Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
File:                     EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json)
Hash identifier:          /O3apSeBJ8kCK66vlzO0XQv+DeLhXSPKyK9J/nRq6C0=
Subject key identifier:   80:04:63:3E:7C:45:97:45:76:BE:9D:A3:4E:D7:A6:76:10:C3:7B:DF
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       019E31F3A7A6CF1B117422E124B0B57361D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
Manifest number:          0FF9
Signing time:             Sat 16 May 2026 18:01:52 +0000
Manifest this update:     Sat 16 May 2026 18:01:52 +0000
Manifest next update:     Sun 17 May 2026 18:01:52 +0000
Files and hashes:         1: 00wZvtvNZQs4uAA915GadjEGBvg.roa (hash: 5K/ug2ekLcwiuUDWDLSSG2UzC7SzInoAiv/KlObpbv8=)
                          2: 7AEQejaf4ar8QzePBU1rEkR-Wyo.roa (hash: /mA72LTouIcC5DplrlI38tIsNw+vs1skW2C/I5sSpBw=)
                          3: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: 1rvJILbLHK46gJk+QIF+yZ4fXQQmNPqEo8xinKVw73I=)
                          4: MJP1d4e-dGP316pN4YKGXwBEB6A.roa (hash: 7LX7W8xSif8sjS3tismw58R9gQWQatJHTsKvQpRfAW8=)
                          5: WeB5kEbbCBZpop-fX4ON5gv82l8.roa (hash: lzVL6PB9mdFbq/OglmNYGRSYPmiN/i9hvgSO4OhUNo0=)
                          6: bP8QNxBQn0Bs2-Xfh-xasmS6LHk.roa (hash: q+uzlbwPJbxOafdkuBf0forZDV06McFldCHvCFhOu8A=)
                          7: pFreL0ELwqUCEO8jgvaVDhmpTaE.roa (hash: j6gPD8Urcnyljz4W/n0fYekDNBzyuam4N75FRs+GRu4=)
                          8: q448fa7_znU_mFgRxcDcgN4477g.roa (hash: B5NQG+C4rJ08vWE97izdeALjZxDvsgfYoMhiTTd/XKk=)
                          9: rdpjVEDei7xeZFN28ZYbPl20GyI.roa (hash: T3H8QzztcCCMvYzNKiDtuOviwtvx2+/XKBlvRE/lf5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:a7:a6:cf:1b:11:74:22:e1:24:b0:b5:73:61:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: May 16 18:01:52 2026 GMT
            Not After : May 17 18:01:52 2026 GMT
        Subject: CN=8004633e7c45974576be9da34ed7a67610c37bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:20:13:bf:10:0d:20:13:06:aa:6c:2c:15:c6:
                    86:27:9d:67:6a:85:13:4e:27:ed:dd:2f:ad:6a:cd:
                    9f:7d:19:f0:c2:e2:4f:e7:69:0a:fa:e2:a8:d3:33:
                    00:02:9d:13:d6:1c:df:2a:c7:5e:b5:4b:b0:91:46:
                    f7:a3:e3:be:92:53:6f:ec:4d:53:be:b7:d5:e6:92:
                    b8:7f:3f:95:ad:91:84:1e:32:64:1b:25:4f:e6:e6:
                    01:91:df:ea:81:1b:df:f0:ac:3f:d0:f3:cf:35:44:
                    45:4b:2b:54:4f:28:33:89:85:35:b8:2f:e3:98:1a:
                    12:63:17:09:46:00:16:60:c4:56:3c:72:30:1e:63:
                    f1:60:e1:22:8c:41:eb:4c:6d:07:23:b2:03:df:be:
                    9c:75:66:19:91:87:28:91:dd:b0:20:33:cc:d8:60:
                    64:ad:cc:4f:82:4d:73:90:4d:1b:33:c3:8b:38:42:
                    66:31:ce:6d:22:94:e4:a6:af:4a:3b:de:d4:45:04:
                    c8:8a:2e:86:2c:37:5f:1a:2b:d1:b1:68:05:e8:eb:
                    66:f9:95:b1:62:79:1a:44:88:4b:42:a3:b2:e3:82:
                    bf:de:df:93:e3:f6:60:9c:68:26:11:a0:94:4b:80:
                    10:c6:bb:7f:6c:b2:b5:e5:d9:c5:41:89:fe:51:81:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:04:63:3E:7C:45:97:45:76:BE:9D:A3:4E:D7:A6:76:10:C3:7B:DF
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:7f:5a:b7:1c:e3:f6:6c:67:29:c6:d2:16:f1:00:43:72:
         2c:ae:b2:9b:e2:66:78:ea:e3:60:aa:74:0c:d2:55:51:b0:62:
         cb:4f:27:a1:e9:be:a3:6f:21:0a:86:16:be:df:81:58:f5:c6:
         4e:a6:84:95:96:f3:d5:40:2f:e3:d7:6c:51:84:f2:64:4f:5c:
         3f:28:cc:47:f3:ff:06:47:a0:aa:3c:e4:78:e4:e6:fe:8c:09:
         bf:07:f6:18:2f:c5:71:1e:ad:77:e2:f8:12:4a:70:da:77:5a:
         91:73:1a:a7:3c:c4:16:8e:67:77:21:87:24:78:23:1f:46:b0:
         82:49:44:6f:2f:f2:47:4b:b5:4d:34:be:0f:f2:5b:92:82:a5:
         c7:05:57:61:64:39:4f:29:d6:5f:2a:3b:d6:60:a8:cd:a8:90:
         63:2a:94:09:8f:ec:ee:05:d4:92:52:32:4e:9d:a5:85:35:f3:
         37:89:b6:0b:55:52:04:c7:ef:da:09:af:57:5e:87:61:cb:8a:
         93:cb:50:f7:09:28:e0:00:e1:4e:c5:26:c6:16:8a:64:f0:98:
         f8:66:0c:df:02:be:f9:d1:22:84:95:2a:cf:c2:79:3b:eb:36:
         96:7f:77:94:d0:10:6f:05:d4:2d:66:45:a8:b6:3f:c7:99:e8:
         03:f2:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:28:03 2026 by rpki-client