Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File:                     EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier:          sLwIiKDj2cA8dni9e9uVyeOOwmBmfI9cfyWMcMOpAI4=
Subject key identifier:   1E:26:A9:68:E2:7F:49:E0:73:F0:C6:E5:29:00:65:2A:06:8D:14:94
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer:       /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial:       01A11C75A34D05F6BABD980E584307C886E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number:          17CE
Signing time:             Thu 08 Oct 2026 17:00:33 +0000
Manifest this update:     Thu 08 Oct 2026 17:00:33 +0000
Manifest next update:     Fri 09 Oct 2026 17:00:33 +0000
Files and hashes:         1: 6EoSjHN4t39-FE41ARaCfceq3s4.roa (hash: uTwjH+AoTBPoH409BUSaNY0tsegEvG16T99C8c2GUCc=)
                          2: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: TYgNyvi5GUd/TGz3gR7r5IG9xDwwknj0m0l2YHrs7p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:75:a3:4d:05:f6:ba:bd:98:0e:58:43:07:c8:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
        Validity
            Not Before: Oct  8 17:00:33 2026 GMT
            Not After : Oct  9 17:00:33 2026 GMT
        Subject: CN=1e26a968e27f49e073f0c6e52900652a068d1494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:00:1e:24:7f:6c:ca:2a:d6:d5:a1:94:a3:
                    ae:bb:2a:c6:03:c0:20:20:cf:27:9a:96:44:81:7a:
                    72:c8:92:33:ab:e7:d4:93:e1:3f:30:68:20:a7:68:
                    b0:01:b7:40:8e:73:62:9a:66:e5:33:60:19:3c:2f:
                    3a:ea:45:9e:df:a3:00:2f:6c:48:de:78:02:5c:58:
                    5f:55:a2:9c:cc:35:89:fe:24:58:19:59:5a:66:e5:
                    1c:96:2e:42:56:df:74:08:82:93:c6:09:42:ba:e4:
                    f3:5c:15:9c:b2:f2:e1:00:eb:31:f1:62:de:71:46:
                    dd:07:07:ab:a0:f5:2c:14:1a:92:93:fe:cd:78:4b:
                    c2:20:2e:52:19:bf:64:01:22:72:16:3c:80:a8:57:
                    05:f1:50:9c:09:3a:98:ac:3c:75:84:42:da:8c:0c:
                    93:19:97:54:86:d6:7b:18:4e:d1:03:cd:26:f0:af:
                    27:51:4b:5c:59:c1:fa:8d:16:6f:89:a5:73:db:c8:
                    71:4e:23:ca:71:a4:2c:cf:e6:3a:18:1a:3c:db:c1:
                    5a:a2:c9:31:3c:05:20:79:b3:bd:13:1c:de:1e:87:
                    37:15:84:e1:61:71:51:b3:13:94:77:07:26:c3:f9:
                    8c:41:d0:c7:54:bc:bb:7b:3d:90:5c:9f:ca:61:2e:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:26:A9:68:E2:7F:49:E0:73:F0:C6:E5:29:00:65:2A:06:8D:14:94
            X509v3 Authority Key Identifier:
                keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:84:8c:75:4c:1b:9d:1d:dc:c6:53:52:df:2f:15:64:50:84:
         c3:3c:0a:d7:50:9d:0d:42:a1:78:75:ed:23:29:d4:dc:6d:65:
         40:4a:a4:3d:bb:dd:98:62:2c:fe:b1:19:3f:29:8e:6d:4e:29:
         65:96:83:b5:96:20:58:01:e5:3c:5a:11:12:dd:e8:0d:c3:62:
         d2:ea:98:09:15:0a:e6:71:1f:de:4d:1a:fe:71:dc:3a:f5:58:
         0c:fb:04:7c:1b:06:78:69:bd:fd:47:51:d8:b4:95:21:12:bf:
         07:4a:9d:2a:87:2e:78:dc:80:de:0a:9c:56:6c:f6:f1:e8:b2:
         24:d9:60:7d:55:3b:5e:e7:1d:2b:03:5e:a9:eb:fb:b5:46:30:
         86:97:10:64:d2:f3:db:44:f3:f8:42:a4:32:13:50:31:a5:f5:
         cb:56:d0:57:12:f4:4b:b3:54:dd:bc:0f:5f:20:09:7f:1e:69:
         bd:09:bd:39:10:f8:75:4e:78:7a:ab:2d:14:8d:5e:7e:7f:35:
         15:ae:2b:dd:ba:c2:67:02:26:57:c0:5b:6e:d7:f0:60:9c:00:
         17:32:25:30:93:1d:91:f5:aa:d4:de:74:15:73:fe:33:1c:44:
         a5:56:0b:67:ea:7d:da:51:4a:c9:5b:e7:5a:99:c4:e1:ef:8b:
         73:f9:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 00:17:58 2026 by rpki-client