Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          3NsIb3BlVGY8cveOKuyepxy9pwjKQSfSnsonCns5Tk8=
Subject key identifier:   77:F8:07:E1:4A:5F:53:C4:0B:B6:C4:C9:5A:B5:E9:E5:6C:E3:34:CC
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       019E1EA31DF7637BF95E04257087E86FF701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          0846
Signing time:             Wed 13 May 2026 00:01:06 +0000
Manifest this update:     Wed 13 May 2026 00:01:06 +0000
Manifest next update:     Thu 14 May 2026 00:01:06 +0000
Files and hashes:         1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
                          2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: xcJhg5Co34Afr4XkcgLs9HpaBuslwNcogqnBplXrm0k=)
                          3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
                          4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:1d:f7:63:7b:f9:5e:04:25:70:87:e8:6f:f7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: May 13 00:01:06 2026 GMT
            Not After : May 14 00:01:06 2026 GMT
        Subject: CN=77f807e14a5f53c40bb6c4c95ab5e9e56ce334cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:75:c7:cc:46:ac:0c:09:42:5d:9d:84:04:35:
                    e1:e4:4c:12:f1:87:86:b3:5b:01:f1:64:0f:96:2c:
                    5e:b7:47:1c:5a:67:70:55:41:38:db:a7:29:50:09:
                    d9:59:ac:6c:b8:05:aa:79:4c:6a:49:f2:33:7c:72:
                    96:8f:ad:47:4b:0d:12:c7:50:81:43:bc:11:6d:59:
                    c5:22:c8:e5:4c:1c:39:ac:a6:e6:95:6d:46:20:29:
                    e8:76:ec:57:77:33:52:a5:2d:d1:ea:6b:02:4c:85:
                    63:16:9b:a2:93:a1:da:a0:db:ab:99:66:bd:53:ec:
                    7d:31:2c:5e:15:a1:dd:14:eb:d4:3b:0c:b6:54:d9:
                    4f:84:4d:1d:81:16:21:c1:bc:a4:55:3c:8f:fe:ca:
                    68:c3:c8:1b:51:ea:2b:ce:1b:98:35:6d:1c:14:5d:
                    3b:22:51:2a:2d:5a:28:c7:b6:c8:8c:e4:32:ff:fd:
                    b3:8b:69:c6:0b:5c:8c:6c:e7:ad:2a:26:77:82:eb:
                    c8:7f:b4:da:b2:4d:19:5d:9d:50:23:ea:0a:68:1e:
                    b6:90:92:ea:b5:b1:2d:04:51:bc:b7:5f:44:bc:25:
                    82:e9:01:96:80:a1:28:24:b8:31:96:6b:19:fe:78:
                    96:c8:89:5d:1b:67:df:23:ed:2f:2e:2e:27:7b:47:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F8:07:E1:4A:5F:53:C4:0B:B6:C4:C9:5A:B5:E9:E5:6C:E3:34:CC
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a3:46:40:7e:ff:8f:c3:e1:75:97:9c:4d:b5:cd:51:61:e3:
         9a:5c:aa:52:fa:52:b5:aa:f3:50:92:1d:3e:c6:93:87:b4:c7:
         80:8a:d2:0d:c9:e2:05:74:76:66:71:eb:ac:1e:61:ac:dc:d2:
         73:6f:1a:2b:9d:a2:a4:2a:1b:b7:74:9e:21:7f:b5:94:2d:8b:
         33:87:94:b6:45:9a:31:bd:40:95:52:47:e5:d9:50:2b:7a:03:
         4b:30:46:3f:bc:86:6f:82:dc:4f:1e:14:b2:c2:9a:67:a4:c7:
         39:4a:5f:e0:81:7c:1c:f6:07:8f:5d:9b:d3:67:5c:10:8d:55:
         41:9b:98:93:de:c5:62:7f:15:59:3a:0c:ed:1a:d9:0b:d0:10:
         04:e1:cd:69:ae:ee:f9:f3:4b:17:53:9f:e3:32:c9:58:88:13:
         3d:24:3a:78:d0:89:d6:de:2f:6a:b9:da:ae:e3:28:19:39:d0:
         21:2e:76:52:21:bd:82:36:ea:55:73:04:c8:0a:25:b8:39:a7:
         1e:18:78:8d:bd:0e:bf:8b:3b:8d:e7:d5:0d:4d:c8:4b:37:23:
         fe:ae:eb:1d:d6:41:d1:c2:15:7d:31:13:2a:26:2d:63:fc:73:
         62:3d:08:3b:55:24:09:9d:71:98:8b:eb:fd:8d:5b:f6:66:6f:
         52:66:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:14 2026 by rpki-client