Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          2jcCVMvxSXXiH/9TrbgivW0WTMDByZ02iQUTXF85Cp4=
Subject key identifier:   F2:AB:33:9A:A0:D6:3D:ED:2B:CE:F4:EF:B8:0F:A0:5D:EC:86:CF:34
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       019EBEEC5E8A0F54D2AA1E8489E3AD0A0435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          0899
Signing time:             Sat 13 Jun 2026 03:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:22 +0000
Files and hashes:         1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
                          2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: Yma+l24/NX2RV2dzulCq1ljyVATDO0u/ggF5RICHMNc=)
                          3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
                          4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:5e:8a:0f:54:d2:aa:1e:84:89:e3:ad:0a:04:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: Jun 13 03:00:22 2026 GMT
            Not After : Jun 14 03:00:22 2026 GMT
        Subject: CN=f2ab339aa0d63ded2bcef4efb80fa05dec86cf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:94:fc:d4:41:27:81:0b:ec:2d:92:bc:c2:
                    b0:e4:f9:16:9f:8b:70:36:d1:1c:ad:7f:81:8d:1a:
                    14:1e:30:e2:3f:91:fa:7d:37:61:c2:2b:b1:45:4b:
                    76:1a:5e:7a:9b:a1:af:50:96:f8:a8:c3:6d:bc:96:
                    49:c5:cb:a4:7f:45:1b:48:b6:81:5c:54:3f:79:06:
                    44:f5:0b:f4:10:fc:2e:94:7a:c3:c6:2d:ce:06:00:
                    14:25:3d:3f:f5:7c:ff:a1:63:12:2e:b0:3f:53:a0:
                    38:7b:56:2b:cf:05:86:d2:b6:8b:05:ae:d0:2a:1d:
                    72:6f:10:89:cc:f5:bc:69:2f:9b:c9:50:a0:a2:c3:
                    ed:ac:b9:cb:8b:b6:20:6f:12:99:45:3c:89:57:0e:
                    5d:e2:9c:c1:85:8b:70:46:82:ce:7a:8b:c0:7f:62:
                    76:e7:36:70:5c:b4:28:e5:c8:d5:01:ec:7d:02:b8:
                    5b:06:29:db:9f:82:d5:28:eb:ce:6f:01:7c:a5:8c:
                    79:54:f7:4b:1a:96:9f:c3:3e:ff:86:4d:50:49:6a:
                    60:b2:18:4f:bf:74:f4:c2:35:28:f4:bd:6d:a7:dc:
                    7c:bb:44:b5:26:b6:99:8d:51:96:05:eb:39:98:0b:
                    78:dc:82:f4:75:42:04:55:ce:b7:b7:83:cc:58:61:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AB:33:9A:A0:D6:3D:ED:2B:CE:F4:EF:B8:0F:A0:5D:EC:86:CF:34
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:2d:c9:5c:ef:44:01:3e:00:a6:3a:6c:ee:1c:e5:b2:7a:
         fc:f7:e5:06:0a:39:1a:ec:8c:75:08:e3:f6:6c:0a:bc:7d:d3:
         c3:e3:fa:19:f3:1a:26:6c:36:e4:e7:b0:7e:99:ae:ce:81:18:
         62:68:69:f7:d6:a5:08:e7:56:90:7d:33:f3:42:f7:5a:26:44:
         38:b3:cf:a5:9c:96:28:a3:5b:24:75:d6:3c:f8:5d:c9:22:65:
         bd:29:cd:80:b8:4d:15:39:17:b9:91:7f:74:a4:3c:ff:6d:79:
         f7:37:a9:cd:35:20:ec:c7:38:bd:ab:26:6f:17:dd:0b:0d:bb:
         2f:2e:76:52:dd:5f:80:f1:4b:c7:f2:ca:05:3c:ae:f6:e1:5a:
         88:5a:f5:e9:67:b8:dd:b3:9c:80:97:b6:33:c9:21:f0:84:ec:
         1c:11:f9:0e:4d:f4:68:03:04:ea:f1:5f:22:27:2b:71:a9:f0:
         2e:ce:1c:81:a6:c2:a1:60:d0:ed:52:7e:a8:84:a9:b3:47:83:
         7f:d1:21:ad:b8:b5:18:65:e4:5e:e1:43:2c:9e:8f:4b:3b:86:
         c7:a8:35:ea:87:28:24:fd:dd:01:0a:20:b5:a1:5d:10:dd:a8:
         ec:72:77:f8:14:16:55:5a:00:92:09:7f:06:d3:46:94:05:c2:
         ec:11:57:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7F6KD1TSqh6EieOtCgQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh
OTAzMWUwHhcNMjYwNjEzMDMwMDIyWhcNMjYwNjE0MDMwMDIyWjAzMTEwLwYDVQQD
EyhmMmFiMzM5YWEwZDYzZGVkMmJjZWY0ZWZiODBmYTA1ZGVjODZjZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdWU/NRBJ4EL7C2SvMKw5PkWn4tw
NtEcrX+BjRoUHjDiP5H6fTdhwiuxRUt2Gl56m6GvUJb4qMNtvJZJxcukf0UbSLaB
XFQ/eQZE9Qv0EPwulHrDxi3OBgAUJT0/9Xz/oWMSLrA/U6A4e1YrzwWG0raLBa7Q
Kh1ybxCJzPW8aS+byVCgosPtrLnLi7YgbxKZRTyJVw5d4pzBhYtwRoLOeovAf2J2
5zZwXLQo5cjVAex9ArhbBinbn4LVKOvObwF8pYx5VPdLGpafwz7/hk1QSWpgshhP
v3T0wjUo9L1tp9x8u0S1JraZjVGWBes5mAt43IL0dUIEVc63t4PMWGErfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKrM5qg1j3tK87077gPoF3shs80MB8GA1UdIwQY
MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt
Mzg3NTM2ZDAzYTcxLzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQtMzg3NTM2ZDAzYTcx
LzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7wtyVzv
RAE+AKY6bO4c5bJ6/PflBgo5GuyMdQjj9mwKvH3Tw+P6GfMaJmw25OewfpmuzoEY
Ymhp99alCOdWkH0z80L3WiZEOLPPpZyWKKNbJHXWPPhdySJlvSnNgLhNFTkXuZF/
dKQ8/2159zepzTUg7Mc4vasmbxfdCw27Ly52Ut1fgPFLx/LKBTyu9uFaiFr16We4
3bOcgJe2M8kh8ITsHBH5Dk30aAME6vFfIicrcanwLs4cgabCoWDQ7VJ+qISps0eD
f9Ehrbi1GGXkXuFDLJ6PSzuGx6g16ocoJP3dAQogtaFdEN2o7HJ3+BQWVVoAkgl/
BtNGlAXC7BFXjg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:39 2026 by rpki-client