Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          yV+HXwNgC1npJa/r4oDEWiQnAN5X14ZDgE5j8N/d16I=
Subject key identifier:   6D:75:22:A6:8B:AD:AA:52:A9:18:71:A8:7D:E0:92:70:FB:B0:63:69
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       019D9B516448B7346539223626B2778671BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          0802
Signing time:             Fri 17 Apr 2026 12:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:35 +0000
Files and hashes:         1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
                          2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: Q0EuGcKg5VRAD94MCfBKGbiCG4Rg68J0H7dCreXvnjA=)
                          3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
                          4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:64:48:b7:34:65:39:22:36:26:b2:77:86:71:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: Apr 17 12:01:35 2026 GMT
            Not After : Apr 18 12:01:35 2026 GMT
        Subject: CN=6d7522a68badaa52a91871a87de09270fbb06369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:63:c4:aa:c6:83:2f:08:e5:cf:6b:e1:3f:24:
                    e7:fb:ce:6e:1e:8d:51:a1:cc:fd:e6:55:ae:6a:e0:
                    df:ed:71:43:85:f0:4d:3a:72:b7:47:0c:f8:48:3c:
                    65:57:fd:92:1f:68:45:d6:30:4d:32:89:51:ec:12:
                    18:70:31:77:eb:4d:9f:95:d1:a6:35:db:80:cc:bc:
                    ec:89:78:4f:90:6f:fe:43:9b:35:a7:4a:50:86:43:
                    f2:d1:ce:05:5f:4b:d6:0f:9f:f1:1f:3d:85:df:1c:
                    fa:d3:10:13:e5:bd:09:54:a0:b1:c2:cd:e0:96:00:
                    c7:38:28:bb:65:6e:8c:b9:46:28:be:bf:34:75:2c:
                    d8:6e:67:ac:84:0b:38:eb:c3:18:42:e5:05:60:12:
                    14:ab:62:b5:b3:11:08:2a:0f:20:af:cc:48:27:ee:
                    d1:d5:cc:d0:7e:22:c2:2e:c4:df:a6:6d:39:4c:8f:
                    bb:c8:39:cb:39:61:77:f9:dc:de:ad:0a:07:10:21:
                    10:64:8f:f6:b5:8c:f3:71:28:94:17:9c:e4:20:a5:
                    bb:bc:6d:89:aa:91:9d:fe:d2:ab:cf:00:fd:90:92:
                    ba:b0:60:da:b3:e0:e1:4c:a7:71:f5:34:a9:d4:8f:
                    e1:c4:3f:9d:a5:e3:35:60:9f:91:fb:92:c2:3d:fd:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:75:22:A6:8B:AD:AA:52:A9:18:71:A8:7D:E0:92:70:FB:B0:63:69
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:6a:49:51:61:5c:2b:2b:f1:97:c8:7a:fe:35:ca:51:29:
         52:c7:38:55:f1:34:e4:20:d3:34:03:93:8c:09:d4:10:7a:ea:
         63:d3:ee:26:f2:52:03:64:9f:2f:78:fb:d6:1e:8b:c9:c7:87:
         7f:87:e9:4a:45:98:c2:d5:f5:35:f2:c7:0b:91:7e:33:f0:32:
         42:ff:26:68:89:a7:2e:9a:cc:ed:35:f5:25:6b:9f:2a:91:bd:
         b8:76:ea:c7:03:15:18:d2:e9:cd:9d:4f:b7:24:31:5b:ec:72:
         de:d0:af:76:e9:53:4d:f8:de:0e:80:ab:62:d0:86:4d:11:65:
         9c:f2:06:73:f6:66:86:5d:6b:8f:03:87:7d:32:42:1c:cc:58:
         0b:d1:86:6b:f2:02:aa:c8:62:23:1e:d6:47:07:c8:a5:66:06:
         80:f3:69:7a:cb:c6:ba:71:d2:91:0d:c2:9f:71:3d:5f:9f:cb:
         7c:7b:0d:ac:bf:b5:f0:9a:24:60:2c:3b:35:a1:d2:73:af:07:
         3c:ee:73:f8:df:4f:4b:26:ee:02:70:36:84:42:17:dc:8d:e7:
         77:74:31:ad:dc:45:d3:2d:08:d2:f3:ef:11:25:32:3e:bf:c3:
         70:cc:1c:2c:6c:07:27:d0:51:dc:2d:a1:75:4d:96:86:a2:36:
         49:bb:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:10 2026 by rpki-client