Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
File:                     emc1t6VToWgMEa3T5Iw2NbU5eco.mft (raw, json)
Hash identifier:          vvzAjMWtrA+rYkZSGtYy1ryx83N0+Ioa4dgam5tVn0I=
Subject key identifier:   1D:39:5E:9E:BB:61:44:19:8D:A5:50:E1:06:07:AA:AC:31:C2:0A:EB
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Certificate issuer:       /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial:       019A71136047D738B4DA1E80B026614FDF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
Manifest number:          1726
Signing time:             Tue 11 Nov 2025 04:01:26 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:26 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:26 +0000
Files and hashes:         1: Y0QzFQpxED6pQGOSZGJB2X93kKs.roa (hash: QstMZbErBCYp+ToxnOCIPJt5s0/mWI/dSe8BQlrQ6lk=)
                          2: emc1t6VToWgMEa3T5Iw2NbU5eco.crl (hash: 2BZA8TcOO0QfVWMbgMhj0AjT19/8VFGPjN5w40pQ0uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:60:47:d7:38:b4:da:1e:80:b0:26:61:4f:df:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
        Validity
            Not Before: Nov 11 04:01:26 2025 GMT
            Not After : Nov 12 04:01:26 2025 GMT
        Subject: CN=1d395e9ebb6144198da550e10607aaac31c20aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:95:a8:a1:59:b2:42:ad:75:3b:c6:73:aa:08:
                    84:f4:f9:12:76:60:da:c4:92:4a:15:9a:80:81:59:
                    a5:fa:39:94:d4:5c:dc:d7:df:8e:54:de:a7:ec:a0:
                    d4:05:cd:a2:aa:74:f1:08:52:f1:31:83:37:54:07:
                    26:9c:3e:55:15:17:51:83:f9:b2:d4:3f:9e:c2:c2:
                    62:4d:0a:29:b1:15:43:36:49:5f:ba:80:eb:b7:91:
                    24:f0:7e:46:09:05:9b:ec:24:ea:02:ee:d7:b3:0e:
                    2c:10:1c:dc:dd:c5:e8:0a:23:47:74:74:0e:54:4f:
                    32:e9:fa:02:5b:e8:09:08:83:0d:8e:11:09:ac:12:
                    ca:4e:4b:fe:4f:43:4c:61:ab:e9:b7:06:ae:19:47:
                    56:89:5a:4e:6d:fc:f3:12:03:cb:d0:f7:dc:14:f4:
                    07:c2:9a:1c:b8:6d:dd:65:90:9d:43:6d:9c:bd:0d:
                    04:e6:75:f3:ec:e1:27:3f:0a:81:7a:03:f5:75:20:
                    b5:fc:0a:33:69:bb:0c:a4:c0:92:0c:12:6d:03:3a:
                    ca:33:85:5b:84:49:12:95:4e:fd:96:19:18:90:73:
                    ed:d9:16:a9:f4:a2:d3:10:63:0c:d4:bd:0a:fb:6d:
                    b7:8b:84:71:5a:70:c0:ed:c7:aa:a8:de:36:18:3c:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:39:5E:9E:BB:61:44:19:8D:A5:50:E1:06:07:AA:AC:31:C2:0A:EB
            X509v3 Authority Key Identifier:
                keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:05:9c:a2:c5:4e:64:a2:77:8a:f9:dc:81:a1:bb:e5:d3:93:
         16:29:21:ac:36:19:03:87:9d:5e:c7:ba:79:e4:cb:3d:32:d3:
         e2:02:72:1f:64:14:7c:cb:22:e9:9b:40:93:49:4e:96:25:55:
         74:6f:59:13:8a:5a:67:f2:0c:41:50:75:86:40:9e:c0:89:f0:
         56:77:b4:43:ad:95:33:70:17:0b:e3:f3:77:f4:cb:cd:1c:af:
         3d:37:4c:07:b9:36:b8:b6:3b:8d:bc:bd:04:bb:45:e7:d6:c5:
         2f:24:b4:78:e8:6b:2a:f8:8c:8b:e8:a1:8e:8b:cd:f8:b6:46:
         8a:ff:0c:23:b4:d4:12:6f:71:83:06:e0:9f:8a:6d:4f:4a:dc:
         9b:c3:90:69:f7:79:2b:b9:9f:90:2e:7a:d7:e2:03:66:79:a6:
         65:33:ba:18:ce:94:ff:9b:f7:fe:f7:69:cb:c5:66:59:74:17:
         6c:8b:a8:b3:06:03:3e:11:a2:3e:0e:ac:50:b3:dd:c7:51:23:
         86:fb:f0:e6:24:9a:ef:06:b3:14:dc:91:16:08:57:10:cc:c7:
         bc:32:fe:24:a5:a3:e6:e0:a7:e6:b5:44:4d:36:f7:20:c9:69:
         bb:6b:7d:d3:a8:eb:2b:b0:0f:24:53:07:fa:57:a0:16:f2:7d:
         74:09:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:48 2025 by rpki-client