Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          faujXl3Z3LOkuUt4Uw/NizD+wRS4j86C1iWjDqajpq8=
Subject key identifier:   05:25:F3:F1:78:70:D2:6E:5D:2D:73:48:11:3A:A5:74:1F:DB:FC:99
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       01A13E26552F4A7499178ABD8971F28201AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          09E4
Signing time:             Thu 15 Oct 2026 06:01:01 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:01 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:01 +0000
Files and hashes:         1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
                          2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: b1bDd+qnMCl9XdysanJJs+ANH4OptVZdJGaLDGAdd3M=)
                          3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
                          4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:55:2f:4a:74:99:17:8a:bd:89:71:f2:82:01:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: Oct 15 06:01:01 2026 GMT
            Not After : Oct 16 06:01:01 2026 GMT
        Subject: CN=0525f3f17870d26e5d2d7348113aa5741fdbfc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:23:36:21:83:37:aa:73:ac:8f:11:46:5b:
                    24:b4:03:6d:8d:ac:d3:d7:af:1e:56:7e:3d:f7:a6:
                    93:8c:dd:35:60:30:0c:10:f9:ec:ca:3d:22:8c:2d:
                    f1:c7:d9:aa:d7:5d:cf:e9:02:46:bd:79:58:58:35:
                    14:d1:18:3f:e1:49:4a:47:52:7e:5d:6c:ea:63:f0:
                    f8:c3:da:a3:06:8d:5a:f3:66:67:d1:c2:db:c7:df:
                    3f:bf:ec:53:88:6c:a0:fd:5f:ea:60:bc:3c:56:c8:
                    30:86:41:76:71:fe:90:37:40:38:6a:b2:50:15:e1:
                    ae:d8:06:35:f1:c3:9d:8d:8e:6e:e4:25:63:b6:98:
                    30:64:95:22:19:22:ba:fe:47:9f:b3:f9:09:05:2d:
                    cf:21:e1:57:cd:90:99:ef:84:9d:84:8e:40:37:6a:
                    5d:cc:02:de:c5:43:c3:27:07:95:f5:0f:01:1c:cc:
                    49:5d:a1:8b:01:bf:4c:be:93:ce:c8:00:ed:1f:31:
                    df:56:17:a1:82:03:72:6b:a8:2d:38:a2:62:55:c8:
                    f6:a6:65:36:22:7b:ae:7b:35:f9:90:81:e0:d1:8c:
                    70:42:bc:29:54:68:a4:f9:22:b5:ec:71:83:73:ba:
                    ef:bf:bc:bc:da:c4:70:40:07:0e:77:65:07:b0:5a:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:25:F3:F1:78:70:D2:6E:5D:2D:73:48:11:3A:A5:74:1F:DB:FC:99
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:ce:a2:2f:0b:f1:91:6a:88:86:4e:00:46:c3:ce:56:ae:
         45:d0:d7:9b:8a:7f:ad:fb:e8:ad:c7:8f:64:95:2c:fc:1f:46:
         62:4f:e5:10:5a:b7:1a:c9:0e:27:44:75:af:47:ac:6e:76:dc:
         d1:e2:5b:23:c4:3d:85:a5:11:d9:49:58:74:ac:b9:6d:76:e2:
         e5:6d:9c:97:7e:51:19:98:95:4a:e9:53:ed:bf:cb:9b:0b:8a:
         03:d2:41:98:b3:fa:1f:eb:68:6f:e2:09:0e:13:45:d5:9c:bf:
         d8:d2:4c:13:99:c7:9e:2a:5d:01:b9:2d:0f:bf:3b:99:69:14:
         f9:55:bc:bc:1f:15:37:2b:38:ad:12:a2:c2:ff:a5:f7:45:b6:
         30:ba:ff:04:b1:06:b9:ac:09:cd:a0:e4:b2:dc:01:56:17:79:
         ba:3d:50:83:7c:1c:b6:02:20:27:18:8a:f1:3c:25:36:0b:36:
         68:2b:21:69:96:3f:50:5d:8a:cf:07:d3:8f:75:11:c2:ea:d0:
         89:e1:8c:70:33:ab:d5:95:b5:e9:99:f3:92:0e:8d:99:0c:cc:
         6e:43:fe:ef:7e:36:f6:24:d8:fb:50:a8:a9:2b:a1:5e:76:7d:
         11:9f:0f:92:0b:cd:63:0e:85:27:2c:e5:d6:59:0e:20:3a:77:
         9f:e6:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:24 2026 by rpki-client