Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
File:                     EMTixWLflMzKm0ggghD9Fs-6kjU.mft (raw, json)
Hash identifier:          /pfNP2+hsNbVrOQk/QXzQRhaWlWTu5XZRz58QKEGfuE=
Subject key identifier:   87:8C:A6:53:A9:FF:97:1E:A3:D4:09:1A:96:AF:A5:2A:8D:FB:6F:CF
Authority key identifier: 10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
Certificate issuer:       /CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Certificate serial:       019FAA19F07C3E2E1CE93239B415D56E44CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
Manifest number:          19D0
Signing time:             Tue 28 Jul 2026 19:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:54 +0000
Files and hashes:         1: EMTixWLflMzKm0ggghD9Fs-6kjU.crl (hash: fK/fOXw9Nic87SGxJxxCs2dMC3mm0bLyvhfL3rJ9CK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:f0:7c:3e:2e:1c:e9:32:39:b4:15:d5:6e:44:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c4e2c562df94ccca9b48208210fd16cfba9235
        Validity
            Not Before: Jul 28 19:00:54 2026 GMT
            Not After : Jul 29 19:00:54 2026 GMT
        Subject: CN=878ca653a9ff971ea3d4091a96afa52a8dfb6fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:da:6e:06:5b:47:9b:fd:b3:fe:c9:8f:59:
                    85:3f:a4:4a:78:a2:bc:6f:ec:dd:40:17:fb:46:e3:
                    a3:76:1f:f1:27:d5:6d:ca:84:b5:1e:a2:dd:fb:db:
                    74:6e:ab:3e:68:7c:31:a1:56:69:b8:05:2f:1c:6e:
                    9b:aa:a4:38:eb:b6:c8:91:b6:5d:db:e1:89:8f:ba:
                    1c:3d:f5:0d:3e:96:c9:7a:d5:2d:d9:31:10:86:0c:
                    53:8b:82:3b:5f:ad:6e:92:ed:7d:37:68:7d:8a:c1:
                    7a:29:8e:73:f4:f7:10:ee:02:42:c4:29:90:f9:b7:
                    06:5c:25:77:17:81:83:f8:15:5f:f0:c0:15:cc:d9:
                    98:b0:98:65:86:14:e8:17:70:82:35:2b:a6:38:82:
                    eb:38:8e:4c:3a:12:14:78:82:2b:d8:7b:50:dc:33:
                    1f:63:21:7c:c8:0c:47:62:d8:86:f7:d7:91:7b:1b:
                    77:9c:a0:a0:3d:5c:91:c7:4e:c9:08:19:6f:f6:aa:
                    c0:43:9f:60:5f:ff:90:79:0f:52:52:a0:7d:22:e9:
                    08:e7:93:b0:b8:a0:62:60:25:88:78:86:8f:0e:a4:
                    0f:3b:70:0d:9e:21:5a:a0:6c:2f:62:21:ff:b8:f8:
                    25:5e:34:c9:68:73:3d:51:e4:5a:09:52:30:21:98:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8C:A6:53:A9:FF:97:1E:A3:D4:09:1A:96:AF:A5:2A:8D:FB:6F:CF
            X509v3 Authority Key Identifier:
                keyid:10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:3c:c6:95:0a:f1:6d:a7:f9:bc:74:66:ec:81:b3:1a:15:
         63:02:a8:bc:d5:e4:d6:a8:77:57:74:8f:d2:43:fe:86:0f:fc:
         eb:b9:c7:f8:da:83:46:af:51:43:c1:94:97:26:a3:74:83:16:
         18:1d:aa:f2:71:fe:ad:83:a2:e0:8c:06:d6:d0:e9:22:99:e8:
         e4:db:a7:6b:4f:d6:79:0e:fb:25:ae:84:b0:e0:c2:56:bf:72:
         98:c9:61:46:1b:33:2c:52:43:a5:75:1d:56:e6:7f:16:f3:7e:
         bc:dc:54:76:bc:6d:79:2c:e2:e7:a0:0a:9c:42:65:d0:12:c8:
         80:1c:ce:11:39:9c:24:2d:ee:62:66:0f:b7:77:82:43:97:51:
         31:b9:f0:6b:af:4f:ed:2a:70:3d:57:17:6a:fa:d9:8b:da:fa:
         c4:28:4e:cf:ef:85:bb:ca:a1:d2:c6:5c:be:75:6c:f1:da:d4:
         27:86:7b:0e:e6:d4:5f:5d:7b:ea:6a:7b:a3:fc:bf:f4:b9:34:
         0e:04:f6:77:8f:94:ab:13:66:35:10:e3:d5:43:03:6b:1b:3e:
         cd:d0:fc:19:0d:e5:47:f3:82:38:1a:2c:12:69:e7:c6:34:1a:
         2d:7e:8b:18:db:b2:04:d4:ff:9b:33:a9:f7:e8:0d:25:04:50:
         0c:05:76:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGfB8Pi4c6TI5tBXVbkTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzRlMmM1NjJkZjk0Y2NjYTliNDgyMDgyMTBmZDE2Y2Zi
YTkyMzUwHhcNMjYwNzI4MTkwMDU0WhcNMjYwNzI5MTkwMDU0WjAzMTEwLwYDVQQD
Eyg4NzhjYTY1M2E5ZmY5NzFlYTNkNDA5MWE5NmFmYTUyYThkZmI2ZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukDabgZbR5v9s/7Jj1mFP6RKeKK8
b+zdQBf7RuOjdh/xJ9VtyoS1HqLd+9t0bqs+aHwxoVZpuAUvHG6bqqQ467bIkbZd
2+GJj7ocPfUNPpbJetUt2TEQhgxTi4I7X61uku19N2h9isF6KY5z9PcQ7gJCxCmQ
+bcGXCV3F4GD+BVf8MAVzNmYsJhlhhToF3CCNSumOILrOI5MOhIUeIIr2HtQ3DMf
YyF8yAxHYtiG99eRext3nKCgPVyRx07JCBlv9qrAQ59gX/+QeQ9SUqB9IukI55Ow
uKBiYCWIeIaPDqQPO3ANniFaoGwvYiH/uPglXjTJaHM9UeRaCVIwIZj7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeMplOp/5ceo9QJGpavpSqN+2/PMB8GA1UdIwQY
MBaAFBDE4sVi35TMyptIIIIQ/RbPupI1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1UaXhXTGZsTXpLbTBnZ2doRDlGcy02a2pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84MzAxOTktZTc4Mi00Y2EzLTlhMWMt
NmE1ZDAyMjU4MjBkLzEvRU1UaXhXTGZsTXpLbTBnZ2doRDlGcy02a2pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84MzAxOTktZTc4Mi00Y2EzLTlhMWMtNmE1ZDAyMjU4MjBk
LzEvRU1UaXhXTGZsTXpLbTBnZ2doRDlGcy02a2pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhH08xpUK
8W2n+bx0ZuyBsxoVYwKovNXk1qh3V3SP0kP+hg/867nH+NqDRq9RQ8GUlyajdIMW
GB2q8nH+rYOi4IwG1tDpIpno5Nuna0/WeQ77Ja6EsODCVr9ymMlhRhszLFJDpXUd
VuZ/FvN+vNxUdrxteSzi56AKnEJl0BLIgBzOETmcJC3uYmYPt3eCQ5dRMbnwa69P
7SpwPVcXavrZi9r6xChOz++Fu8qh0sZcvnVs8drUJ4Z7DubUX1176mp7o/y/9Lk0
DgT2d4+UqxNmNRDj1UMDaxs+zdD8GQ3lR/OCOBosEmnnxjQaLX6LGNuyBNT/mzOp
9+gNJQRQDAV2AA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:23 2026 by rpki-client