Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File:                     EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier:          1dqPwCp9o5eS0LrmarTLQl+emfiUlbh9tAicDWcqc24=
Subject key identifier:   1F:46:9A:1F:48:7C:95:02:3A:DB:08:AA:36:F4:AD:24:DD:27:77:26
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer:       /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial:       019A1F1AD67610BDC1292B5BA4B9B124A7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number:          06D8
Signing time:             Sun 26 Oct 2025 06:00:43 +0000
Manifest this update:     Sun 26 Oct 2025 06:00:43 +0000
Manifest next update:     Mon 27 Oct 2025 06:00:43 +0000
Files and hashes:         1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: /y+kpX+0z+s7iTs2toSUSm3LVoWPKzZvnMArnxovmH0=)
                          2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:1a:d6:76:10:bd:c1:29:2b:5b:a4:b9:b1:24:a7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
        Validity
            Not Before: Oct 26 06:00:43 2025 GMT
            Not After : Oct 27 06:00:43 2025 GMT
        Subject: CN=1f469a1f487c95023adb08aa36f4ad24dd277726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:ec:3f:13:c6:97:02:5b:d9:a5:97:42:70:
                    3c:9f:b2:d4:72:82:95:32:08:db:c6:eb:89:e1:32:
                    95:36:34:49:89:43:dc:f5:7a:20:c5:e9:30:7d:f6:
                    43:67:3f:53:c9:80:94:f9:33:f4:62:e5:09:69:58:
                    c7:ea:b9:11:51:cd:ef:7b:2e:e6:e8:e4:40:14:6d:
                    f0:fb:94:55:94:72:fd:79:bc:cd:85:3d:15:d0:71:
                    b9:cd:fc:b3:69:4e:7b:16:ef:7a:cc:94:2b:1e:1f:
                    65:38:97:a7:b3:fa:0c:21:fc:3f:7b:21:32:26:1b:
                    b1:5b:87:9d:d2:11:1f:2b:e4:29:68:5b:d7:37:de:
                    ce:a1:95:31:f6:10:36:09:0f:db:d4:e8:eb:0c:e2:
                    52:20:cb:77:6b:df:68:9d:d1:6a:e6:2a:e2:b9:e8:
                    6c:a9:66:aa:e2:a7:07:6b:29:dd:ce:c3:30:1f:db:
                    5a:41:f7:e4:a4:04:0e:e6:eb:ab:02:00:d2:60:8e:
                    87:56:68:02:41:73:5e:71:86:c7:48:09:f1:8e:9a:
                    84:ac:db:04:1b:2f:e7:24:ee:b1:16:32:ef:e4:fd:
                    08:a9:23:b7:e4:0a:d6:9b:da:c9:86:7f:a1:cb:f4:
                    d8:20:38:5e:22:9a:16:ac:69:70:15:c1:a5:6b:b4:
                    8e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:9A:1F:48:7C:95:02:3A:DB:08:AA:36:F4:AD:24:DD:27:77:26
            X509v3 Authority Key Identifier:
                keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f6:c8:b2:50:bb:f1:19:df:fe:8c:3c:5d:56:4a:d5:52:72:
         40:b2:3c:c2:61:32:a1:bb:62:1c:20:e9:b1:fd:7b:03:b6:2e:
         05:2c:4f:e6:72:81:79:9b:ed:c5:60:e5:e1:c6:70:82:db:c7:
         fc:a2:38:cb:43:7a:1a:54:7c:63:23:49:1e:e6:5a:02:6e:a5:
         1a:49:97:e1:9d:c2:86:64:78:ca:4a:3d:e7:26:c4:7c:c4:7a:
         33:24:99:48:27:e8:6a:e3:42:c3:6d:92:c8:4f:5b:42:63:7e:
         bc:e6:f5:93:cd:ea:33:35:3e:54:29:f6:73:79:7f:57:bd:b0:
         54:17:c8:bf:91:ef:db:a8:27:63:40:8e:43:ff:c2:d9:a8:2c:
         0b:11:a6:b5:78:98:e9:77:a7:e4:ea:83:8e:62:d9:4e:e1:a2:
         2a:68:23:23:a1:7b:a6:d3:0d:07:99:a2:13:17:d3:d2:d6:88:
         82:99:84:51:02:1b:3c:01:95:57:40:d9:5c:ec:4a:ee:bd:6d:
         4d:cf:23:15:7d:71:58:3b:24:af:5d:70:94:ec:35:cd:b3:4d:
         09:77:28:ac:ec:08:ef:4c:7e:9d:d2:3d:f2:3f:6d:90:fe:a9:
         b7:eb:17:08:b7:3b:d7:a1:cf:36:a2:87:b3:43:19:ea:40:0f:
         0d:be:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 08:14:39 2025 by rpki-client