Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
File:                     EMjta5UtlCnjU08U2TJlmQ8cp84.mft (raw, json)
Hash identifier:          ZDxl83MZEXGGBq41Ca6duO2pJ48oOnBQu8vw1wHtb6g=
Subject key identifier:   08:E1:84:91:01:F7:AD:90:C8:9A:3B:9B:E4:7F:A5:F4:E9:FA:D9:56
Authority key identifier: 10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
Certificate issuer:       /CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Certificate serial:       019EB733F5292B355D0E03B220D766003FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
Manifest number:          016D
Signing time:             Thu 11 Jun 2026 15:01:36 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:36 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:36 +0000
Files and hashes:         1: 83u4srH8ACpTsU951VXyIZw_p80.roa (hash: q/HJzvlHBUwM+2hxkEl4HK2p/wjtVm5tBQqZRN97Q3I=)
                          2: EMjta5UtlCnjU08U2TJlmQ8cp84.crl (hash: FW3RyM7OmCl5mI4XCP6xyUQcSFc9URyudnEynkMVJec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:f5:29:2b:35:5d:0e:03:b2:20:d7:66:00:3f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
        Validity
            Not Before: Jun 11 15:01:36 2026 GMT
            Not After : Jun 12 15:01:36 2026 GMT
        Subject: CN=08e1849101f7ad90c89a3b9be47fa5f4e9fad956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:a2:96:bc:90:17:26:69:76:51:2c:42:d7:
                    3c:fd:5a:75:a4:cd:48:e4:72:67:99:73:4a:84:7a:
                    25:98:9c:d7:35:db:e4:8e:b1:85:0b:56:91:ef:ea:
                    d7:ae:c9:80:d7:e7:01:63:12:14:19:6c:a9:d7:b4:
                    8f:24:cf:92:e5:3c:9a:b4:d6:05:ec:82:0d:05:c6:
                    c8:9d:d0:7d:c9:bc:5f:b2:58:9f:7a:a0:d1:57:1b:
                    1a:0d:c8:05:59:b8:32:3f:06:10:46:4e:f9:c7:1c:
                    8b:fe:50:98:ca:4c:b6:7a:5c:c0:b9:c4:4b:3e:71:
                    0b:14:be:a9:c6:f6:e3:a7:49:2c:23:19:c4:4f:4f:
                    de:9c:d7:c2:a8:9b:3e:b9:bb:d1:e9:d1:54:f5:57:
                    f9:eb:3b:e2:8b:a3:dc:76:90:af:64:49:09:94:fd:
                    4f:b1:2a:c4:e5:0b:b4:d6:f7:fc:a9:d8:ad:47:1d:
                    07:50:3e:14:d6:f2:35:d1:d1:76:b7:83:c8:f9:a0:
                    59:3f:90:ba:08:10:bf:40:56:f6:19:52:c1:c5:5e:
                    88:0f:f6:e2:0e:07:3b:9f:25:62:ae:86:2b:5b:de:
                    c4:37:82:45:64:e0:23:5c:3a:e2:c5:9b:e1:b0:7f:
                    c3:58:e5:5b:c8:88:e0:76:c6:1c:ee:7d:be:10:bf:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E1:84:91:01:F7:AD:90:C8:9A:3B:9B:E4:7F:A5:F4:E9:FA:D9:56
            X509v3 Authority Key Identifier:
                keyid:10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b6:7a:6d:33:eb:66:63:20:53:42:8d:d2:0c:48:75:4f:18:
         2f:95:e8:96:15:f4:0f:8f:75:7a:51:06:16:3e:5a:39:e7:a1:
         9b:9e:fe:c0:2a:cb:04:54:a5:3b:79:46:ea:bb:8f:d6:9d:16:
         1d:25:89:d9:f4:14:91:e6:7e:64:16:11:bc:37:53:d8:72:35:
         f7:21:e8:bc:08:f9:77:7e:32:25:75:ad:20:9e:93:bd:93:59:
         d4:91:ef:69:08:cd:85:61:59:3d:a1:b9:00:a6:53:aa:e8:86:
         54:6d:29:82:d7:b0:ca:27:bf:44:7a:6a:5d:74:f6:25:17:66:
         72:23:5c:1b:a3:c6:a2:26:dd:5a:90:3b:7f:6e:08:2b:bc:78:
         92:53:01:08:16:dc:d5:02:09:9c:f8:d0:c8:be:b1:cc:b1:38:
         37:3a:3b:6e:ef:48:43:fa:07:c0:f7:e0:0d:7b:69:12:f6:ba:
         e9:0c:25:80:5a:38:40:0c:87:8a:74:3e:2d:64:43:ae:bf:c5:
         f9:d7:56:29:2c:9f:0a:f2:3b:a9:42:38:bc:92:c3:4f:3a:73:
         59:8c:08:32:2c:46:43:c5:85:8d:46:af:87:7a:b0:e3:3b:93:
         38:e0:74:f9:70:bd:a0:3a:c5:ef:8c:a8:57:07:72:b1:bc:20:
         ae:0c:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:48 2026 by rpki-client