Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
File:                     EMjta5UtlCnjU08U2TJlmQ8cp84.mft (raw, json)
Hash identifier:          pM8MzWJOZYskpM2NYgMwc/BtEUV1HJXeMB5habJXa6w=
Subject key identifier:   6A:50:A7:6E:21:C1:0F:09:29:EF:98:B5:C4:36:1E:18:34:C5:AE:16
Authority key identifier: 10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
Certificate issuer:       /CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Certificate serial:       019DCD86AE6FD42B3BDA8AE7CAC1DFFF7343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
Manifest number:          F4
Signing time:             Mon 27 Apr 2026 06:00:48 +0000
Manifest this update:     Mon 27 Apr 2026 06:00:48 +0000
Manifest next update:     Tue 28 Apr 2026 06:00:48 +0000
Files and hashes:         1: 83u4srH8ACpTsU951VXyIZw_p80.roa (hash: q/HJzvlHBUwM+2hxkEl4HK2p/wjtVm5tBQqZRN97Q3I=)
                          2: EMjta5UtlCnjU08U2TJlmQ8cp84.crl (hash: evT7UuJ9XiqQwUQd76SnDdyiAuh1XXnFo3k7BXsv3vE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:86:ae:6f:d4:2b:3b:da:8a:e7:ca:c1:df:ff:73:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
        Validity
            Not Before: Apr 27 06:00:48 2026 GMT
            Not After : Apr 28 06:00:48 2026 GMT
        Subject: CN=6a50a76e21c10f0929ef98b5c4361e1834c5ae16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5c:09:d4:4f:3d:56:f1:54:37:26:9f:57:af:
                    a0:82:19:b8:50:d8:cd:c0:82:8e:f4:cd:72:1d:a3:
                    a2:b2:f6:cc:2e:c9:74:d9:56:10:d2:f0:ca:9b:36:
                    ce:b2:9b:31:9c:48:dc:19:1e:dc:db:3f:ff:56:2c:
                    c8:ee:80:90:d8:7b:97:a4:4c:93:41:f3:86:36:22:
                    00:7d:66:05:1a:29:42:ef:4b:c2:2a:c9:1b:7a:d2:
                    ed:bf:19:dd:38:f5:59:b9:1c:9d:65:17:0b:aa:bf:
                    2a:97:16:f6:59:c0:9d:82:ce:ed:72:72:20:46:da:
                    d6:9b:60:49:d4:53:37:9a:67:33:da:8d:87:2e:75:
                    db:e7:e8:da:f4:47:ee:f8:21:f7:e9:74:bf:c8:84:
                    1f:e3:07:78:f8:c4:b7:2b:26:00:1f:32:50:56:4d:
                    9e:73:87:7c:b6:28:aa:b1:8a:f6:3c:ef:63:a8:b6:
                    64:ca:2f:0f:25:7f:ba:12:3b:90:52:6f:b1:b0:06:
                    b3:59:04:99:88:26:bc:4c:90:b6:52:6b:73:bf:2f:
                    7c:df:1e:9b:0c:0a:24:4a:b1:d8:40:86:fc:57:b2:
                    26:c4:a2:2a:ba:83:6c:6b:f0:59:e0:74:ce:3c:b1:
                    92:8d:e7:c4:d8:bf:5f:ab:82:e3:0a:c3:1e:8f:09:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:50:A7:6E:21:C1:0F:09:29:EF:98:B5:C4:36:1E:18:34:C5:AE:16
            X509v3 Authority Key Identifier:
                keyid:10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:77:5a:2c:d4:74:a2:8c:65:51:93:a2:79:63:01:3b:59:1a:
         1b:f7:d1:ab:d9:c3:6e:bc:2a:18:73:37:f4:a9:03:6c:da:c1:
         ce:0e:05:9f:ac:7b:46:f4:9c:42:44:33:5d:e4:58:68:11:09:
         78:48:38:96:47:b5:96:f5:47:50:c6:8f:58:95:cf:b9:ff:2f:
         26:55:38:bb:fb:34:b7:56:70:8c:27:7e:98:8f:49:3f:1c:77:
         ab:4f:47:f3:cc:93:52:22:b4:35:88:9f:a9:7b:ca:bc:5b:b7:
         5c:27:52:b5:e8:60:39:83:79:fa:43:b1:f9:68:ed:ec:1d:9b:
         be:eb:a2:5f:b2:52:f1:94:05:c5:71:8b:08:6b:8d:0b:65:8e:
         ec:29:7b:a7:83:f6:f1:83:ec:d7:8b:6b:60:c4:ff:59:8f:6b:
         5c:eb:00:a0:a4:de:c0:f5:4b:db:43:59:9d:0a:04:63:a6:86:
         0b:cd:a8:b0:6e:e5:51:09:4f:c3:93:d1:fd:70:c1:cf:d6:04:
         9c:cd:e8:0d:10:d6:68:81:13:ed:0e:37:b4:f7:a5:ea:49:4e:
         d0:82:fc:98:2f:83:5d:74:f1:5f:e7:53:82:2c:e7:d9:64:34:
         58:15:b6:12:be:a2:19:5d:5d:40:46:69:d6:61:a2:79:6f:d1:
         ad:73:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:28 2026 by rpki-client