Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
File:                     eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft (raw, json)
Hash identifier:          ijitszyhEwi1aXwTu7xYJDkK6ixu+hdS2PK6xB+Hn1c=
Subject key identifier:   66:28:88:3F:2D:82:68:E1:94:CA:70:03:4D:BB:ED:0F:0D:4B:92:D2
Authority key identifier: 78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
Certificate issuer:       /CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Certificate serial:       01A0860A9D356E02502EDC8FBF1766F9AC6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
Manifest number:          0B09
Signing time:             Wed 09 Sep 2026 12:00:37 +0000
Manifest this update:     Wed 09 Sep 2026 12:00:37 +0000
Manifest next update:     Thu 10 Sep 2026 12:00:37 +0000
Files and hashes:         1: eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl (hash: Vl3D6xLydJORGRo5e/22S36c7K0Lk8TXRqShDa4BQwk=)
                          2: hJNgDCDdIASqdPzVGFaSQ7mqw6Y.roa (hash: 0uMjJLsB/QfKv6p98Olbel7xjcI0shnDhzuCW+Dr3qY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:86:0a:9d:35:6e:02:50:2e:dc:8f:bf:17:66:f9:ac:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c580769d521c89cc797ff699cacf0ba43da9bf
        Validity
            Not Before: Sep  9 12:00:37 2026 GMT
            Not After : Sep 10 12:00:37 2026 GMT
        Subject: CN=6628883f2d8268e194ca70034dbbed0f0d4b92d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:65:cd:a0:c0:d1:43:f4:61:4f:88:b0:1d:
                    bd:18:63:73:73:3a:50:ae:60:38:8d:56:9e:fd:1b:
                    32:24:27:dd:6c:e4:2c:ea:ba:d9:07:b6:8b:82:7a:
                    7c:84:6b:b0:e7:76:ce:d8:b3:f4:04:f2:94:b0:b0:
                    21:0b:0e:a9:15:fd:f1:ff:fe:f6:53:66:97:c0:e6:
                    6b:7e:89:0b:a0:cb:55:21:b1:d5:9c:06:1d:58:67:
                    ba:47:07:9e:0d:0c:42:a7:a4:8e:9b:1a:3e:ea:84:
                    68:8d:eb:d4:84:7b:b0:9c:b3:31:be:98:66:0c:a6:
                    09:71:73:e8:5e:8b:69:f8:b2:f1:3c:6f:6f:5c:cf:
                    cd:7f:84:b6:90:45:9f:37:6c:f8:1f:c0:da:2d:96:
                    a5:e9:d2:45:7c:a7:b6:18:c9:b1:6e:ec:51:aa:1d:
                    dd:29:56:62:1f:7e:e9:79:d5:e4:11:39:ba:51:72:
                    d2:c8:56:f5:7d:e1:5f:54:03:8e:f7:c7:fd:0e:b6:
                    cd:a6:41:1e:b1:97:ca:eb:86:3f:80:9c:13:8e:a0:
                    3c:da:82:a7:9c:db:7d:63:42:88:15:82:8a:7c:54:
                    3b:6e:59:6c:55:ef:1c:e4:f4:10:a1:62:d6:54:a7:
                    34:71:46:41:ec:a4:79:d1:34:2d:c0:35:43:70:bf:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:88:3F:2D:82:68:E1:94:CA:70:03:4D:BB:ED:0F:0D:4B:92:D2
            X509v3 Authority Key Identifier:
                keyid:78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5b:48:a0:e2:52:5d:4f:5b:6f:7a:bb:1e:8c:6d:24:0a:2c:
         4f:48:00:39:15:bf:98:55:50:55:e5:70:cb:db:e0:14:9a:21:
         06:16:94:f5:fd:5e:44:3a:de:77:ef:66:30:b1:15:bc:4c:67:
         ee:c8:dc:c5:36:fb:e3:93:79:3e:c0:b6:6e:89:62:39:e1:b5:
         68:31:41:0d:c7:b4:e7:74:f0:18:4f:41:34:f8:c8:a1:86:93:
         6f:f5:d9:3f:da:05:92:69:20:6d:b1:7c:14:3a:60:3d:1f:78:
         9d:96:82:da:da:26:3e:bd:60:7e:d4:bd:ff:94:9e:cb:83:72:
         40:3d:0a:31:2b:b3:37:77:17:08:86:ff:86:c1:d5:f4:ea:03:
         65:bf:fd:4f:bb:0c:36:bd:dc:1d:02:2e:40:03:bf:10:a5:08:
         f9:ae:fd:6d:7d:8f:0b:ee:a5:2e:ea:b0:f6:e6:97:8c:2e:51:
         c8:22:88:25:02:04:82:75:77:89:79:c7:b5:90:2c:2e:f1:09:
         fb:38:c3:a9:72:df:e4:83:0d:83:5d:01:2a:2f:78:8f:81:f9:
         d5:fa:d2:85:0f:19:76:56:ae:b9:72:c1:ef:da:80:f6:c9:98:
         30:27:0f:09:b7:76:97:f4:46:2f:8d:0d:86:94:6e:2b:ee:c7:
         36:8e:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:39:07 2026 by rpki-client