Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
File:                     eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft (raw, json)
Hash identifier:          67bB2zLUeKPzUj/If14rHf3/+C1VNnGndDTqUo+PK04=
Subject key identifier:   9A:65:6A:31:36:CA:02:33:77:2B:3A:B6:35:21:EE:EA:28:E6:E2:90
Authority key identifier: 78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
Certificate issuer:       /CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Certificate serial:       019DCCE1F1C1C82809E5B5AA33511C103912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
Manifest number:          09A0
Signing time:             Mon 27 Apr 2026 03:00:52 +0000
Manifest this update:     Mon 27 Apr 2026 03:00:52 +0000
Manifest next update:     Tue 28 Apr 2026 03:00:52 +0000
Files and hashes:         1: eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl (hash: 5/httfsk6swbwlBk6PUBQPSs+kl+ONNN73QFlwe9iFY=)
                          2: hJNgDCDdIASqdPzVGFaSQ7mqw6Y.roa (hash: 0uMjJLsB/QfKv6p98Olbel7xjcI0shnDhzuCW+Dr3qY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:e1:f1:c1:c8:28:09:e5:b5:aa:33:51:1c:10:39:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c580769d521c89cc797ff699cacf0ba43da9bf
        Validity
            Not Before: Apr 27 03:00:52 2026 GMT
            Not After : Apr 28 03:00:52 2026 GMT
        Subject: CN=9a656a3136ca0233772b3ab63521eeea28e6e290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:61:6e:8a:9b:ab:de:6b:c6:e2:06:31:f4:
                    33:52:44:8d:a8:f4:14:f3:2c:35:a9:4d:1a:20:ae:
                    ec:b9:f5:4a:c5:1a:78:8e:fc:a1:d9:43:3b:f3:86:
                    80:3b:4f:dd:fc:73:3d:5e:4f:13:2b:7a:e3:c1:b2:
                    80:90:b6:70:01:02:ca:7f:08:19:e9:91:05:4f:5a:
                    68:36:cf:a6:ce:b6:09:8a:16:fc:3d:da:50:2e:45:
                    10:79:18:d6:dd:55:50:0d:d4:ba:38:57:d0:3e:77:
                    3d:10:29:98:83:7c:57:3b:30:7f:41:92:aa:03:5e:
                    ed:bc:a0:9a:1f:2c:46:d2:34:48:f3:21:4f:c4:d7:
                    1f:0e:66:d9:f8:81:29:fc:bb:23:c3:69:9a:06:c6:
                    6c:d2:14:b1:12:e9:6c:e8:7f:97:fa:ba:ae:74:1a:
                    e8:a0:31:af:c1:b6:8a:ee:af:2c:fb:17:e4:cf:78:
                    0c:19:4f:76:2c:65:b2:cf:5d:44:2d:85:76:b6:2e:
                    c2:14:04:b7:57:45:44:64:95:c3:a3:12:f7:2a:ba:
                    94:11:7d:e0:d7:55:c5:9d:fa:f5:70:43:1b:6a:4b:
                    31:78:5f:c1:c1:a4:4e:02:29:ac:25:a5:d0:d4:4d:
                    f7:83:ea:62:ac:f4:c4:6a:05:fb:17:88:24:76:1c:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:6A:31:36:CA:02:33:77:2B:3A:B6:35:21:EE:EA:28:E6:E2:90
            X509v3 Authority Key Identifier:
                keyid:78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:96:f3:04:69:36:10:b2:96:36:a6:61:d2:1a:0f:d6:e0:a9:
         d1:b5:8c:38:7c:14:b1:7d:98:30:ef:f7:55:e5:b3:90:d6:25:
         c1:40:5d:27:a5:ae:21:3c:18:7e:a5:62:9b:93:2f:61:30:d1:
         7c:ae:f4:0a:51:16:56:0d:42:ba:77:41:1c:25:50:73:69:6e:
         de:4f:a9:d4:f3:7e:0e:30:5d:d4:ff:61:23:9f:74:82:8d:eb:
         93:27:d6:05:b7:c6:e9:40:30:dd:f8:5f:33:82:26:f5:3c:ea:
         1e:29:d0:10:4c:b7:f5:6a:89:8d:95:30:40:96:02:4d:9f:a9:
         a2:81:f3:f8:e9:63:14:1d:75:dd:16:26:54:46:b3:cc:c9:10:
         8e:fb:00:b1:51:b4:ef:c5:c7:03:8f:52:85:d5:70:0f:73:a1:
         1e:55:96:0e:de:7a:14:00:d0:bd:07:22:cb:da:40:73:71:9a:
         84:89:f0:bb:42:ee:29:11:e4:c8:b0:64:9c:b6:70:91:d6:f2:
         76:a3:33:bf:5a:dc:95:20:91:54:78:7c:18:c8:e5:bb:dd:9a:
         5a:81:0b:1d:78:13:8e:29:9a:59:21:94:ce:f4:ef:48:21:c3:
         8d:02:2d:4d:5b:32:74:81:3b:fe:b0:6d:ed:7a:74:d1:98:30:
         90:5c:c1:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3M4fHByCgJ5bWqM1EcEDkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzU4MDc2OWQ1MjFjODljYzc5N2ZmNjk5Y2FjZjBiYTQz
ZGE5YmYwHhcNMjYwNDI3MDMwMDUyWhcNMjYwNDI4MDMwMDUyWjAzMTEwLwYDVQQD
Eyg5YTY1NmEzMTM2Y2EwMjMzNzcyYjNhYjYzNTIxZWVlYTI4ZTZlMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztRhboqbq95rxuIGMfQzUkSNqPQU
8yw1qU0aIK7sufVKxRp4jvyh2UM784aAO0/d/HM9Xk8TK3rjwbKAkLZwAQLKfwgZ
6ZEFT1poNs+mzrYJihb8PdpQLkUQeRjW3VVQDdS6OFfQPnc9ECmYg3xXOzB/QZKq
A17tvKCaHyxG0jRI8yFPxNcfDmbZ+IEp/Lsjw2maBsZs0hSxEuls6H+X+rqudBro
oDGvwbaK7q8s+xfkz3gMGU92LGWyz11ELYV2ti7CFAS3V0VEZJXDoxL3KrqUEX3g
11XFnfr1cEMbaksxeF/BwaROAimsJaXQ1E33g+pirPTEagX7F4gkdhyogQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJplajE2ygIzdys6tjUh7uoo5uKQMB8GA1UdIwQY
MBaAFHjFgHadUhyJzHl/9pnKzwukPam/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1XQWRwMVNISW5NZVhfMm1jclBDNlE5cWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85MWUxNTAtZDdiNS00MTNhLTgzZjct
N2YzZWI4ZjQ4OTVmLzEvZU1XQWRwMVNISW5NZVhfMm1jclBDNlE5cWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi85MWUxNTAtZDdiNS00MTNhLTgzZjctN2YzZWI4ZjQ4OTVm
LzEvZU1XQWRwMVNISW5NZVhfMm1jclBDNlE5cWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5bzBGk2
ELKWNqZh0hoP1uCp0bWMOHwUsX2YMO/3VeWzkNYlwUBdJ6WuITwYfqVim5MvYTDR
fK70ClEWVg1CundBHCVQc2lu3k+p1PN+DjBd1P9hI590go3rkyfWBbfG6UAw3fhf
M4Im9TzqHinQEEy39WqJjZUwQJYCTZ+pooHz+OljFB113RYmVEazzMkQjvsAsVG0
78XHA49ShdVwD3OhHlWWDt56FADQvQciy9pAc3GahInwu0LuKRHkyLBknLZwkdby
dqMzv1rclSCRVHh8GMjlu92aWoELHXgTjimaWSGUzvTvSCHDjQItTVsydIE7/rBt
7Xp00ZgwkFzBXg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:53:29 2026 by rpki-client