Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
File:                     EMjta5UtlCnjU08U2TJlmQ8cp84.mft (raw, json)
Hash identifier:          CWHSpaRMxZ8SGjhlpDxBp4nBE8WTKDOGE1nlyP2CvHw=
Subject key identifier:   98:4B:E5:F1:EC:3F:9C:9A:A0:78:9D:F4:C0:74:50:89:94:E3:72:AB
Authority key identifier: 10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
Certificate issuer:       /CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Certificate serial:       019FA0E056553E7FE981DFDCA0FCCB7B194B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
Manifest number:          01E6
Signing time:             Mon 27 Jul 2026 00:01:24 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:24 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:24 +0000
Files and hashes:         1: 83u4srH8ACpTsU951VXyIZw_p80.roa (hash: q/HJzvlHBUwM+2hxkEl4HK2p/wjtVm5tBQqZRN97Q3I=)
                          2: EMjta5UtlCnjU08U2TJlmQ8cp84.crl (hash: /yJC+HOM+O5d5p/4y48ZUhfcrpx+YV/psKKMJyqT0PY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:56:55:3e:7f:e9:81:df:dc:a0:fc:cb:7b:19:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
        Validity
            Not Before: Jul 27 00:01:24 2026 GMT
            Not After : Jul 28 00:01:24 2026 GMT
        Subject: CN=984be5f1ec3f9c9aa0789df4c074508994e372ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:27:d2:9c:47:8e:22:82:b3:e1:49:d1:31:
                    2b:c1:91:4b:e0:f2:24:5c:ca:50:45:59:55:97:a9:
                    02:e5:5f:31:f7:4a:dd:34:48:43:30:5a:96:07:aa:
                    48:78:eb:0c:c5:d8:56:2d:f4:65:53:cc:4a:22:c1:
                    1b:56:4e:a9:5b:cc:4c:1e:59:c0:18:5a:86:82:3a:
                    15:b8:c8:47:5d:17:f8:60:d8:47:58:66:67:5a:45:
                    5a:01:8c:c4:03:4e:4d:17:d8:38:0a:99:28:d9:03:
                    a7:b3:a7:06:95:86:d0:3a:54:1b:b1:f3:87:47:aa:
                    a4:1a:f5:91:e0:91:91:9f:b7:5d:43:bf:03:3a:d6:
                    5b:90:04:9c:2f:84:50:bb:3c:c5:34:ec:90:a5:2d:
                    d9:b2:20:5d:f9:c0:5e:dd:20:f1:61:4f:53:29:3a:
                    69:59:be:bb:6b:00:38:19:71:e6:a8:c7:86:d6:49:
                    99:6b:40:91:81:39:47:ac:1f:42:81:38:d6:c4:dd:
                    ee:1a:c8:63:d4:34:32:ed:91:6a:0c:01:73:1a:02:
                    cc:20:fa:b2:79:fe:ce:40:f8:6e:37:2f:00:e8:01:
                    d0:16:a8:bf:72:e6:d6:63:07:9d:91:e8:d6:88:9f:
                    43:12:69:75:a1:85:95:46:c3:56:a1:0a:03:11:74:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4B:E5:F1:EC:3F:9C:9A:A0:78:9D:F4:C0:74:50:89:94:E3:72:AB
            X509v3 Authority Key Identifier:
                keyid:10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:51:d1:29:96:f4:59:48:60:26:0a:7d:a1:88:7e:7b:33:
         d4:ce:f5:17:61:74:b6:22:cc:57:e2:88:03:53:a7:24:0b:64:
         5b:6d:cb:26:62:2d:ec:2c:f6:c8:5f:38:71:ab:a7:c9:c6:55:
         54:cd:fe:8c:c8:e6:d6:c3:23:c8:79:ce:89:f0:0f:ee:f5:10:
         ae:24:d6:4f:93:29:db:e5:e7:ce:08:4f:40:08:83:ed:dc:46:
         2f:45:6b:2d:cc:3f:d8:72:92:b7:9f:41:d3:eb:39:53:4f:6c:
         0c:9d:1b:ad:b1:79:44:d0:c1:d7:dd:ac:8a:7f:93:51:f2:a3:
         07:99:4a:53:43:50:1f:62:b7:73:d5:98:ab:95:f3:a5:34:95:
         a3:20:af:ee:32:16:b3:ba:bc:4d:4b:59:c1:1f:16:5b:22:a6:
         e7:27:aa:f6:71:6c:c7:58:8f:eb:cb:59:42:c6:46:f4:a6:aa:
         1d:5e:c8:fc:67:69:68:98:ae:70:61:04:6f:57:a4:f3:77:dc:
         58:be:f9:14:cf:de:75:19:1a:c8:5a:a5:8f:c2:ee:93:de:55:
         da:b7:75:3f:ff:e5:de:38:1f:bd:60:0f:65:17:31:7a:60:db:
         9d:3b:d5:d5:46:d3:66:a7:37:c5:7d:50:29:a4:d4:2c:d1:4b:
         ec:be:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:20 2026 by rpki-client