Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          fL9lc92vfbvjnndDwysoc2l7htjZ7sr4THfFdzH4Bqs=
Subject key identifier:   82:17:37:8C:5D:43:5B:35:ED:82:5B:74:55:1B:CC:02:5E:2A:30:AB
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       019DEC6D2F5D4F6A552E1DAA8C3FC75C20B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          082C
Signing time:             Sun 03 May 2026 06:01:11 +0000
Manifest this update:     Sun 03 May 2026 06:01:11 +0000
Manifest next update:     Mon 04 May 2026 06:01:11 +0000
Files and hashes:         1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
                          2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: 9xnzeduxNZoGSGiSst+dLRmfjw2Pl9bhQ5IVPpZgGLA=)
                          3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
                          4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:6d:2f:5d:4f:6a:55:2e:1d:aa:8c:3f:c7:5c:20:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: May  3 06:01:11 2026 GMT
            Not After : May  4 06:01:11 2026 GMT
        Subject: CN=8217378c5d435b35ed825b74551bcc025e2a30ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:c1:a1:c5:1e:c2:84:46:a6:bc:28:da:93:
                    a3:e2:90:94:15:54:48:44:7c:0d:d6:79:64:a6:5e:
                    7d:66:7b:72:b2:e1:6a:23:66:e3:87:d2:5b:b2:7b:
                    1b:2d:77:c3:e4:cf:d0:cc:c6:84:2a:39:04:a5:6d:
                    59:16:ec:40:e3:57:10:3f:5f:06:ec:a4:10:65:57:
                    69:c4:d3:2a:49:a1:51:75:0f:8f:c0:e1:fe:34:0d:
                    00:ef:64:02:35:88:d5:df:33:9f:c5:39:02:86:0f:
                    86:1a:bc:b4:85:29:1d:dd:5b:4b:c2:fe:31:bc:9e:
                    ea:ca:64:ab:f7:24:00:ff:a4:4f:84:c6:3e:34:79:
                    6b:df:a0:4a:be:22:e4:bf:4e:05:43:60:aa:2a:f8:
                    73:47:0a:2b:ce:ef:e5:ab:ad:fd:f9:bc:33:fe:43:
                    fb:dd:02:7b:00:a9:69:48:c9:1c:21:1c:41:cf:a2:
                    88:fa:1d:5f:45:24:e3:10:a4:61:6f:93:42:d3:c6:
                    89:f2:1d:7b:6f:e7:52:88:0d:c8:a0:13:6a:01:4e:
                    33:44:1f:b6:4e:75:d4:00:0a:e0:d2:bc:00:5e:78:
                    6d:05:90:6e:07:2a:ee:82:23:87:7f:1d:7c:e4:4f:
                    37:8b:d9:f0:bf:61:d4:ac:8b:01:d2:49:b3:63:6d:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:17:37:8C:5D:43:5B:35:ED:82:5B:74:55:1B:CC:02:5E:2A:30:AB
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:29:18:1d:63:03:99:bf:7d:91:56:78:c8:81:5b:40:4a:5b:
         f5:71:9d:ef:7f:40:9a:e0:88:dd:3f:70:b4:6f:e4:c3:ae:a4:
         7c:44:85:c5:68:cd:a3:a7:3f:15:ea:5b:7f:eb:77:7e:87:a7:
         13:3f:56:4f:da:01:28:be:cc:16:1e:f2:fb:43:a3:25:b7:de:
         cf:4e:7d:96:5f:07:0a:40:a6:1b:0d:9a:01:5f:5e:4b:44:a3:
         46:74:4d:8f:2d:76:53:1e:9d:c9:bb:53:4c:23:76:54:c2:e0:
         bc:28:cc:70:20:e6:4c:35:d7:45:74:86:ec:60:38:98:87:5e:
         f9:82:13:25:d1:7d:66:b2:5f:13:af:e5:8d:4a:e9:82:bc:c0:
         d7:a2:41:63:12:a2:50:85:ef:dd:c6:b6:6b:24:31:88:be:00:
         ca:f3:68:3d:a4:ce:68:ea:f0:10:4b:83:a3:9c:3f:db:72:62:
         0d:7c:e6:43:cc:1b:12:1e:2c:ff:1d:08:07:38:ef:46:27:81:
         65:17:b2:c9:59:1f:56:bc:22:9f:6d:f5:ea:2b:98:2a:a7:30:
         1c:72:f3:a4:d9:da:e8:3a:02:82:48:0b:d6:fa:41:0d:36:0b:
         0b:23:d7:84:6d:21:4c:63:01:b4:71:6d:48:9d:03:e4:28:6b:
         00:69:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:35:03 2026 by rpki-client