Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
File:                     EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json)
Hash identifier:          +0slEYkO44BYpm6pMzLgToQ3A8NTWNKlE94NSO2Hu/Q=
Subject key identifier:   33:8C:05:59:DB:24:2F:6F:C4:2F:DA:B7:27:7E:9F:94:84:2F:65:18
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       019D38D2D69D053C83AAF76FE89B08110FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
Manifest number:          0F78
Signing time:             Sun 29 Mar 2026 09:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:34 +0000
Files and hashes:         1: 00wZvtvNZQs4uAA915GadjEGBvg.roa (hash: 5K/ug2ekLcwiuUDWDLSSG2UzC7SzInoAiv/KlObpbv8=)
                          2: 7AEQejaf4ar8QzePBU1rEkR-Wyo.roa (hash: /mA72LTouIcC5DplrlI38tIsNw+vs1skW2C/I5sSpBw=)
                          3: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: oY8gJRu6E5hJhsOdHkOvTn9kGhC522V0Rd0/9FdGo58=)
                          4: MJP1d4e-dGP316pN4YKGXwBEB6A.roa (hash: 7LX7W8xSif8sjS3tismw58R9gQWQatJHTsKvQpRfAW8=)
                          5: WeB5kEbbCBZpop-fX4ON5gv82l8.roa (hash: lzVL6PB9mdFbq/OglmNYGRSYPmiN/i9hvgSO4OhUNo0=)
                          6: bP8QNxBQn0Bs2-Xfh-xasmS6LHk.roa (hash: q+uzlbwPJbxOafdkuBf0forZDV06McFldCHvCFhOu8A=)
                          7: pFreL0ELwqUCEO8jgvaVDhmpTaE.roa (hash: j6gPD8Urcnyljz4W/n0fYekDNBzyuam4N75FRs+GRu4=)
                          8: q448fa7_znU_mFgRxcDcgN4477g.roa (hash: B5NQG+C4rJ08vWE97izdeALjZxDvsgfYoMhiTTd/XKk=)
                          9: rdpjVEDei7xeZFN28ZYbPl20GyI.roa (hash: T3H8QzztcCCMvYzNKiDtuOviwtvx2+/XKBlvRE/lf5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:d6:9d:05:3c:83:aa:f7:6f:e8:9b:08:11:0f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Mar 29 09:00:34 2026 GMT
            Not After : Mar 30 09:00:34 2026 GMT
        Subject: CN=338c0559db242f6fc42fdab7277e9f94842f6518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:d0:70:12:b9:52:3e:a4:fa:a1:dc:a4:82:
                    b7:a0:82:8d:8a:46:99:d0:f5:53:76:00:5f:a5:57:
                    f4:38:6f:78:d1:0d:af:76:8c:39:98:1c:0d:7f:f5:
                    14:4d:2d:6c:cf:18:ca:7e:37:60:ae:85:82:22:99:
                    c3:44:a0:54:0b:51:80:9e:db:16:c5:21:e6:5f:7b:
                    e5:1e:56:e4:ef:c7:ee:0f:e3:5a:62:36:88:cb:6e:
                    8a:0c:48:b9:be:f4:32:34:15:39:93:d6:ef:2f:f0:
                    ca:76:89:00:76:a6:93:02:35:80:42:13:82:d2:07:
                    94:94:fc:23:5e:a4:a0:e6:94:f8:68:51:f2:76:b9:
                    be:8a:4d:47:67:55:df:4f:42:c8:6f:f1:d5:46:d5:
                    b0:fa:34:77:c5:a6:c1:9e:12:26:ae:9b:94:e2:84:
                    6f:06:61:d2:48:55:57:03:35:0e:a3:ba:0d:08:70:
                    b3:e7:18:98:a0:39:e3:22:bc:00:3a:8c:45:7b:eb:
                    e9:9e:4d:e0:33:4c:d6:72:ec:ed:13:dd:ea:b6:f7:
                    ae:10:9f:5c:fe:85:08:f7:78:29:18:7d:98:ee:d8:
                    39:fe:19:3d:b0:f3:30:af:e0:d5:5a:b1:ba:e9:7c:
                    ac:e2:ff:17:8d:70:4e:e3:7d:93:fc:52:cd:5b:f4:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8C:05:59:DB:24:2F:6F:C4:2F:DA:B7:27:7E:9F:94:84:2F:65:18
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:76:4f:72:b1:10:c4:44:c2:e2:dd:47:f9:f2:18:97:4d:
         5c:69:0b:a7:98:ec:50:e9:5f:19:2c:3c:7a:9c:dc:a0:da:e5:
         a8:97:6c:2b:a3:f2:6d:c9:2a:04:aa:12:2f:a5:3a:d6:4c:86:
         ed:7a:c8:7c:c6:04:cc:0b:26:22:36:a1:1b:2e:98:be:3a:5e:
         1e:7f:46:2b:6b:f4:5b:8b:c2:d3:d8:1d:8a:f1:f6:31:0d:26:
         3d:37:f6:ea:94:19:43:27:47:1f:65:f9:cb:e6:b8:04:58:d8:
         ee:f1:35:a8:be:5d:b4:05:07:93:2b:74:3d:17:b4:9e:82:2c:
         54:19:b4:5a:12:7c:61:ad:d6:de:c4:5d:98:78:1d:b3:86:8f:
         e8:e9:0e:20:96:8d:24:c9:65:e7:8f:f5:84:c7:86:1e:65:9e:
         d8:bd:b9:09:96:44:ef:60:36:cb:ee:56:14:e2:b0:8c:50:56:
         dd:ec:fc:c8:ec:3d:59:d8:9b:88:25:97:b9:ed:33:0c:41:bd:
         61:05:6e:c1:e4:47:13:21:20:d4:0f:59:d5:74:6b:36:7f:ae:
         40:a3:40:7d:29:35:95:07:63:66:25:82:b4:a6:14:1f:d5:42:
         f3:84:6d:f2:d7:28:b0:57:3c:7b:64:d9:5f:b5:a8:20:8b:0c:
         e6:ff:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:56 2026 by rpki-client