Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File:                     EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier:          TV76xUm9y7pDW41tvxz3VNrGQ78Y80jfal7RQ6Bcdv0=
Subject key identifier:   74:77:02:A5:F9:04:AF:40:40:50:56:DD:14:B5:BD:27:6C:A9:49:D7
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer:       /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial:       019E30720C958818FBBB54BDBB72031BCE2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number:          1867
Signing time:             Sat 16 May 2026 11:00:40 +0000
Manifest this update:     Sat 16 May 2026 11:00:40 +0000
Manifest next update:     Sun 17 May 2026 11:00:40 +0000
Files and hashes:         1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: lDEFT/lnCpmcChlPFQzJivzabMmEt8CIy+Eylf6LR3c=)
                          2: lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa (hash: gfFr5x9q2uzGjatgMbItLXzkpsrcI9SLgHSTPYcd2mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:0c:95:88:18:fb:bb:54:bd:bb:72:03:1b:ce:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
        Validity
            Not Before: May 16 11:00:40 2026 GMT
            Not After : May 17 11:00:40 2026 GMT
        Subject: CN=747702a5f904af40405056dd14b5bd276ca949d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:d0:f7:17:5b:b9:e0:21:f6:c3:0f:e9:a5:
                    a8:4b:e5:de:bc:04:0a:e4:00:eb:7e:6d:35:cd:28:
                    36:1f:47:a9:3e:d9:0d:9e:48:11:d1:3b:44:d9:f4:
                    66:c6:d6:1b:9f:46:a9:1a:9f:e5:31:1c:c3:26:7e:
                    40:b6:e4:b4:5b:7e:bf:34:4f:9b:8a:ab:69:05:67:
                    f3:70:5b:55:cf:5c:75:9e:fa:aa:43:c4:12:44:4a:
                    e9:54:df:9e:2c:d2:5b:91:e9:27:7f:11:89:c9:16:
                    f2:14:5c:21:d8:a0:1a:71:c8:9d:4f:c3:b4:6f:fb:
                    38:d2:b6:fc:6d:c2:ef:cf:b2:8b:2c:9e:ca:7f:42:
                    c8:bd:40:f6:9a:cd:cf:01:a5:0c:6a:15:61:70:b6:
                    28:db:08:75:ef:f7:31:f0:f3:b2:8a:d0:c8:87:4c:
                    b4:2e:9f:33:c3:f5:b2:fc:09:74:17:9c:ed:4f:be:
                    cf:94:1b:0f:a3:85:30:7f:a0:20:7c:73:20:06:27:
                    2e:2b:75:5e:d4:b9:5a:20:dc:2a:2b:9e:58:ce:8a:
                    04:f9:43:51:07:b5:02:8c:ad:dd:0a:06:0b:87:29:
                    36:26:c4:83:e1:8d:b3:7f:81:9d:cd:46:a3:83:fa:
                    47:da:8f:3a:34:62:20:91:9c:16:d2:bc:ab:8e:ab:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:77:02:A5:F9:04:AF:40:40:50:56:DD:14:B5:BD:27:6C:A9:49:D7
            X509v3 Authority Key Identifier:
                keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:bd:1c:78:29:3d:47:04:5b:77:2b:38:8d:1b:db:fd:f6:
         a2:04:61:66:37:01:3d:34:05:d9:f7:c3:a0:c5:b8:29:67:49:
         52:50:df:0d:72:f9:b3:9d:87:1c:97:ea:6b:04:19:d3:5a:b2:
         bf:3f:bf:a2:53:0b:7a:22:9f:90:ed:e5:61:c3:92:2c:56:f3:
         47:3b:f5:85:4c:50:fc:3b:a2:56:10:b5:6c:39:c6:56:5a:3c:
         b7:c0:c6:9c:5c:5b:01:26:35:21:d4:7b:29:f8:6c:3f:72:94:
         68:13:f3:a6:5f:6a:cf:26:fe:11:76:2e:6b:49:14:d5:e2:8e:
         27:1c:bf:3c:7d:8b:2f:a3:ae:21:9f:d9:bc:f2:70:cd:46:1c:
         b4:1d:2a:22:3b:c4:f8:b6:86:32:b1:81:20:bc:63:1d:f6:49:
         56:07:26:89:7f:55:dd:28:9f:68:1d:40:7a:33:30:10:b0:50:
         93:4a:c4:86:c9:c8:21:82:84:9a:da:1e:e2:3f:9c:65:44:b5:
         a4:07:82:e8:6d:de:a8:a0:38:55:71:ba:b6:39:0c:f7:00:e7:
         2e:6a:83:bc:e9:df:a8:2c:ab:f6:1c:ab:4c:64:90:5a:f7:1e:
         d4:e2:75:42:9d:c4:70:dc:13:7f:d8:35:aa:dd:30:8c:ce:13:
         66:3c:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:37 2026 by rpki-client