Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File:                     EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier:          LhNrBOs/gJH4zw6UIv2Ed2xy/1L09g0lWTCEaI5mXmo=
Subject key identifier:   DA:67:A0:02:51:0E:F7:D2:07:EA:8C:59:51:78:07:0F:10:B6:45:DD
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer:       /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial:       019FA1845CACB8A707D893EE78D6E04E87B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number:          09B3
Signing time:             Mon 27 Jul 2026 03:00:34 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:34 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:34 +0000
Files and hashes:         1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: pgvGGgIto/wrR0bvPL+O470aq5hjl9SjGPqNL2e5qyc=)
                          2: gu3gbqmYc42MBrN2tTrBxhokk-w.roa (hash: TMIVSIIzGJ/WU4Qk37G7HBf3N3RPvDoJEdio74aPoFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:5c:ac:b8:a7:07:d8:93:ee:78:d6:e0:4e:87:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
        Validity
            Not Before: Jul 27 03:00:34 2026 GMT
            Not After : Jul 28 03:00:34 2026 GMT
        Subject: CN=da67a002510ef7d207ea8c595178070f10b645dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:d0:bd:b2:1d:c6:20:16:5d:1c:35:41:c8:
                    13:a7:4d:a7:f9:2c:83:54:99:11:44:e0:a6:4c:61:
                    3a:55:49:ce:a1:0b:90:b2:db:42:83:1f:63:36:c4:
                    95:57:db:65:02:2a:ba:77:e9:8b:6e:0f:75:fd:79:
                    25:19:02:7e:4b:96:a9:78:1c:a6:bb:8f:28:e9:53:
                    e3:e0:80:38:30:30:52:e8:b5:4b:94:07:8f:c6:ce:
                    b6:f0:75:54:4a:35:a1:ce:4a:51:dc:0e:f0:db:4c:
                    61:82:9b:e7:a1:1f:18:e6:80:08:70:60:c8:ff:a3:
                    0b:72:8d:11:b9:ce:55:2d:1e:25:09:62:67:ef:ce:
                    4b:9b:8a:dc:04:ef:d4:f3:b7:a1:66:8e:9c:2d:e6:
                    6d:02:86:32:32:41:73:41:6d:c0:89:74:b8:cd:51:
                    42:95:2a:58:fb:5e:a0:36:37:5e:20:26:3f:c0:91:
                    bf:a7:fa:17:41:df:25:a5:8e:df:f3:83:16:84:4e:
                    e2:14:e5:66:f7:97:2e:b9:fc:aa:66:5c:54:de:d8:
                    aa:c5:6f:48:c2:34:dc:66:07:ce:92:45:0c:ff:7e:
                    71:92:a1:ce:82:15:89:26:ed:65:68:bd:07:3e:59:
                    ad:d8:fb:39:6d:94:cf:f0:ee:42:af:90:96:cb:62:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:67:A0:02:51:0E:F7:D2:07:EA:8C:59:51:78:07:0F:10:B6:45:DD
            X509v3 Authority Key Identifier:
                keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:ee:46:07:17:52:2d:cd:b7:5a:63:c3:64:50:20:7c:19:
         13:d3:c5:9a:38:2e:55:23:b1:f0:b1:c3:94:7c:7a:53:09:fe:
         52:38:f7:c6:c9:93:07:79:3b:5a:45:0d:66:28:08:25:c3:70:
         04:44:fa:b0:bc:db:03:f6:e5:07:72:a3:6e:67:e1:18:d8:c1:
         1d:58:5a:d0:bd:a1:9e:ce:91:cc:d6:03:b1:88:c7:f5:8e:35:
         c5:2a:24:ef:a2:56:fa:1b:8f:9e:a2:2e:dc:62:f9:7d:88:13:
         98:ab:99:1c:6e:67:6e:d5:2b:ed:f6:c4:33:91:02:38:2f:29:
         ac:4f:05:4f:24:b7:17:51:dc:75:61:de:d5:c7:b7:30:12:a2:
         2d:2f:81:b4:16:24:47:97:2b:7e:d8:ff:90:c2:96:ca:c0:80:
         8c:ca:c7:53:ed:80:d9:02:bc:73:f0:46:ea:1e:9a:49:f9:51:
         69:31:a9:e2:58:b0:68:ea:42:26:69:07:60:29:7c:bf:e7:4a:
         e2:7f:f6:32:70:2c:05:1e:28:a5:a8:6e:fb:76:24:df:83:72:
         7f:d5:7f:23:74:92:dc:87:4b:a6:91:b6:2e:5f:1c:26:48:85:
         6a:d7:9a:1d:78:87:12:a6:1d:ab:2c:a1:31:a5:99:5c:13:e1:
         a9:c4:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:57:48 2026 by rpki-client