Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
File:                     EMTixWLflMzKm0ggghD9Fs-6kjU.mft (raw, json)
Hash identifier:          PFH4WyT/TSPlU0hJi5Jd5uiVgzoFS50DDfqz7oO9Qxw=
Subject key identifier:   FD:FC:3F:C5:8A:2F:5E:40:5E:5D:4D:BA:64:A4:E6:38:46:97:D0:1A
Authority key identifier: 10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
Certificate issuer:       /CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Certificate serial:       019D38666197478565B1886C9DB7CA71B83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 07:02:06 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:06 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:06 +0000
Files and hashes:         1: EMTixWLflMzKm0ggghD9Fs-6kjU.crl (hash: N9ZCpZXiy9lsptoEfbIKIjplOe+oDXr/yjWLykrScAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:61:97:47:85:65:b1:88:6c:9d:b7:ca:71:b8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c4e2c562df94ccca9b48208210fd16cfba9235
        Validity
            Not Before: Mar 29 07:02:06 2026 GMT
            Not After : Mar 30 07:02:06 2026 GMT
        Subject: CN=fdfc3fc58a2f5e405e5d4dba64a4e6384697d01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:f0:55:61:11:98:09:40:36:f5:1c:04:80:
                    79:59:5e:23:89:f6:b1:8f:64:f6:70:53:75:d6:63:
                    31:20:29:ea:81:83:e4:08:19:19:51:36:31:a5:73:
                    85:d0:29:91:7e:c1:6a:e6:7e:e2:5f:f1:c6:1d:bd:
                    2f:13:54:7e:82:13:63:2a:10:6f:4f:4d:28:0a:e7:
                    54:11:32:26:4a:9c:2f:bc:cd:97:d3:0f:dc:09:f6:
                    c4:30:53:56:19:35:66:0d:64:77:44:24:c6:c9:47:
                    7c:3e:76:71:15:51:0c:ce:a5:46:39:f0:39:55:17:
                    7c:ab:2c:d0:29:98:95:5c:f5:8d:9c:3d:45:0c:c0:
                    1d:1c:1d:82:3a:37:58:cd:a9:58:86:0e:0e:11:d9:
                    ce:8b:61:44:97:59:1f:56:51:de:42:eb:91:48:f0:
                    c7:3b:6b:39:49:13:89:ed:d8:d9:a5:a1:32:04:77:
                    fa:6f:9d:8e:3e:18:e6:73:18:8f:a7:c1:21:79:ab:
                    3b:96:39:b7:52:de:34:e9:37:a5:b8:06:4d:dc:6b:
                    22:25:f4:8c:1a:bb:46:d8:53:bf:6d:8c:33:6e:72:
                    05:a7:46:21:f8:77:04:48:b0:16:9c:ec:48:2d:66:
                    80:c5:27:ee:af:cd:69:e7:0f:65:f6:4e:b7:ad:2f:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FC:3F:C5:8A:2F:5E:40:5E:5D:4D:BA:64:A4:E6:38:46:97:D0:1A
            X509v3 Authority Key Identifier:
                keyid:10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8f:56:33:80:f9:91:ef:cb:fd:ff:a1:98:bf:03:e5:01:f0:
         71:c5:25:b8:76:3c:de:b9:84:3f:53:42:a4:c9:52:7b:d0:52:
         85:0b:d9:aa:57:ef:c8:cd:ab:cf:cc:58:6c:e7:07:9c:0a:e0:
         15:de:6f:4d:da:7a:92:7f:06:1a:9f:5a:ae:a2:28:9a:f0:a4:
         a2:60:67:2e:17:5c:eb:af:02:90:6e:6a:1d:37:7d:9e:4c:c3:
         de:ed:be:09:4e:56:48:98:a0:4d:e5:c2:bb:78:d2:cb:60:57:
         4b:f3:87:b6:5a:a7:c7:7f:3b:05:ba:91:85:87:a7:3d:78:4c:
         23:54:79:5b:03:51:dc:3b:57:03:15:16:ec:84:8a:a8:be:cd:
         2f:54:7c:2a:a7:5b:7f:ec:14:6e:0c:61:7c:37:9a:7e:79:76:
         a9:94:1c:6b:e5:a0:c0:0e:29:eb:ee:2c:94:1e:cb:8e:cf:33:
         44:12:08:c5:a3:00:7a:81:7c:fa:31:f0:23:f4:fd:d5:7c:ab:
         86:b3:3e:dd:c5:dd:50:64:19:2a:b3:5e:b1:94:39:ba:be:76:
         cf:54:a5:45:d9:ff:72:87:97:28:4d:2f:f9:1b:1b:98:8a:10:
         de:36:6d:7e:ee:f1:f5:ed:01:02:53:35:e2:b5:ef:c4:c4:08:
         cb:84:24:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZmGXR4VlsYhsnbfKcbg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzRlMmM1NjJkZjk0Y2NjYTliNDgyMDgyMTBmZDE2Y2Zi
YTkyMzUwHhcNMjYwMzI5MDcwMjA2WhcNMjYwMzMwMDcwMjA2WjAzMTEwLwYDVQQD
EyhmZGZjM2ZjNThhMmY1ZTQwNWU1ZDRkYmE2NGE0ZTYzODQ2OTdkMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYvwVWERmAlANvUcBIB5WV4jifax
j2T2cFN11mMxICnqgYPkCBkZUTYxpXOF0CmRfsFq5n7iX/HGHb0vE1R+ghNjKhBv
T00oCudUETImSpwvvM2X0w/cCfbEMFNWGTVmDWR3RCTGyUd8PnZxFVEMzqVGOfA5
VRd8qyzQKZiVXPWNnD1FDMAdHB2COjdYzalYhg4OEdnOi2FEl1kfVlHeQuuRSPDH
O2s5SROJ7djZpaEyBHf6b52OPhjmcxiPp8Eheas7ljm3Ut406TeluAZN3GsiJfSM
GrtG2FO/bYwzbnIFp0Yh+HcESLAWnOxILWaAxSfur81p5w9l9k63rS9EvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP38P8WKL15AXl1NumSk5jhGl9AaMB8GA1UdIwQY
MBaAFBDE4sVi35TMyptIIIIQ/RbPupI1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1UaXhXTGZsTXpLbTBnZ2doRDlGcy02a2pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84MzAxOTktZTc4Mi00Y2EzLTlhMWMt
NmE1ZDAyMjU4MjBkLzEvRU1UaXhXTGZsTXpLbTBnZ2doRDlGcy02a2pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84MzAxOTktZTc4Mi00Y2EzLTlhMWMtNmE1ZDAyMjU4MjBk
LzEvRU1UaXhXTGZsTXpLbTBnZ2doRDlGcy02a2pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAY9WM4D5
ke/L/f+hmL8D5QHwccUluHY83rmEP1NCpMlSe9BShQvZqlfvyM2rz8xYbOcHnArg
Fd5vTdp6kn8GGp9arqIomvCkomBnLhdc668CkG5qHTd9nkzD3u2+CU5WSJigTeXC
u3jSy2BXS/OHtlqnx387BbqRhYenPXhMI1R5WwNR3DtXAxUW7ISKqL7NL1R8Kqdb
f+wUbgxhfDeafnl2qZQca+WgwA4p6+4slB7Ljs8zRBIIxaMAeoF8+jHwI/T91Xyr
hrM+3cXdUGQZKrNesZQ5ur52z1SlRdn/coeXKE0v+RsbmIoQ3jZtfu7x9e0BAlM1
4rXvxMQIy4Qklg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:35 2026 by rpki-client