Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
File:                     EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft (raw, json)
Hash identifier:          2GynOXczTCWEg4dgfTQihO5crVWHU6IVhAoZM2xl1Po=
Subject key identifier:   B1:D0:8F:50:34:61:14:19:25:35:75:11:AA:28:1A:32:66:7E:88:E4
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Certificate issuer:       /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial:       01A13D4A2D53AA86E4B51506FDC256E19BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
Manifest number:          17B3
Signing time:             Thu 15 Oct 2026 02:00:33 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:33 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:33 +0000
Files and hashes:         1: 812tIMV53jlp_mtwsjSbsRazJqQ.roa (hash: 6QYF0zrVcUZALP+2d7MCwTRJgVkedt1wAbHv7uhslBQ=)
                          2: EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl (hash: R5I3HhA2XM5RNtzNGmKwY2FfLTpkfHCbJBnb/xw2Tfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:2d:53:aa:86:e4:b5:15:06:fd:c2:56:e1:9b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
        Validity
            Not Before: Oct 15 02:00:33 2026 GMT
            Not After : Oct 16 02:00:33 2026 GMT
        Subject: CN=b1d08f503461141925357511aa281a32667e88e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:e0:01:84:2c:db:68:62:f6:56:e7:3a:ef:
                    7d:94:94:db:39:6a:b6:c1:3e:1b:8e:11:39:fe:26:
                    26:13:34:26:77:31:ba:ba:7e:59:ce:b0:78:21:06:
                    ad:0c:92:99:0b:f3:ee:a8:f6:6e:27:0d:65:c2:ed:
                    93:b5:86:2e:a0:c3:d9:44:03:f4:e0:ae:20:46:7d:
                    54:99:94:c7:e4:c5:fb:26:d4:9d:06:03:97:28:86:
                    80:b3:09:46:32:6c:df:49:99:77:d3:9a:bb:8c:71:
                    7e:2c:32:de:66:ad:ff:0a:04:70:81:62:e4:d1:27:
                    51:c5:ca:b7:de:84:99:40:2b:35:b3:d2:39:0f:cb:
                    53:30:5e:58:62:40:7e:ae:d8:c5:3d:94:ee:76:1a:
                    69:cb:b8:59:4c:fb:17:f4:b2:8f:79:fc:ab:82:5a:
                    9d:4c:6c:3e:b5:f7:fd:4a:1f:49:53:84:13:08:e2:
                    6d:32:3f:9f:a5:7e:3b:02:79:f0:61:f3:3e:fa:0b:
                    00:23:48:ec:f4:bb:9a:47:0c:01:a9:fc:61:da:84:
                    6a:27:5d:72:d1:b9:3d:65:87:10:32:0a:29:fb:c8:
                    3e:55:1f:ab:a8:c4:e4:c1:bd:8e:af:44:c7:6c:9f:
                    f7:16:1d:a7:4f:1f:b9:db:b7:0c:eb:94:a9:5a:b9:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D0:8F:50:34:61:14:19:25:35:75:11:AA:28:1A:32:66:7E:88:E4
            X509v3 Authority Key Identifier:
                keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3f:2c:48:3d:65:70:08:88:9b:7c:ba:2b:d0:05:ec:ce:51:
         6c:ec:af:18:a7:e9:d9:6f:16:ae:9a:a1:bf:5b:8d:98:ac:e0:
         e4:1b:c3:ed:25:2b:14:f1:96:08:91:07:4c:ad:9f:89:7b:78:
         37:9b:4f:54:85:a4:c8:e6:5c:4f:6c:e9:22:e2:77:a0:51:2f:
         a5:9a:44:b4:96:5d:7f:36:96:c3:b4:0a:5d:76:0b:05:35:38:
         82:0f:89:50:16:6f:46:91:f1:a6:a4:94:6b:59:20:4f:fc:d6:
         75:89:26:e9:38:f7:6c:11:23:b8:05:e8:90:3b:af:11:22:5c:
         bd:d6:9c:ec:a6:ca:f9:8f:f3:54:57:5a:d1:63:48:2c:36:13:
         09:60:54:d8:fc:7d:0d:1f:d3:e8:49:07:14:ee:d6:7a:1d:dc:
         ca:53:11:33:db:d1:ae:06:46:5f:75:dc:d1:f8:a3:25:17:af:
         d1:42:98:8e:a5:fb:a9:4e:50:bf:1b:a3:ec:59:b8:65:7f:75:
         9f:d4:c3:6c:1b:cc:bd:60:fc:13:58:45:2c:82:74:6f:b4:ba:
         25:e9:4c:1d:dc:a2:f0:86:1a:51:93:ef:82:e9:c5:ca:68:55:
         42:7a:11:3f:50:9f:b3:e9:fc:1d:3f:e7:f0:88:b2:1e:bb:5b:
         cb:51:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:57:00 2026 by rpki-client