Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File:                     EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier:          pFa8mE60embbARWHH6ED9iGYZixO6RsQBTAaPXXoZe0=
Subject key identifier:   B9:4B:A3:2C:4C:F2:37:69:86:F5:18:CD:13:25:77:B9:15:8B:E9:6F
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer:       /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial:       019CE290E288EE23E9DD58C3097AF456C4BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number:          0847
Signing time:             Thu 12 Mar 2026 15:01:11 +0000
Manifest this update:     Thu 12 Mar 2026 15:01:11 +0000
Manifest next update:     Fri 13 Mar 2026 15:01:11 +0000
Files and hashes:         1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: Kx53+2qzJFLe1FrN3cEyxy2TZSIB4Y+YJSojo8gIBbc=)
                          2: gu3gbqmYc42MBrN2tTrBxhokk-w.roa (hash: TMIVSIIzGJ/WU4Qk37G7HBf3N3RPvDoJEdio74aPoFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:90:e2:88:ee:23:e9:dd:58:c3:09:7a:f4:56:c4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
        Validity
            Not Before: Mar 12 15:01:11 2026 GMT
            Not After : Mar 13 15:01:11 2026 GMT
        Subject: CN=b94ba32c4cf2376986f518cd132577b9158be96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:c6:9c:c8:3b:43:be:3a:cd:07:0f:0c:e6:
                    8c:cf:ad:e4:30:49:19:26:38:22:62:ec:6a:50:85:
                    50:00:3c:56:eb:ac:1a:b5:5d:d6:68:ad:ee:df:ef:
                    38:65:e2:b7:fa:78:bc:1a:a3:07:92:21:f8:1b:ab:
                    49:7c:bc:d5:7e:dd:d7:62:4d:05:06:c4:f3:29:eb:
                    fb:84:79:05:fb:c0:79:11:48:54:f6:a8:19:18:60:
                    18:54:8a:b8:3c:41:2b:92:7a:4b:f0:17:98:68:c6:
                    9f:d2:2a:c8:ba:d1:2d:48:c3:80:23:6f:fa:11:f1:
                    1f:36:7e:f4:e3:f9:83:78:cf:7a:b4:95:24:03:ad:
                    1d:88:da:e1:39:36:d3:4a:e7:ec:fe:ea:a9:3f:b6:
                    75:ef:d7:bb:68:6d:04:04:34:98:9d:d1:40:06:5f:
                    a8:43:55:32:07:35:34:1d:6d:13:69:23:04:e8:e9:
                    e4:ae:1b:e7:70:a9:00:df:01:0c:6a:85:27:de:0c:
                    93:4a:01:8c:b1:1e:df:4b:01:66:6d:3c:eb:e3:a6:
                    78:28:f6:da:43:99:42:e0:aa:d1:8a:24:a7:c4:7f:
                    e8:50:86:85:6d:1e:53:4a:d9:27:fa:b0:5c:13:a3:
                    99:29:9f:b5:a9:48:4b:3d:1c:e2:4b:a3:9a:5a:bd:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:A3:2C:4C:F2:37:69:86:F5:18:CD:13:25:77:B9:15:8B:E9:6F
            X509v3 Authority Key Identifier:
                keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:53:80:ef:42:81:96:5f:b9:0b:72:80:a1:af:67:47:2c:
         0b:f9:fb:a8:b5:aa:e5:42:16:34:d7:66:c5:7c:35:40:30:2b:
         9c:ac:0c:ec:58:09:06:66:88:91:c6:c5:5a:c2:98:30:f0:ec:
         1f:5a:cf:58:9a:fc:56:42:47:3f:a3:5f:f3:56:72:bf:aa:27:
         6d:d5:bd:b0:a7:f9:63:5e:6d:68:72:ef:73:0d:ca:ae:b9:f4:
         b6:21:43:71:02:36:38:07:98:08:fc:c4:b5:70:91:0a:33:22:
         86:22:0a:ee:b1:a4:4e:8e:11:e0:37:01:4a:55:35:aa:af:af:
         4d:47:50:97:6a:2b:dc:59:f8:62:54:44:8c:5c:c8:cb:8c:1a:
         51:f4:b3:40:f3:3d:d2:6b:fb:63:d8:a8:b7:14:6a:8f:13:79:
         7f:ac:fb:31:e3:e9:9e:fd:75:c7:65:a3:94:fa:16:86:c3:d0:
         a6:44:72:bb:aa:a2:a9:4f:63:a9:e3:d9:9f:18:e0:86:c2:c9:
         dc:c4:f1:d5:7b:58:26:1b:35:39:96:b7:cc:52:d3:08:db:e0:
         69:6c:75:48:e7:68:f5:21:2b:b9:f9:47:ed:36:a8:86:af:0d:
         dc:51:2e:3d:eb:4b:73:8a:f2:6b:36:80:60:cb:d4:bc:09:8d:
         2d:53:d1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:29 2026 by rpki-client