3 Authority Key Identifier:
                keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:37:20:a4:8c:3d:a8:fe:41:0f:8e:88:8d:7b:95:76:71:97:
         e9:d6:fe:21:5f:cf:76:7e:c7:ed:10:b8:33:33:c7:c6:1f:63:
         3d:26:b7:e9:97:ac:d8:52:9f:3f:2e:67:d0:33:e6:e0:c2:68:
         23:3b:f7:e2:39:65:25:15:aa:e5:c2:e9:c3:59:fd:a5:1f:08:
         8d:02:5a:4e:81:a9:d1:e4:78:81:c8:8d:5d:60:ec:85:f7:6e:
         02:7a:87:4a:07:d5:8a:8d:fe:13:a7:75:e6:15:fa:0d:1a:23:
         54:13:b4:10:8e:9d:72:15:18:c8:23:fe:63:db:49:7e:f8:fd:
         2a:22:ef:1e:a9:d7:c4:57:bb:b5:1b:36:1c:5b:cd:4a:75:31:
         81:ee:29:3b:79:9a:09:10:79:8d:39:f4:59:8d:90:1d:16:89:
         b1:aa:ea:ec:e7:b8:46:3e:a2:9d:ac:ef:a7:4b:ea:6f:d9:10:
         4a:0e:53:57:c3:c2:b3:65:4c:14:4c:c2:16:b6:79:35:a2:39:
         59:7a:0f:51:93:f3:07:c6:65:88:3a:60:24:9a:c9:59:91:44:
         26:1d:ef:73:ef:b7:48:43:c2:4c:37:b5:d1:3f:63:da:c9:1f:
         4c:bb:1c:bc:48:6c:1c:50:b8:41:95:3e:50:e6:71:4d:3b:2e:
         5f:96:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:30:24 2026 by rpki-client