Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File:                     9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier:          0R5QiqSqBM74rJqOhUFLKIx5Ql/1o6Stt8xiq7/ItUg=
Subject key identifier:   81:B8:A1:F6:27:C4:23:F5:68:46:8A:6D:6D:03:B1:3B:5A:C9:52:A2
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer:       /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial:       019E1D22E1C60EF3F0EAEF147042A5F9FCA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number:          110A
Signing time:             Tue 12 May 2026 17:01:25 +0000
Manifest this update:     Tue 12 May 2026 17:01:25 +0000
Manifest next update:     Wed 13 May 2026 17:01:25 +0000
Files and hashes:         1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: WgrJ2JvdGAlJpFZaxKTaD71fqqc/smg7l9Om+K9jXp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:e1:c6:0e:f3:f0:ea:ef:14:70:42:a5:f9:fc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
        Validity
            Not Before: May 12 17:01:25 2026 GMT
            Not After : May 13 17:01:25 2026 GMT
        Subject: CN=81b8a1f627c423f568468a6d6d03b13b5ac952a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:ea:4f:b3:35:95:3f:15:a7:76:23:21:3c:
                    7e:50:90:ca:e8:2a:9e:4f:3f:f3:8f:19:5f:48:15:
                    a0:e4:86:7d:b3:91:ea:c9:ea:9c:5b:2b:41:3f:ed:
                    61:bc:d5:43:69:7d:5e:65:5b:2f:c1:70:95:6b:bd:
                    f6:d9:e0:ce:7f:f9:62:97:07:4a:7f:82:fe:a0:62:
                    b9:0a:56:88:9b:11:b1:ee:fb:df:78:d5:cf:94:fa:
                    de:ac:db:d4:5e:6b:67:20:20:77:b0:63:e8:cc:f2:
                    14:95:d1:98:3d:77:0e:17:1b:94:c1:b3:31:1c:2e:
                    08:96:d1:15:03:6b:d9:cc:52:f8:3b:f3:13:f2:c3:
                    f1:84:33:d7:19:7c:83:c2:62:de:63:03:f6:d4:da:
                    2e:9a:91:13:d5:0d:d0:6a:df:51:15:ab:4e:9d:5f:
                    9e:1a:c5:15:6f:ca:c8:c4:28:7f:f4:15:ee:e1:8a:
                    df:7e:73:0c:c7:7d:59:bf:96:a1:fb:da:10:40:79:
                    38:6e:34:fc:af:ba:e2:7f:72:25:b0:67:d1:c2:27:
                    0b:4d:94:1d:82:72:cd:1a:9c:d7:84:2e:ee:64:9f:
                    3c:d7:9a:8d:8d:b0:2f:2a:2a:af:63:5c:db:ac:3f:
                    ea:02:a6:bb:8e:8f:8f:df:fc:52:d0:45:ed:c0:66:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B8:A1:F6:27:C4:23:F5:68:46:8A:6D:6D:03:B1:3B:5A:C9:52:A2
            X509v3 Authority Key Identifier:
                keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:66:23:81:7d:55:5d:38:89:aa:d0:77:f7:fb:91:00:dd:fb:
         14:77:61:14:6a:58:80:cf:7e:ad:8d:6d:76:b5:dc:c9:c9:c1:
         b9:72:9a:b5:c9:b5:65:42:7d:7e:e7:a7:90:55:51:84:23:16:
         ad:ef:28:c5:b5:14:6f:08:bf:20:e0:3e:d8:20:de:26:0f:99:
         e4:29:f2:54:66:07:46:9c:54:6f:c3:f6:78:31:8b:85:0d:df:
         15:0a:6a:f6:14:ba:3f:f9:61:07:97:68:0d:5f:bb:ad:36:a0:
         09:11:60:a6:a2:f5:31:d7:c7:2a:1a:ec:87:38:20:4e:93:07:
         4f:ac:47:3b:e2:34:82:ff:dd:2e:28:3e:c4:af:9c:f7:3b:92:
         01:8e:53:90:87:27:2b:02:ae:eb:05:9f:4d:b8:ce:18:ad:9e:
         ee:0f:97:09:dc:67:af:be:9c:4e:d1:0b:57:67:d1:a4:79:bf:
         a5:ee:12:46:4c:d5:d3:eb:53:2e:12:a6:23:4f:0b:27:34:b1:
         e5:1e:ee:4f:ba:ed:f6:96:0e:c1:c6:d9:ed:55:cd:9d:19:80:
         23:24:18:70:e4:dc:8e:3d:f5:c0:85:9c:99:24:41:46:04:df:
         93:20:61:cb:f5:c9:3a:13:bd:86:c6:d1:03:56:01:37:4c:70:
         eb:0e:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----