Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          nN05gVIUhVNODSxRIYl4JqC1kfsxgd72Gy0n3+6CVNE=
Subject key identifier:   F0:0C:AA:62:7D:5F:5E:42:BF:CA:1D:A3:16:89:3B:53:B4:76:64:FB
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       019EC2C937525E79F1057F211D5F0A86B965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          089B
Signing time:             Sat 13 Jun 2026 21:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:27 +0000
Files and hashes:         1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
                          2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: /P+4qY+1O70AnIKyhMDLmkUn1P3JvhHBEzFe7nsO4s8=)
                          3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
                          4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:37:52:5e:79:f1:05:7f:21:1d:5f:0a:86:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: Jun 13 21:00:27 2026 GMT
            Not After : Jun 14 21:00:27 2026 GMT
        Subject: CN=f00caa627d5f5e42bfca1da316893b53b47664fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:bd:7a:2a:8e:34:da:7e:6c:03:65:a7:b9:
                    23:05:e8:d7:07:1e:b3:fd:cd:21:3b:bf:8d:ea:f7:
                    cb:9b:f0:22:d2:98:cb:00:60:d0:4e:11:b8:e8:e5:
                    41:39:a0:d8:bf:40:2d:c8:dc:1a:71:ff:5b:4d:e4:
                    11:fb:c3:8f:ed:0a:90:78:e1:13:5a:50:96:09:01:
                    a6:06:2c:ee:f8:ae:54:20:6a:7a:55:ab:a7:22:7b:
                    a8:26:3a:9a:00:0b:38:a3:15:bd:4d:ff:bf:15:87:
                    2a:a1:bc:c9:de:ec:58:2e:6f:00:5c:ed:49:bd:d1:
                    3a:ed:c4:f1:9e:aa:2c:58:a0:3f:e8:b5:5f:64:1f:
                    be:72:d6:ef:8a:3c:9d:4c:72:d9:7d:e1:43:91:02:
                    ff:c6:f2:f6:b8:08:db:49:09:a2:19:b0:9c:6b:a2:
                    38:4d:49:2c:73:56:06:d1:a6:fe:57:9e:8a:b3:90:
                    33:72:6d:90:a4:16:30:5a:53:a1:61:ac:9b:d0:5b:
                    66:40:41:dd:4d:27:b8:63:dc:d0:4d:80:b7:f9:b8:
                    62:6f:b7:b4:3d:25:0d:73:c7:1b:ee:47:a2:f7:5c:
                    13:d7:01:42:b1:38:e8:89:24:b6:d1:98:34:85:7d:
                    e2:8e:c3:30:dc:e8:00:a9:3c:d0:ef:bb:6d:7f:e2:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0C:AA:62:7D:5F:5E:42:BF:CA:1D:A3:16:89:3B:53:B4:76:64:FB
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:74:f5:c3:86:ac:48:aa:2e:fe:87:88:07:34:ed:5a:5f:c4:
         23:1b:19:df:d2:a0:ad:ea:71:0e:d4:38:08:cf:8a:76:87:21:
         66:8f:09:4c:9a:49:69:72:0f:4a:62:6e:97:b2:96:29:14:5f:
         9b:25:e8:c8:61:f8:7b:7e:2e:b0:70:1f:aa:f7:9f:b2:56:a8:
         ac:97:a2:a5:c5:e9:db:1c:97:7c:4b:0d:45:75:19:99:21:9e:
         5c:3d:ba:a1:14:40:53:e7:47:e1:bb:79:1d:b7:bb:29:8a:6a:
         92:d6:f3:90:8a:e3:0f:82:c3:4e:4c:75:6a:55:92:6a:1f:06:
         e2:34:50:0b:11:d6:9a:00:9b:fc:d0:70:e8:c3:b3:84:57:80:
         01:98:e4:cb:0b:17:7c:9d:27:f9:97:78:31:8c:2b:af:0b:4a:
         fc:6b:09:a3:31:ab:bb:c8:01:31:1a:79:8e:db:7f:88:99:be:
         44:86:f8:a9:9c:31:99:61:48:f9:0c:f8:a7:ca:a0:c3:db:9c:
         95:c5:b5:15:d3:84:bd:63:5b:1e:db:da:73:f8:b8:12:82:de:
         89:5b:fe:41:47:90:36:f7:4a:0a:2f:c7:2c:93:41:98:32:8a:
         5a:2a:dd:cf:ef:8a:df:39:4f:8c:38:d4:98:c4:fa:aa:0c:6e:
         da:36:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:33:40 2026 by rpki-client