Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
File:                     egm3YjoIVFfYx2tJTs2ITY_vpNE.mft (raw, json)
Hash identifier:          MYemJY/mxnL5xURohHyZuo0rqrxrKdSXcCkCZvghBbg=
Subject key identifier:   F8:1B:A6:CE:E5:0D:76:90:E9:31:94:C9:F8:C6:94:20:1F:43:50:3F
Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
Certificate issuer:       /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Certificate serial:       019DB0C5F9DE8A5E70C1851AC1763E141A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
Manifest number:          0222
Signing time:             Tue 21 Apr 2026 16:00:57 +0000
Manifest this update:     Tue 21 Apr 2026 16:00:57 +0000
Manifest next update:     Wed 22 Apr 2026 16:00:57 +0000
Files and hashes:         1: 3v1fDqNftzfSsbjae5v8U-0Yix0.roa (hash: nSifXf8r+ikjFXrJx3sG9Ogaxxz2ug4esGN19vdxBUs=)
                          2: 7WKrJrhvhGi9RYRIgcoWd2xmbkc.roa (hash: GeJ8x38uiqGaYg3LXRMD8PkKkjHNwyyZii4Sa8DdSEs=)
                          3: A2iR7wBI4WsWOWxk0yIEXCMnkKY.roa (hash: pmcJfdZ5WR1prZx2M0Vbhr4nYAqdO1+A5gfYqn4i1XE=)
                          4: egm3YjoIVFfYx2tJTs2ITY_vpNE.crl (hash: SZ0GoVCM/9JkSE0FfNSkgreq8wgaWcfYiK3VHTrxL6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 14:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b0:c5:f9:de:8a:5e:70:c1:85:1a:c1:76:3e:14:1a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
        Validity
            Not Before: Apr 21 16:00:57 2026 GMT
            Not After : Apr 22 16:00:57 2026 GMT
        Subject: CN=f81ba6cee50d7690e93194c9f8c694201f43503f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:34:99:5e:29:d0:27:83:c7:93:82:29:2f:
                    08:e0:05:25:dc:e2:8e:a7:18:56:a1:71:2b:d9:92:
                    2b:f5:58:49:8b:35:0a:bf:12:94:45:de:8c:f4:89:
                    2d:02:7c:4e:ee:26:eb:22:ef:82:a5:85:65:35:79:
                    18:85:5e:e4:58:5f:0a:56:59:e2:8f:69:e5:0c:be:
                    3b:d6:cf:76:db:fa:80:01:c5:72:d4:40:7b:5d:57:
                    4c:aa:f1:f7:32:b5:e0:d7:c3:2b:34:cd:8c:7e:67:
                    3e:b4:fd:e2:45:2f:97:da:b0:54:12:84:50:fa:6d:
                    35:37:67:a6:f9:e8:df:0e:5d:03:d0:8c:6e:a8:e4:
                    29:25:63:fa:a6:ed:bd:7f:95:e4:37:b5:45:d7:e2:
                    94:1f:c5:cf:e6:de:d5:c9:ca:51:d6:88:c7:9c:cc:
                    e0:eb:71:cb:f3:bd:6b:fb:6b:96:7f:17:05:10:56:
                    7b:b0:81:81:32:72:d7:1f:02:a5:31:6b:cf:40:e5:
                    dd:69:d0:73:c1:d0:2a:00:bb:3b:97:d2:ad:e9:70:
                    4a:e5:73:75:54:aa:80:bd:c5:eb:30:21:0d:98:5e:
                    07:9d:02:59:3f:6e:e6:df:c6:a0:c8:c0:56:26:39:
                    74:2b:cc:19:1c:20:cc:71:3c:61:f7:02:aa:d3:8b:
                    11:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:A6:CE:E5:0D:76:90:E9:31:94:C9:F8:C6:94:20:1F:43:50:3F
            X509v3 Authority Key Identifier:
                keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0e:8c:cd:b7:33:d1:86:9d:50:4b:6a:03:bd:17:3e:6c:8c:
         35:fd:42:09:56:f7:c0:10:c3:77:be:4a:ce:bb:e2:21:b5:eb:
         9b:8e:6e:41:25:7a:fe:16:be:8f:66:3b:1f:3d:a3:33:0c:ee:
         71:6b:e1:20:fe:dc:f2:60:0e:41:9c:99:67:4e:c2:0b:0a:8c:
         ec:18:18:8d:b6:75:0f:42:ff:0b:28:f5:92:09:7c:75:03:c2:
         34:65:a2:66:d2:40:c8:88:af:f8:a3:8f:7b:db:25:0c:8c:5d:
         fb:09:e0:39:6e:8d:dd:39:75:ee:28:e7:96:1d:1d:40:e6:c8:
         bd:02:45:0f:77:57:ca:5b:0d:28:95:11:3a:68:7c:9c:82:14:
         c9:5c:67:91:63:29:05:ea:f4:3a:45:87:44:e8:f8:67:f4:84:
         f7:ec:ac:f4:e3:b4:f7:e5:56:11:3f:41:cc:db:ac:86:e6:31:
         df:86:6c:90:d8:2f:59:36:44:80:8f:f3:9e:00:49:a0:d0:eb:
         b2:57:96:c9:32:22:04:5e:d5:d4:b1:2f:1a:d8:fd:5c:b1:bd:
         62:83:32:5b:98:52:ea:e5:33:80:92:99:7f:7d:6e:7f:69:b7:
         22:76:9e:24:b1:58:d2:3e:bd:c5:7b:91:ec:e5:84:5b:4c:09:
         58:bf:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:06:31 2026 by rpki-client